The short answer

For a covered electronic fund transfer from a U.S. consumer account, the main federal notice deadline is usually 60 calendar days after the financial institution sent the statement that first showed the error. This Regulation E rule can apply to many unauthorized ACH debits, debit-card and ATM transactions, and some online or peer-to-peer payments.

Report suspected fraud as soon as you see it. If a debit card, PIN, or other access device was lost or stolen, notice within two business days after learning of the loss can limit liability to $50. Waiting longer can raise potential liability to as much as $500. Missing the 60-day statement deadline can also leave you responsible for later unauthorized transfers that might have been stopped with earlier notice.

Traditional bank wires are different. A wire may fall outside Regulation E, so the 60-day rule doesn't automatically protect every wire. Ask the bank to attempt a recall or recovery immediately.

The information below applies to U.S. consumer accounts used mainly for personal, family, or household purposes. UK, EU, Colombian, and other non-U.S. accounts follow different payment-services rules and complaint procedures.

Bank transfer dispute deadlines at a glance

Situation Clock What it means
Lost or stolen card, PIN, or access device 2 business days after learning of the loss Prompt notice can limit liability to $50
Covered unauthorized EFT appears on a statement 60 calendar days after the statement was sent Notify the financial institution of the error under Regulation E
Notice given by phone The bank may request written confirmation within 10 business days Send it promptly; failing to do so can affect provisional-credit rights
Initial investigation 10 business days after proper notice The bank generally must determine whether an error occurred
Extended investigation Usually 45 calendar days, with some cases allowing 90 days The bank generally must provide provisional credit under the applicable conditions
ACH or wire recovery Immediately after discovery Network returns and wire recalls can use separate procedures and deadlines

The 10-business-day investigation period belongs to the bank. It isn't the time limit for you to file the dispute. Your notice deadline for a covered error is usually tied to the statement date, not the bank's investigation schedule.

What Regulation E covers

Regulation E, 12 C.F.R. part 1005 covers many electronic fund transfers, or EFTs, involving a qualifying consumer account. Depending on how the payment was initiated, covered transactions can include:

The same protections don't automatically apply to every type of payment. Business accounts may have different coverage. Paper checks, credit-card billing disputes, remittance transfers, and traditional bank wires can be governed by other rules or exclusions.

A bank-transfer dispute also isn't the same thing as a credit-card chargeback. Use the bank's error-resolution or fraud process, and describe the payment accurately.

The 60-day statement rule

For a covered error, the 60-day period generally starts when the financial institution sends the periodic statement that first reflects the alleged error. It doesn't necessarily begin on the day the transfer occurred.

When you report the problem, give the bank:

  1. Your name and the affected account
  2. The date and amount of the transfer
  3. The recipient, merchant, or transaction description
  4. The reason you believe the transaction was an error
  5. The date you first noticed the problem

You can usually give notice orally or in writing. Written notice through the bank's secure-message system, its designated dispute address, or a branch creates a useful record. If you call, ask whether the bank requires written confirmation and where it must be sent. Keep the confirmation within reach rather than waiting until the claim is being reviewed.

The two-business-day access-device rule

An access device can include a debit card, PIN, code, or another means of accessing the account. If you learn that the device was lost or stolen and notify the bank within two business days, liability for unauthorized transfers may be limited to $50.

If notice comes after two business days but within 60 days after the statement was sent, potential liability can rise to as much as $500. The exact amount depends on the transfers and when you reported them. If you don't report the problem within the 60-day statement period, you may be responsible for later transfers that could have been prevented.

A compromised password or one-time code deserves an immediate call too. You don't have to wait for an unauthorized transaction to appear before securing the account.

Unauthorized transfer versus a scam you authorized

The facts behind the payment matter more than the label used in a dispute.

A fraudster who uses stolen credentials may have initiated an unauthorized EFT. A payment you personally approved after being deceived may be handled differently. Regulation E doesn't automatically guarantee reimbursement for every scam.

Give the bank a straightforward account of what happened. Don't call an approved payment "unauthorized" only because the recipient lied. Say that you authorized the payment after deception, then ask about a recall, fraud investigation, and any reimbursement process that may apply.

ACH disputes and recovery

For an unauthorized ACH debit from a personal account, contact the bank as soon as the entry appears. The Regulation E notice period is generally measured from the statement date. An ACH network return may use a separate clock tied to the settlement date and the type of entry, so the two processes can run at the same time.

Ask the bank:

Blocking a future debit doesn't resolve one that already posted. If the debit was authorized but the amount, date, or terms were wrong, describe that specific error instead of reporting the entire entry as unauthorized.

An ACH credit or person-to-person payment that you sent to a scammer is more fact-specific. Ask the originating bank to contact the receiving institution right away. A return request is an attempt to recover the money, not a guaranteed refund.

Peer-to-peer payments

Some peer-to-peer transactions qualify as electronic fund transfers and may receive Regulation E protection. Report an account takeover or payment you didn't authorize to both the payment service and the bank that funded the transaction.

Save the transaction ID, recipient details, messages, phone numbers, and screenshots. Tell the bank whether you:

The platform's support process doesn't replace timely notice to the bank.

Wire transfers and SWIFT payments

A traditional bank wire can fall within the wire-service exclusion in Regulation E, including the exclusion in section 1005.3(c)(3). Don't assume that every consumer wire has the same federal error-resolution protection as an ACH debit.

The classification can depend on the service and the way the transfer was initiated. An online service designed primarily for consumer payments may raise different questions from a conventional bank-to-bank wire. If the bank denies the claim, ask it to identify the rule, account-agreement term, or transaction classification supporting that decision.

Whether or not Regulation E applies, take these steps immediately:

  1. Call the bank's fraud or wire department using a number from your statement or the bank's official website.
  2. Request a wire recall, hold, or recovery attempt.
  3. Ask the bank to contact the receiving institution and, if relevant, any intermediary banks.
  4. Preserve the payment instructions, email headers, texts, call records, and beneficiary details.
  5. If the fraud involved a compromised email account or impersonated business instructions, report it to law enforcement. FinCEN's business email compromise advisory describes how criminals compromise email accounts and induce fraudulent wire transfers.

A recall is an effort to recover the funds, not a guaranteed reversal. International and SWIFT transfers may pass through several institutions and time zones, which makes the first call especially time-sensitive.

How to file a bank transfer dispute

1. Secure the account

Call the bank when you detect suspicious activity. Ask about freezing online access, changing credentials, replacing a debit card, blocking future ACH entries, and securing linked accounts.

If you suspect malware, use a clean device to change passwords. Don't use a phone number or link supplied in a suspicious email or text.

2. Give clear notice

Tell the bank you're reporting a possible error and provide the transaction details. For a transfer you didn't authorize, you could say:

I am notifying you of an error under Regulation E. I did not authorize the electronic fund transfer of [amount] on [date]. Please investigate the transaction and tell me where to send any required written confirmation.

If you approved the transfer after being deceived, describe it that way:

I authorized this transfer after being deceived by a fraudster. Please open a fraud-recovery investigation and explain the available recall and reimbursement options.

3. Confirm the report in writing

Follow the bank's instructions for written notice. Use the last four digits of the account rather than sending a full account number through ordinary email.

Keep the letter or secure message, submission date, delivery confirmation, claim number, and the names of representatives you contact. Those details can matter if the bank later says it received notice on a different date.

4. Ask about provisional credit

If the bank needs more than the initial 10-business-day period, ask whether Regulation E requires provisional credit. Under the applicable conditions, the bank generally must credit the amount of the alleged error within 10 business days while it continues investigating. For some new accounts, that period can be 20 business days. If the bank requested written confirmation of an oral report, send it promptly.

Provisional credit isn't necessarily final. After completing the investigation, the bank may reverse it if it gives you a written explanation that no error occurred.

5. Gather the records that clarify the timeline

Useful evidence includes:

Don't delay the initial report while gathering every document. The statement date and the date you notified the bank are usually more urgent than a complete evidence file.

What happens after notice?

After receiving proper notice, the bank generally must investigate promptly and determine whether an error occurred within 10 business days. It can give a final response sooner if the investigation is complete.

If it needs more time, Regulation E generally allows up to 45 calendar days. The period can extend to 90 days for certain cases, including some new-account, point-of-sale, and foreign-initiated transactions. The bank generally must provide provisional credit under the applicable conditions and give you access to those funds while the investigation continues.

If the bank finds an error, it generally must correct the account within one business day after making that determination and notify you. If it finds no error, it must send a written explanation and tell you how to request the documents it relied on.

Read the final letter closely. If the bank says you authorized the payment, ask for the transaction details and the specific reason for that conclusion. If it reverses provisional credit, request the written investigation results and supporting records.

If you missed the deadline

Report the transfer anyway. The bank may review a late claim under its own procedures, but don't assume it must provide the same Regulation E remedy after the federal notice period has passed.

When you contact the bank, explain:

If a statement was never sent, wasn't available, or didn't identify the transaction clearly, say so. The timing analysis may be different.

Missing the federal notice period doesn't necessarily eliminate every contract, state-law, insurance, or recipient claim. There isn't one U.S. statute of limitations for every type of fraud or transfer dispute. For a large wire or a business-related loss, a lawyer can assess the separate deadlines.

If the bank denies the claim, make a written appeal and keep the response. You can also complain to the Consumer Financial Protection Bureau or the bank's appropriate federal or state regulator. A regulatory complaint can document the dispute, but it doesn't restart a missed deadline or guarantee reimbursement.

Reduce the chance of another unauthorized transfer

Turn on transaction and login alerts. Use unique passwords, and never share a one-time verification code with an unexpected caller or message sender. For a high-value wire, independently call the intended recipient using a known phone number to verify the account and amount.

If a message changes payment instructions, verify the change through a separate channel. Business accounts may need additional controls because their legal protections and bank agreements can differ from those for consumer accounts.

Common questions

Does the 60-day deadline start on the transfer date?

Usually not. For a covered Regulation E error, the period generally starts when the bank sends the periodic statement that first shows the alleged error. Report the transaction as soon as you find it instead of waiting for the deadline.

Can I dispute an ACH debit after 60 days?

Contact the bank even if the 60 days have passed. Federal error-resolution and liability protections may be limited after the notice period, and an ACH network return may use a separate settlement-based clock.

Does Regulation E cover every wire transfer?

No. Traditional bank wires may fall within Regulation E's wire-service exclusion. The service, account, and method of initiation matter. Ask the bank to explain its classification rather than assuming the ACH deadline applies.

Is 10 business days the time I have to file?

No. Ten business days is generally the bank's initial investigation period. For a covered error, your main consumer notice deadline is usually 60 days after the statement was sent.

What if I authorized a payment because of a scam?

Tell the bank exactly how the payment was made and ask for an immediate recall or fraud review. If you personally approved the transfer, don't assume the unauthorized-EFT rule guarantees a refund.

Primary sources