If a U.S. bank, debit-card, or credit-card transaction isn't yours, call the provider through its official fraud channel and then send written notice through the channel that controls the claim. Ask for a case number and instructions for blocking or replacing the card. Don't assume that an ordinary email to customer service satisfies a formal credit-card billing dispute.

The payment method determines the rule:

• Credit card: Send written notice to the billing-inquiries address on the statement. The Fair Credit Billing Act (FCBA) generally gives you 60 days after the first statement containing the error was sent.
• Debit card or bank electronic transfer: Report the transaction promptly. Regulation E has separate liability, provisional-credit, and investigation rules.
• PayPal: Use PayPal's current in-account dispute process. If the linked card or bank account also shows a transaction, notify that provider under its own deadline and procedure.

Copy-and-paste bank dispute email

Use this notice for an unauthorized transaction on a bank account or debit card. It can also be adapted for a credit-card dispute, but a credit-card notice should go to the statement's billing-inquiries address rather than only to a general fraud email.

Subject: Dispute of unauthorized transaction on [date] - account ending [last four digits]

Dear [Fraud Claims Team or Billing Inquiries Department],

I am writing to report and dispute a [posted or pending] transaction of [$amount] on [transaction date] with [merchant or transaction description]. It appears on my [checking account, debit card, credit card, or other account] ending in [last four digits]. The transaction appears on the statement sent on [statement date], if applicable.

I did not make or authorize this transaction, and I did not give anyone permission to make it on my behalf. [If applicable: I still have the card in my possession. The card was lost or stolen on [date], and I reported the loss through [method].]

Please open an investigation, protect the account or card from further unauthorized activity, and correct or reverse the transaction if you determine that an error occurred. If you conclude that no error occurred, please send me the written basis for that decision and identify the records you relied on.

If this is a debit-card or electronic-transfer claim and the investigation will take longer than the initial investigation period, please tell me whether provisional credit applies and when it will be provided. Please also tell me if you need written confirmation or other information through a secure channel.

Account and contact information

• Name: [full name]
• Account or card ending in: [last four digits only]
• Mailing or billing address: [address]
• Phone: [phone number]
• Secure email or mailing address: [contact information]
• Date I discovered the transaction: [date]
• Claim or fraud-report number, if already assigned: [number]

Attachments

• [Copy of the statement page with the transaction marked]
• [Transaction details or account alert]
• [Relevant merchant correspondence or other supporting document]

Please confirm receipt of this dispute, provide a case number, and tell me if you need additional information.

Sincerely,
[Full name]

Send copies, not originals, and keep the email, secure-message confirmation, mailed letter, tracking information, attachments, and case number.

Don't include your full account number, Social Security number, PIN, password, or one-time verification code in an ordinary email. Provide identification only through the bank's or payment service's secure channel when requested.

Send the notice through the right channel

Credit card: Use the billing-inquiries address printed on the statement or listed in the issuer's billing-error instructions. That may be different from the address used for payments. If the issuer accepts a secure message or email as a formal dispute, follow its instructions and save the confirmation.

Debit card or bank electronic transfer: Call the number on the back of the card, the statement, or the bank's official website. Ask whether the bank wants a secure message, mailed letter, or other written confirmation. Keep a record of the call, including the date, representative, and claim number.

PayPal: Use PayPal's current Resolution Center or official in-account support flow. Don't rely on an old email address or a template that does not match PayPal's current process.

Which deadline and rule applies?

The federal 60-day period is generally measured from the date the statement was sent, not the date you noticed the transaction. Report the problem as soon as you find it anyway. Debit-card liability can increase when reporting is delayed.

Credit-card disputes under the FCBA

An unauthorized credit-card charge is generally treated as a billing error. To use the FCBA written-dispute procedure, the issuer must receive your notice within 60 days after the first bill containing the error was sent.

Send the notice to the billing-inquiries address on the statement. A phone call or general fraud email may alert the issuer, but it may not be the designated address for an FCBA notice. If you're unsure where to send it, call the number on the back of the card and ask for the billing-error address.

The issuer generally must:

1. Acknowledge the dispute in writing within 30 days, unless it has already resolved the matter.
2. Investigate the claim.
3. Complete the investigation within two complete billing cycles and no later than 90 days.
4. Correct the account or explain in writing why it believes no error occurred.

While the issuer investigates, pay the undisputed portion of the bill on time. Under the FCBA procedure, you can generally withhold the disputed amount and related finance charges while the investigation is pending. Don't stop paying the entire balance unless the issuer explains how it will handle the account.

Federal law generally limits liability for unauthorized credit-card use to $50. Some issuers and card networks offer broader zero-liability protection under their own terms, but you should still report the charge promptly.

The FTC sample letter for disputing credit and debit card charges shows the basic format: identify the account and transaction, describe the problem, request correction, and list supporting documents. The FTC also explains the credit-card billing-error process.

Debit-card and bank-transfer disputes under Regulation E

A debit-card transaction takes money from a deposit account, so it generally isn't handled like a credit-card billing error. Regulation E covers many consumer electronic fund transfers, including many debit-card and ATM transactions, but coverage depends on the account and the type of transfer.

Call the bank's official number immediately. Ask it to block or replace a compromised card, protect the account, and give you a fraud claim number. Use only numbers from the back of the card, a statement, or the bank's official website. For example, Wells Fargo's fraud reporting guidance tells customers to report suspected unauthorized transactions immediately using an official contact number.

Your potential liability can depend on when you report the problem:

• If a card or access device was lost or stolen, reporting it within two business days after learning of the loss generally limits liability to no more than $50.
• Reporting after two business days but within 60 days after the statement was sent can expose you to as much as $500.
• Waiting beyond 60 days can result in greater liability for later transfers, depending on the circumstances.

For a reported electronic-transfer error, the bank generally has 10 business days to investigate. If it can't complete the investigation within that period, it generally must provide provisional credit within the period and complete the investigation within 45 calendar days. Longer periods can apply to certain new-account, point-of-sale, and foreign-transaction claims. Ask the bank which timetable applies to your claim.

Provisional credit is temporary. The bank can reverse it if the investigation finds no error, so continue monitoring the account and keep the written decision.

A transfer you personally approved after being tricked by a scam may be treated differently from a transaction made without your permission. Report it immediately and ask the provider about its recovery process, but don't assume the unauthorized-transaction rules guarantee a refund.

PayPal unauthorized transaction template

PayPal's account terms and dispute process control claims involving unauthorized activity inside PayPal. Use PayPal's in-account Resolution Center or official support flow rather than an old email address.

Subject: Unauthorized PayPal transaction [transaction ID] - [$amount] on [date]

Hello PayPal Disputes Team,

I am reporting transaction [transaction ID], dated [date], for [$amount] to [merchant or recipient]. I did not make or authorize this transaction.

Please investigate this as unauthorized account activity, restrict further unauthorized access if necessary, and confirm the case number and next steps. I have [changed my password, enabled available security features, removed an unfamiliar device, or taken another action] to protect the account.

I have attached [transaction details or a redacted account record]. Please let me know if you need additional information through a secure channel.

Sincerely,
[Name]
[PayPal account email]

PayPal's purchase-protection process and its unauthorized-transaction process aren't necessarily the same. Choose the claim type that accurately describes what happened.

If the PayPal transaction was funded by a credit card or bank account, check that funding account too. You may need to notify the card issuer or bank within its own deadline. Tell each provider if you opened a related claim, and report any refund or credit so you don't receive duplicate recovery.

Make sure "unauthorized" is the right claim type

An unfamiliar merchant name isn't always fraud. Before submitting the dispute, check:

• The merchant's legal or parent-company name on the statement.
• Recurring subscriptions, free trials, or annual renewals.
• Purchases made by an authorized household member.
• Digital-wallet transactions that display a different description.
• Pending transactions that may change or disappear before posting.

If you recognize the purchase but the amount is wrong, the charge is duplicated, the goods weren't delivered, or you returned the goods, describe that problem accurately. Contacting the seller can help, but don't let a merchant conversation make you miss the bank or card issuer's deadline. Keep copies of receipts, delivery information, return records, emails, and the seller's response.

How to send and track the dispute safely

1. Secure the account first. Freeze or replace a compromised card, change the PIN if appropriate, update the bank or PayPal password, and remove unfamiliar devices or digital wallets.
2. Call the official provider. Ask for the claim number, the date the claim was opened, and the correct address or portal for written notice.
3. Check the transaction details. Save the statement page, transaction ID, amount, date, account alerts, and a short timeline of what you did and did not authorize.
4. Use the correct channel. For a credit card, use the billing-inquiries address on the statement. For a debit account, use the bank's fraud line or secure portal and follow any instruction to confirm the report in writing. For PayPal, use its Resolution Center.
5. Keep proof of delivery. Save the email, secure-message confirmation, mailed letter, tracking information, attachments, and case number. Keep your originals.
6. Watch the account. Look for additional unauthorized transactions, provisional credits, reversals, and requests for information.

An issuer may offer an app-based dispute button. That can be convenient, but read the confirmation carefully and check whether it serves as the issuer's formal written billing-error notice. Chase's dispute guidance illustrates why issuer-specific online instructions matter.

Follow-up email if the claim is delayed

Subject: Follow-up on unauthorized transaction claim [case number]

Dear [provider or claims department],

I reported an unauthorized [charge or electronic transfer] on [date] for [$amount] from [merchant or description]. The account ends in [last four digits], and my claim number is [number].

Please confirm the current status, the expected investigation-completion date, and whether any provisional credit has been applied or is required. If you need more information, please identify the specific document or fact requested and provide a secure submission method.

Please send the final decision and any supporting explanation in writing.

Sincerely,
[Name]

For a credit card, follow up if you don't receive the expected acknowledgment within 30 days or a decision within the FCBA investigation period. For a debit claim, ask why the bank hasn't completed the initial investigation or provided provisional credit when the extended timetable applies.

If the provider denies the claim, request the written decision and the records used to reach it. Compare those records with your timeline and submit new evidence through the provider's appeal process, if one is available. Keep paying any undisputed credit-card balance.

If the company doesn't respond or mishandles the complaint, you can submit a complaint to the Consumer Financial Protection Bureau or the financial institution's regulator. A regulatory complaint may prompt a response, but it doesn't guarantee a refund or replace the bank's dispute process.

Common questions

Is an email enough for a credit-card dispute?

Not always. A phone call can start the fraud process, but FCBA written-notice protection depends on sending the dispute to the issuer's designated billing-inquiries address within the required period. Use email or a secure message only when the issuer confirms that channel is accepted for formal disputes.

Does the 60-day period begin when I notice the charge?

Usually, the federal credit-card period is measured from when the first statement containing the error was sent. A similar statement-based deadline applies to many Regulation E errors. Report the transaction immediately because debit-card liability can increase with delay.

Will the bank refund the money immediately?

There is no universal instant-refund guarantee. A debit bank may provide provisional credit while it investigates if the Regulation E extended timetable applies. A credit-card issuer may remove or credit the disputed amount after reviewing the billing error. Temporary credits can be reversed.

Can I use this template for several transactions?

Yes, but list each transaction separately with its date, amount, merchant description, and transaction ID. If the transactions involve different cards, accounts, or payment services, send separate notices so each provider can identify the correct claim.

This is general information for U.S. consumers, not individualized legal advice. Account agreements, state law, and the type of transfer can change the process. Start with the official number on the card or statement today, then send the written notice through the provider's required channel and save proof that it was received.