Yes. In the United States, you can dispute a transaction you didn't authorize. Whether you get the money back depends on the payment method, how quickly you report it, and whether you actually approved the payment.

Credit card charges generally use the Fair Credit Billing Act (FCBA) billing-error process. Many debit card, ATM, and ACH transactions from a personal account fall under Regulation E. Zelle, Venmo, PayPal, wire transfers, and cryptocurrency can add separate platform rules and recovery limits.

Report the transaction as soon as you find it. Early notice can limit your liability, protect the account from further use, and give the bank a better chance of stopping related payments.

Act quickly after you find the transaction

Start with the financial institution or provider that handled the payment:

1. Call the official fraud department. Use the number on the back of your card or the provider's official app or website. Don't rely on a phone number in a suspicious text or email.
2. Ask what protective steps are available. The bank may be able to freeze or replace a card, secure online banking, block future ACH debits, or open a formal fraud claim.
3. Create a written record. Submit the dispute through the provider's system or send written notice. A phone call can start the process, but written notice makes the timing and facts easier to prove.
4. Secure related accounts. Change exposed passwords, turn on multifactor authentication, sign out unknown devices, and contact your mobile carrier if your phone or SIM card may have been taken over.
5. Save the evidence. Keep the statement, transaction details, confirmation numbers, emails, texts, screenshots, and copies of every form or letter.
6. Ask for a claim number and deadline. Write down the representative's name, the date and time of the call, and when the institution expects to respond.

A pending charge is worth reporting too. An authorization hold may disappear without posting, but a pending transaction can still signal that a card or account has been compromised.

Check whether the transaction is really unauthorized

An unfamiliar merchant descriptor isn't automatically fraud. Before filing, check whether it could be:

• A different billing name used by the store or payment processor
• A subscription or free trial that changed to paid billing
• A hotel, rental-car, restaurant, or gas-station authorization hold
• A purchase made by an authorized joint-account holder or family member
• A payment you personally sent after being deceived by an impersonator

Generally, a transaction is unauthorized when another person initiated it without your permission. A payment you approved yourself, even after a scammer misled you, may be classified differently by the bank or app.

Give an accurate account of what happened. Don't describe an approved payment as an account takeover just because you regret sending it. That distinction can determine whether FCBA or Regulation E applies and whether a provider's reimbursement policy covers the loss.

Match the payment to the right rule

These federal protections generally concern personal consumer accounts. Business accounts may be governed by a different agreement and different legal protections.

Dispute an unauthorized credit card charge

Your card issuer is usually the right first contact, not Visa, Mastercard, or American Express. The card network may have operational procedures, but the FCBA's formal billing-error process runs through the issuer.

For that process:

1. Call the issuer's fraud department. Ask it to block the card, issue a replacement, and investigate or remove the charge.
2. Send a written billing-error notice. Use the billing-inquiries address on your statement. That address may not be the same one used for payments.
3. Meet the 60-day deadline. Your notice must reach the issuer within 60 days after the first statement containing the charge was sent to you. Keep a copy and use a delivery method that shows when the issuer received it.
4. Describe the charge clearly. Include the account number, merchant, date, amount, and a short statement that you didn't authorize the transaction.
5. Pay the undisputed balance. Continue paying unrelated charges while the issuer reviews the claim.

The FTC's guidance on using credit cards and disputing charges describes the written-notice process. An issuer generally must acknowledge a proper billing-error notice within 30 days unless it has already resolved the problem. It generally must resolve the dispute within two complete billing cycles and no more than 90 days.

Federal law generally limits liability for unauthorized credit card use to $50. If only the card number was used and the physical card wasn't lost or stolen, federal law generally provides no liability. Many issuers voluntarily offer $0 fraud liability, but those company policies can have conditions.

Dispute debit card, ATM, and ACH fraud under Regulation E

Regulation E covers qualifying electronic fund transfers involving a consumer account. That can include many debit card purchases, ATM withdrawals, ACH debits, and certain transfers made through digital payment services.

Tell the bank:

• Which account and transaction are involved
• The date, amount, and transaction description
• Why you believe the transfer was unauthorized
• Whether your card, phone, login, or another access device was lost or compromised
• Whether other transactions may be connected

The bank generally must accept an oral error report, although it may ask you to confirm the report in writing within a specified period. If it asks for written confirmation, send it promptly.

Regulation E liability deadlines

Two different timing rules often matter:

• Within two business days after learning that an access device was lost or stolen: Liability is generally limited to no more than $50.
• After two business days but within 60 days after the statement showing the unauthorized transfer was sent: Potential liability can rise, generally to as much as $500 for transfers before notice.
• After the 60-day statement deadline: The consumer may be responsible for later transfers that could have been prevented by earlier notice.

The exact result depends on when the bank sent the statement, when you learned about the loss, which transfers occurred before notice, and whether late notice caused additional losses. If you still have your card but see an unauthorized ACH debit, don't wait for the 60-day deadline; report it immediately.

Once the bank receives an error notice, it generally has 10 business days to investigate. If it needs more time, it generally must provide provisional credit and may take up to 45 calendar days to finish. Certain point-of-sale debit card, foreign-initiated, and new-account investigations can have longer periods. A new account may also give the bank more time before provisional credit is required.

Provisional credit isn't necessarily a final refund. The bank can reverse it if it concludes that no error occurred, but it should provide the required notice and explanation. The Federal Reserve's official staff commentary on Regulation E provides technical background on electronic access devices and stored-value products.

Zelle, Venmo, PayPal, and other P2P payments

The app's name doesn't answer the dispute. Start with four facts: who initiated the transfer, which account or card funded it, whether you pressed the send button, and what the provider's current policy says.

If a fraudster accessed your bank or P2P account and sent the money without your involvement, report it to both the provider and the linked financial institution. Tell the bank that you're reporting a potentially unauthorized electronic fund transfer and ask whether Regulation E's error-resolution procedure applies.

The situation is different when you personally approve a payment after a scammer impersonates your bank, employer, relative, or a government agency. The provider may classify that payment as authorized. Still, report it and request a review under the provider's reimbursement policy. Neither Regulation E nor a credit card dispute automatically guarantees a refund for a payment you approved.

For a Zelle payment shown inside a bank's app, begin with that bank's fraud department. For Venmo, PayPal, or another separate app, open an in-app claim and notify the bank or card issuer that funded the transaction. A provider may have its own deadline or documentation requirements. An app claim also doesn't replace timely notice to the linked bank account or credit card.

Consumer Reports has documented that P2P services often distinguish account takeover from payments customers were deceived into authorizing. Its review of P2P fraud policies offers useful context, but the provider's current terms and the facts of your transaction control the individual claim.

Wire transfers and international payments

Call the sending bank's wire or fraud department immediately. Ask whether it can:

• Send a wire recall or cancellation request
• Contact the receiving institution
• Trace the transfer
• Place an available hold on related funds
• Tell you what records or statements it needs

A recall is a request, not a guaranteed reversal. Recovery usually depends on how quickly the bank acts, whether the recipient's account still contains the money, and whether the receiving institution cooperates.

The 60-day credit card and debit-account rules don't automatically apply to every wire. Ask the bank which part of the transaction it is treating as the alleged error: an unauthorized withdrawal, an unauthorized online instruction, or a wire that you personally approved.

If a scammer persuaded you to authorize the wire, describe exactly what you were told and what you did. A personally authorized wire can be much harder to recover than one sent by an intruder who accessed the account.

Cryptocurrency transactions

Separate the funding transaction from the crypto transfer.

If someone used your credit card, debit card, or bank account to buy cryptocurrency without permission, dispute that unauthorized funding transaction with the issuer or bank. Report the exchange account takeover as well.

If you personally approved the crypto transfer after being deceived, the exchange's policy and the recipient's cooperation may determine whether any recovery is possible. A completed blockchain transfer generally can't be canceled in the same way as a card purchase. Contact the exchange immediately, preserve the wallet addresses and transaction ID, secure the account, and report the fraud to the financial institution involved.

Evidence that can support the claim

A short timeline is usually more useful than a pile of unrelated files. Include the transaction date and amount, when you noticed it, when you reported it, and what the institution told you.

Depending on the situation, useful records include:

• The statement or transaction screenshot
• The merchant descriptor and reference number
• Login alerts, device records, location notifications, and password-reset emails
• Messages showing impersonation or unauthorized instructions
• Proof that you reported a lost card, phone, or account access
• A police or identity-theft report when theft or impersonation is involved
• A signed statement or affidavit if the bank requests one
• Confirmation numbers and copies of dispute correspondence

A police report can support a claim, but don't wait for one before notifying the bank. There is no general rule that every unauthorized transaction requires a police report.

If the bank denies the claim

Ask for the decision in writing. The response should identify the transaction and explain why the bank concluded that no error occurred. For a Regulation E claim, request the documents the bank relied on in reaching its decision.

Then submit a focused request for reconsideration. Address the stated reason for denial with dates, account records, device information, and a clear explanation of whether you did or did not authorize the transfer.

Use the correct dispute category. If the issue is that a product or service wasn't delivered, the matter may be a merchant or billing dispute rather than an unauthorized-transfer claim. If another person accessed your account and sent the money, describe that fact directly.

You can also:

• File a complaint with the CFPB if a bank mishandles a covered consumer transfer, misses a required deadline, or refuses to explain its investigation
• Contact the appropriate banking regulator or state consumer-protection office when the complaint concerns a regulated bank or a provider outside the CFPB's process

A regulatory complaint may prompt a response, but it doesn't guarantee reimbursement. Keep pursuing any time-sensitive dispute rights while the complaint is pending.

Mistakes that can weaken a dispute

• Reporting only to the merchant instead of the card issuer, bank, or provider
• Waiting for a pending transaction to post before securing a compromised account
• Relying on a phone call without saving a written record or claim number
• Missing the credit card's 60-day notice period or the Regulation E statement deadline
• Calling a payment unauthorized when you actually approved it after a scam
• Treating provisional credit as a final refund
• Stopping payment on the entire credit card balance instead of paying undisputed charges
• Sending altered screenshots or leaving out relevant facts
• Continuing to use a compromised password, email account, phone, or device

Your next move

Call the official fraud department today. Give a precise account of what happened, including the payment rail and whether you personally approved the transfer. Get the claim number and deadline, then send the required written notice or complete the provider's dispute form. Save proof that the notice was submitted and keep monitoring the account for related transactions.