Usually, the deadline is 60 days - but not 60 days from the purchase. For a U.S. consumer account, the bank generally must receive your notice of an error within 60 days after it sends the periodic statement that first shows the error. Report suspected fraud sooner; the separate two-business-day rule for a lost or stolen access device can affect how much you may owe.
These rules apply to covered consumer accounts at U.S. financial institutions. Other countries use different deadlines and dispute procedures.
Debit card dispute deadlines at a glance
| Time limit | What it controls | What you should do |
|---|---|---|
| Within two business days after learning that an access device was lost or stolen | Potential liability for unauthorized transfers | Notify the bank, block the device, and change credentials if needed |
| Within 60 days after the bank sends the statement first showing the error | Notice deadline for many Regulation E claims | Give the bank notice of the error immediately |
| Within 10 business days after receiving notice | The bank's usual deadline to investigate and determine whether an error occurred | Keep confirmation of your notice and the case number |
| Up to 45 days after notice, when the required provisional credit is provided | The bank's usual extended investigation period | Watch for the written decision and any temporary credit |
| Up to 90 days in certain cases | Point-of-sale debit transactions, foreign-initiated EFTs, and some new accounts | Check the bank's explanation for the longer period |
Your 60-day reporting deadline is different from the bank's investigation deadlines. A card-network dispute may be available too, but don't wait for that process before reporting a possible Regulation E error.
The U.S. 60-day Regulation E rule
The federal error-resolution procedure appears in 12 CFR 1005.11. For an error first reflected on a periodic statement, the financial institution generally must receive your notice no later than 60 days after it sends that statement.
The clock is tied to the statement, not necessarily the purchase date. A transaction made near the end of one month might first appear on the next statement. Locate the statement that first showed the transaction and note when the bank sent it or provided the relevant account documentation.
Your notice needs to give the bank enough information to identify you and the account and understand why you believe an error occurred. Include, if available:
- Your name and account information
- The transaction date and amount
- The merchant or transaction description
- Whether you say the transaction was unauthorized, had the wrong amount, was recorded incorrectly, or involved another error
- The date the statement showing the transaction was sent or provided
Regulation E generally allows oral notice, including a phone call. The bank may require written confirmation within 10 business days of an oral notice. If it does, ask where to send the confirmation and use the bank's secure message system, approved form, or specified mailing address. Keep proof of the call and the written submission.
The separate two-business-day liability rule
The two-business-day rule is tied to learning that a card, PIN, or other access device was lost or stolen. It isn't a universal deadline for every debit-card complaint.
When you report the loss or theft within two business days, your liability for unauthorized transfers is generally limited to the lesser of $50 or the amount of unauthorized transfers made before notice.
Waiting longer can increase the potential liability. If you report within the 60-day statement period, the Regulation E formula can allow the lesser of $500 or:
- $50, or the smaller amount of unauthorized transfers made during the first two business days, plus
- Unauthorized transfers made after those two business days and before you notify the bank
The bank must establish that the later transfers would not have occurred if you had reported the loss or theft on time.
Failing to report an unauthorized transfer within 60 days after the bank sent the statement can expose you to liability for later transfers made after that period and before notice, if the bank can establish that your delay allowed the additional loss. That does not automatically make you responsible for every earlier transaction, but it makes prompt reporting especially important.
What counts as a debit-card error?
Regulation E can cover an electronic fund transfer from a checking, savings, or another covered consumer account. Examples include:
- A debit-card transaction you did not authorize
- An incorrect transaction amount
- A transfer recorded incorrectly
- An electronic transfer omitted from the statement or account records
A purchase disagreement is not automatically an unauthorized transaction. If you authorized the purchase but the goods were defective, late, different from what you ordered, or never delivered, describe those facts accurately. The appropriate route may be the merchant's refund process, the bank's card-dispute process, or a card-network chargeback rather than the unauthorized-transfer protections in Regulation E.
The Fair Credit Billing Act is mainly associated with credit-card billing disputes. It generally is not the federal rule for a debit-card purchase that draws money directly from a bank account.
Visa and Mastercard disputes are separate
A Visa or Mastercard logo does not create one universal U.S. debit-card dispute deadline. Network and issuer procedures can vary by the reason for the dispute, transaction type, evidence, and the bank's process. A claim that every debit-card dispute has a 120-day window is too broad.
A network deadline does not replace the Regulation E notice deadline. Nor does submitting a chargeback guarantee a refund.
Tell the bank what happened and what outcome you're requesting. If the transaction may be an electronic-transfer error, say that you're giving notice under Regulation E. Then ask whether a separate card-network dispute is available and what deadline applies to that process.
What the bank must do after timely notice
After receiving a notice of error, the bank generally must investigate promptly and determine whether an error occurred within 10 business days.
If the bank needs more time, it can generally use an extended investigation period only if it provisionally credits the amount of the alleged error within 10 business days and follows the rule's notice requirements. The usual extended period is up to 45 days. The rule allows up to 90 days for certain point-of-sale debit transactions, foreign-initiated electronic fund transfers, and some new accounts. Some new accounts also have a longer initial period for providing provisional credit.
Provisional credit is temporary, not necessarily a final refund. If the investigation finds no error, the bank may reverse the credit after following the required notice procedures.
When the investigation is complete, the bank generally must tell you the result within three business days. If it finds an error, it must correct the account within one business day. If it finds no error, it must send a written explanation. You can request the documents the bank relied on for that decision.
How to dispute a debit-card charge
1. Find the statement date
Locate the first statement showing the transaction and mark the 60-day deadline. Don't wait until the last day.
If the transaction never appeared on a statement, or you could not access the statement, contact the bank immediately and explain what happened. Give notice while the bank reviews which deadline applies.
2. Protect the account
For suspected fraud, freeze or block the card through the bank's official app or phone number. Ask whether the card, account number, PIN, or digital-wallet token needs to be replaced.
Continue checking the account. New unauthorized transfers should be reported as soon as you see them, even if the bank is still reviewing an earlier transaction.
3. Give the bank clear notice
Use the bank's official dispute channel. A phone call can help stop further activity, but written confirmation gives you a clearer record when the bank accepts it.
You can use wording like this:
I am giving notice of an electronic-transfer error under Regulation E. A transaction for $ at , dated , appears on the statement sent on . I did not authorize this transaction, or the amount is incorrect because ___. Please confirm receipt, open an investigation, and tell me whether written confirmation or additional documents are required.
Don't send your full PIN, online-banking password, or other credentials through ordinary email or an unsecured message.
4. Save the evidence
Keep copies of:
- The statement showing the transaction and its statement date
- The transaction detail from online banking
- A timeline showing when you noticed the transaction and contacted the bank
- Details about when a card or other access device was lost or stolen
- Merchant emails, receipts, cancellation records, or refund promises
- The bank's case number, representative's name, and call dates
- Any police or identity-theft report you made
Keep the original files. Submit only what the bank requests through a secure channel.
5. Track the investigation
Ask when the bank received your notice, whether provisional credit will be issued, and when the written decision is due. If you receive temporary credit, keep monitoring the account in case the bank later explains a reversal.
What to do if you missed the 60-day deadline
Report the transaction anyway. A late notice may still receive a voluntary review, a merchant response, or a separate card-network review. The bank may also consider why you did not report it sooner.
Explain the delay with specific facts, such as:
- You did not receive or could not access the statement
- The transaction was concealed or difficult to identify
- You were dealing with illness, incapacity, or another serious problem
- You discovered a continuing pattern of fraud only later
- The bank gave you incorrect reporting instructions
These circumstances don't automatically restore Regulation E protection. Send the claim as soon as possible and ask the bank to state in writing whether it is declining the claim because of the deadline.
If unauthorized transfers are continuing, report each new transaction immediately. Don't wait to assemble perfect evidence or finish an appeal about an earlier charge.
If the bank denies the dispute
Begin with a written appeal to the bank. Identify the transaction, explain why the decision is wrong, and attach the statement date and any evidence the investigator may have missed.
When the bank says no error occurred, request the written explanation and the supporting documents available under the Regulation E error-resolution procedure. If the bank rejected the claim solely because it was late, ask for that reason in writing and request a supervisory review.
You can also consider submitting a complaint to the Consumer Financial Protection Bureau about the bank's handling of the matter. A complaint gives the company another opportunity to respond, but it doesn't guarantee a refund, decide private legal liability, or replace a court filing deadline.
Other routes depend on the facts:
- Merchant: Useful for authorized purchases involving non-delivery, cancellation, defective goods, or a promised refund.
- Card-network dispute through the bank: Ask whether a chargeback is still available and which issuer deadline applies.
- State or federal bank regulator: The appropriate regulator depends on the institution's charter and supervision.
- Legal aid or a lawyer: Consider help for a substantial loss, repeated unauthorized transfers, or a dispute involving complicated evidence. Court deadlines vary by state and claim type.
A longer deadline for a possible court claim does not necessarily restore the bank's Regulation E error-resolution obligations after the 60-day notice period.
Common mistakes to avoid
- Counting 60 days from the transaction date instead of the statement date
- Reporting only to the merchant and not to the bank
- Calling the bank but ignoring a request for written confirmation
- Describing an authorized purchase disagreement as fraud
- Assuming a Visa or Mastercard deadline applies to every issuer
- Treating provisional credit as a final decision
- Waiting to report new unauthorized transactions until an earlier dispute is resolved
- Sending sensitive account credentials through ordinary email
Quick answers
Is the debit-card dispute deadline 60 days from the purchase?
Usually not. For an error shown on a periodic statement, the Regulation E notice period is generally 60 days after the bank sends the statement showing the error.
Can I dispute a debit-card charge after 60 days?
You can still report it and ask for a review. The bank may not be required to use Regulation E's error-resolution process for a notice received after the deadline, but a merchant resolution or separate card-network process may remain available.
Does every debit-card dispute have a 120-day deadline?
No. Network rules and issuer procedures vary. Ask the bank about any card-network process, but report a possible Regulation E error as soon as you discover it.
Can I dispute a debit-card charge by phone?
Generally, yes. Regulation E permits oral notice, although the bank may require written confirmation within 10 business days. Ask for the instructions and keep a record of the call.
What source controls the federal deadline?
The notice, investigation, provisional-credit, and documentation rules are in 12 CFR 1005.11. Related Regulation E liability rules address the effect of late notice and the loss or theft of an access device.
If the statement showing the transaction is still within the 60-day period, send the bank notice today through its official channel, save the confirmation, and keep watching the account for additional transfers.