If an unfamiliar debit card charge appears, contact your bank or credit union immediately, not just the merchant. For U.S. consumer deposit accounts, the Electronic Fund Transfer Act and Regulation E govern unauthorized debit-card transactions and set rules for reporting, investigation, and provisional credit.

An authorized purchase that went wrong, such as a missing delivery or defective product, usually follows a different bank or card-network dispute process. It isn't automatically an unauthorized-transfer claim.

These steps are for U.S. consumer deposit accounts. Business accounts, wire transfers, some prepaid products, peer-to-peer payments, and non-U.S. accounts may follow different rules. This is general consumer information, not legal advice.

Your first five minutes

  1. Check the transaction details. Write down the amount, date, merchant descriptor, and whether the transaction is pending or posted. A familiar merchant may appear under a different billing name, so check receipts and subscriptions before describing a payment as fraud.
  2. Secure the account. Lock the card in the bank's official app if that option is available. Call the number on the back of the card or use the bank's official website to report a lost card, stolen card, or suspected card-data theft. Ask whether the card should be replaced and whether your PIN or online-banking credentials need to be changed.
  3. Notify the bank. Ask for a debit-card fraud or transaction-dispute claim number. Tell the representative whether you deny authorizing the electronic fund transfer or whether you authorized the purchase but are challenging the merchant's performance.
  4. Save proof. Take a screenshot of the transaction and keep emails, receipts, order records, delivery information, and every message from the bank or merchant.
  5. Monitor related activity. Review the account for additional unfamiliar withdrawals or purchases. Turn on transaction alerts and multi-factor authentication where available.

The FTC's guidance on lost or stolen debit cards also recommends reporting unfamiliar charges as soon as you discover them.

Identify the type of debit card dispute

The correct description matters. Don't call an authorized transaction fraud simply because the merchant did not resolve a problem.

Situation First step Rule or process that may apply
You didn't make or authorize a purchase Contact the bank's fraud channel immediately Regulation E error-resolution and unauthorized-transfer rules may apply
An ATM withdrawal wasn't yours Report it to the bank and identify the ATM, date, and amount Regulation E may apply to an unauthorized ATM transfer
The amount is wrong, a transaction is duplicated, or an ATM gave the wrong cash amount Report the exact discrepancy to the bank It may qualify as an electronic-transfer error
You authorized the purchase, but the goods were not delivered or were defective Contact the merchant in writing, then ask the bank about its debit-card dispute process Bank, merchant, and card-network rules may apply; this is not automatically fraud
A recurring charge continued after cancellation Keep the cancellation proof and report the charge to the merchant and bank The facts determine whether it is a merchant dispute, an unauthorized transfer, or another type of claim

If the card is still in your wallet, the card number may still have been compromised. Report the transaction, ask whether the card should be replaced, and review other activity.

If the charge is still pending, report suspected fraud right away even if the bank says it must wait until the transaction posts before opening a final dispute. The bank can explain how it wants you to document the pending charge.

Regulation E debit dispute deadlines

Regulation E uses different deadlines for a lost or stolen card and for an unauthorized transaction shown on a statement.

The 60-day period is measured from when the periodic statement containing the error was sent. It isn't a promise that every debit-card dispute filed by day 60 will be approved, and it isn't a reason to wait. If the card was lost or stolen, report that fact immediately. If the card stayed in your possession, report the unfamiliar transaction as soon as it appears.

Notice to the merchant alone generally doesn't notify the bank for Regulation E purposes. Call the bank, use its secure dispute channel, or send notice through the method the bank accepts. If you report by phone, record the date, time, representative's name or identification, and claim number.

A late report may still be investigated, but the federal liability protections can be reduced. Your account agreement or bank policy may provide more protection, but don't rely on that instead of meeting the federal deadlines.

What happens after you notify the bank

For a covered Regulation E notice of error, the bank generally must investigate promptly.

  1. Initial investigation: The bank generally must determine whether an error occurred within 10 business days after receiving your notice.
  2. Provisional credit: If it can't finish the investigation within that period, it may generally take up to 45 calendar days if it provisionally credits the disputed amount within 10 business days.
  3. Permitted extensions: Regulation E allows up to 90 days for certain cases, including some point-of-sale debit transactions, transfers not initiated within a state, and certain new-account situations. In those cases, the provisional-credit timing can be longer.
  4. Written confirmation: After an oral report, the bank may require written confirmation within 10 business days. If it asks for that confirmation, send it promptly through a secure or trackable method.
  5. Final result: After completing the investigation, the bank must report its findings. If it determines that an error occurred, it must correct the error. If it finds no error, it must explain the result and provide supporting documentation if you request it.

A provisional credit is temporary. The bank may reverse it if the investigation finds that no covered error occurred, so don't treat the credit as final until the claim is resolved.

Regulation E's business-day count isn't the same as simply counting calendar days. Keep the date and time the bank received your notice, and ask how the institution is counting the applicable period.

How to file a debit card charge dispute

Give the bank a clear account

Use a short, factual explanation:

I am reporting a possible unauthorized electronic fund transfer on my consumer account. The transaction was for [amount] at [merchant] on [date]. I did not authorize it. I discovered it on [date] and am notifying you today. Please open the appropriate Regulation E investigation and give me the claim number.

If you did authorize the purchase, say so:

I authorized the purchase on [date], but [the amount was wrong/the transaction was duplicated/the order was not delivered/the merchant did not honor the cancellation]. I contacted the merchant on [date] and have attached the records. Please open the appropriate debit-card transaction dispute.

Accurate wording helps the bank send the claim through the correct process. Don't exaggerate or omit that you authorized a purchase.

Report fraud and merchant problems separately

For an unauthorized charge, prioritize the bank's fraud-reporting channel and card replacement. For an authorized purchase problem, contact the merchant in writing and ask for a refund, but don't wait for the merchant's response before meeting any bank deadline.

Ask the bank:

Evidence that makes the claim easier to review

Send relevant, organized records rather than a large folder of unexplained screenshots.

For an unauthorized debit-card transaction, include:

For an authorized merchant dispute, include:

Highlight the disputed line on a statement and redact unrelated account numbers. Never provide your PIN, online-banking password, or a one-time authentication code to someone who contacts you unexpectedly.

Debit card dispute letter template

A phone report is often the fastest first step. A written notice creates a clear record and may be required as confirmation after an oral report. Use the bank's secure message center, upload tool, or mailing instructions. Don't send a full account number through an unsecured email.

Use this version only when the transaction was genuinely unauthorized:

[Your name] [Your mailing address] [Date]

[Bank or credit union] [Secure dispute address or department]

Subject: Notice of error - unauthorized electronic fund transfer

Account: [Account number or identifying information requested by the bank]

I am reporting an error under Regulation E. I did not authorize the following electronic fund transfer:

Merchant or ATM: [Name] Date: [Date] Amount: [$0.00] Transaction reference: [Reference, if available]

I discovered the transaction on [date and time]. [My card was lost or stolen on date and time / My physical card remained in my possession.] I first notified the bank on [date and time] through [phone, app, branch, or other method]. My claim number is [number, if available].

Please investigate this notice of error, apply any provisional credit required by law, and provide the investigation result in writing. If you determine that no error occurred, please provide the explanation and supporting documentation.

Sincerely,

[Your name] [Safe contact information]

For a non-fraud merchant dispute, replace "I did not authorize" with a factual description of what went wrong and identify the date you contacted the merchant.

Keep a copy of the letter, attachments, and proof that the bank received them.

Chase, Wells Fargo, and Bank of America

Chase, Wells Fargo, and Bank of America may use different app labels, upload steps, and internal deadlines. The safest approach is consistent:

  1. Open the bank's official app or website and locate the transaction-dispute or fraud option.
  2. If the card is lost, stolen, or compromised, also use the bank's card-security or fraud-reporting channel.
  3. Call the number printed on the card if the app doesn't let you explain the issue fully.
  4. Save the confirmation screen, claim number, and copies of uploaded documents.
  5. Ask whether the bank has classified the claim as an unauthorized Regulation E error or as an authorized-purchase dispute.

A bank's online workflow doesn't replace your duty to report a qualifying unauthorized transfer promptly. If an app only lets you click dispute, follow up by phone or secure message with the facts and the date you first reported them.

Where Visa and Mastercard rules fit

Your bank may use Visa or Mastercard procedures for an authorized purchase dispute. Those network rules can affect evidence requirements, filing windows, and how the bank communicates with the merchant.

They aren't the same as Regulation E, and there isn't one universal consumer rule giving every debit-card dispute a 120-day filing period. Ask the issuer for the exact deadline that applies to a merchant dispute. Do not let a network process delay your notice to the bank about an unauthorized electronic fund transfer.

If the bank denies the claim

A denial isn't the end of the paper trail. Take these steps:

  1. Read the explanation. Identify whether the bank says the transaction was authorized, the notice was late, the evidence was incomplete, or the transaction type wasn't covered.
  2. Request supporting documents. For a Regulation E claim, ask for the records and explanation supporting the finding.
  3. Submit a focused appeal. Include new evidence, correct dates, the claim number, and a short explanation of why the bank's conclusion doesn't match the records.
  4. Keep monitoring the account. Report any additional unauthorized transactions separately and ask whether the card or account needs further protection.
  5. File a CFPB complaint if appropriate. The CFPB complaint portal can create a formal record and send the issue to the company for a response. It doesn't replace your original bank notice, guarantee a refund, or function as a court appeal.

If the amount is substantial or the bank appears not to have followed the applicable error-resolution process, consider speaking with a qualified consumer-law professional or local legal-aid organization.

Debit card disputes versus credit card billing disputes

Debit and credit cards don't use identical protections.

Issue Debit card Credit card
Main federal framework EFTA and Regulation E for covered electronic fund transfers Fair Credit Billing Act and Regulation Z for qualifying billing errors
Where money is affected The consumer's deposit account can be reduced immediately The issuer's bill or available credit is affected
Unauthorized-use reporting Report the lost card or transaction promptly; the two-day and 60-day rules can affect liability The federal credit-card liability rule is different
Written notice Regulation E generally permits oral notice, although the bank may request written confirmation The FTC says written billing-error notice must reach the issuer within 60 days after the first bill with the error was sent
Provisional credit Regulation E can require provisional credit when the bank needs more than the initial investigation period Credit-card billing-error procedures follow different timing and credit rules

The FTC's credit-card billing-error guidance shouldn't be copied as if it were the debit-card procedure. The FDIC's consumer overview of debit and credit card billing issues is also useful background, but your bank's account terms and the transaction type still matter.

Frequently asked questions

Can I dispute a debit card charge that is still pending?

Notify the bank immediately if you suspect fraud. Some banks wait until a transaction posts before opening a final dispute, but the early report helps document when you noticed the activity and lets the bank explain what protective steps are available.

Do I need a police report?

Not always. A bank may request one for theft, robbery, or skimming, but report the transaction to the bank even if you don't yet have a police report. Follow the bank's document instructions and be accurate about what happened.

What if I still have the physical card?

Report the unauthorized transaction anyway. Card information can be stolen without taking the physical card. Ask whether the bank should replace the card and review linked digital-wallet or recurring-payment activity.

How long does a debit card dispute take?

A bank generally has 10 business days to investigate initially. If it needs more time, Regulation E commonly permits up to 45 calendar days with provisional credit, with up to 90 days allowed for certain transactions or accounts. A bank may resolve a claim sooner under its own procedures.

Can the bank reverse provisional credit?

Yes. Provisional credit is not necessarily a final refund. If the bank concludes that no covered error occurred, it may reverse the credit after giving the required explanation and notice.

What should I do first after a denial?

Request the written findings and supporting records, compare them with your timeline and evidence, and submit a focused appeal. If you believe the bank mishandled a covered Regulation E claim, consider filing a CFPB complaint rather than waiting indefinitely.

If you're unsure which category applies, treat the transaction as suspicious and contact the bank now. Lock the card if it may be compromised, ask for a claim number, and write down the date, time, and channel you used. Those details give the bank a clean starting point and protect you if the claim later depends on when you reported.