If a debit card transaction isn't yours, contact your bank now and put the report in writing. For a personal U.S. account, Regulation E generally requires the bank to receive an error notice within 60 days after sending the statement that first shows the problem.
A lost or stolen card is a separate timing issue. Report the loss within two business days after learning about it, and your liability is generally limited to the lesser of $50 or the unauthorized transfers made before notice.
A refund isn't automatic. The result depends on the account, the type of transfer, the timing, and the records you can provide.
What kind of debit card problem is this?
Use accurate words from the start. "Chargeback" is common shorthand, but Regulation E usually calls this an error-resolution process for covered electronic fund transfers.
| Problem | Likely treatment |
|---|---|
| Unauthorized card use | You did not authorize the transaction, or another person used the card or card details without permission. Regulation E liability and error-resolution rules may apply. |
| Wrong amount or duplicate debit | The account shows a different amount from the one authorized, or the same transfer appears twice. Report the exact difference. |
| Authorized purchase dispute | You approved the payment, but the goods, service, refund, or cancellation is disputed. The bank may handle this through a card-network or merchant-dispute process instead of an unauthorized-transfer claim. |
| Unauthorized account or payment-app transfer | Someone moved money without your approval. Coverage depends on the transfer method and how authorization happened, so describe the facts carefully and report it promptly. |
A bad purchase is not automatically fraud. If you approved the payment, don't call it unauthorized simply because the merchant failed to keep a promise.
The federal starting points are the Regulation E liability rule, 12 CFR 1005.6 and the error-resolution rule, 12 CFR 1005.11. A bank app, card network, or internal claim form may add procedures. Those procedures don't replace federal protections when the rule applies.
Debit card dispute deadlines and liability limits
The key date is usually the date the bank sent the statement. It isn't necessarily the day you noticed the charge.
| Event | Federal rule or limit | What to do |
|---|---|---|
| You learn that an access device was lost or stolen | Report it within two business days for the strongest liability limit. Liability is generally capped at the lesser of $50 or the unauthorized transfers made before notice. | Call the bank immediately. Ask it to block or replace the device. |
| A statement first shows the error | The bank generally must receive your notice within 60 days after sending that statement. | Submit the dispute before the deadline, and keep proof that the bank received it. |
| The bank receives your notice | It generally has 10 business days to investigate and decide whether an error occurred. | Ask when the investigation is due. |
| The bank needs more time | It can generally extend the investigation to 45 calendar days if it provides provisional credit within 10 business days and gives you use of the funds. Some point-of-sale, foreign-initiated, and new-account cases can take up to 90 days. | Ask which deadline the bank is using and why. |
Turns out, the two-business-day rule concerns learning that the access device was lost or stolen. It isn't a reason to wait after spotting a suspicious charge.
If you report after those two business days but before the statement deadline, liability can rise to the lesser of $500 or certain unauthorized transfers made after the two-day period and before notice. After 60 days, your potential liability may be higher if the bank can establish that earlier notice could have prevented later transfers.
The $50 figure is a liability limit, not a provisional-credit threshold. Regulation E also does not create a universal two-business-day credit promise.
How to file a debit card dispute
Use the bank's official phone number, secure messaging system, branch, or claim portal. A card lock can help protect the account, but it may not count as a formal error notice.
-
Stop further access. Lock or replace the card if that option is available. Change a compromised PIN or online banking password. Tell the bank if the physical card is missing.
-
Report the transaction. Give the transaction date, amount, merchant name, and account details. Say whether you didn't authorize it, the amount is wrong, or the same debit appeared twice.
-
Request a case number. Ask when the bank considers the notice received, whether it needs written confirmation, and which deadline applies.
-
Send written notice. An oral report may start the process, but the bank can require written confirmation within 10 business days. Even if a representative says the app claim is enough, ask where to send the written notice and whether the bank is treating it as a Regulation E error.
-
Attach focused evidence. Send records that show what happened, when you noticed it, and why the transaction is wrong.
-
Track the response. Keep the submission receipt, case number, call dates, messages, provisional credits, and letters.
Skip the novel. Dates, amount, what happened, and what you did next are enough to begin.
| Record | Why it helps |
|---|---|
| Statement or transaction screen | Shows the amount, posting date, merchant description, and statement date. |
| Card or account history | Helps show whether the card was in your possession and whether other activity looks suspicious. |
| Receipts and order records | Helps identify the authorized amount and the transaction's purpose. |
| Merchant emails or refund records | Supports a merchant dispute or a missing-refund claim. |
| Bank messages and call notes | Establishes when you reported the problem and what the bank requested. |
| Police report or fraud affidavit | May document the circumstances if the bank asks for one, but it does not replace timely notice. |
Don't send a full account number through ordinary email. Use the bank's secure channel.
Written debit card dispute letter template
Use this notice for an unauthorized transfer or another transaction error. Change the explanation so it matches what actually happened.
[Date]
Re: Notice of error under Regulation E - account ending in [last four digits]
I am reporting an error involving this electronic fund transfer:
Transaction date: [MM/DD/YYYY]
Amount: $[amount]
Merchant or description: [name as shown on statement]
Date I first noticed the transaction: [MM/DD/YYYY]
Reason for the dispute:
[Examples: I did not authorize this transfer. The correct amount was $__. The same transfer appears twice.]
I notified the bank through [phone, app, branch, or secure message] on [date].
My case number is [case number, if available].
Please investigate this notice under 12 CFR 1005.11. Please tell me if you require written confirmation or additional information. If the investigation is extended, please provide any provisional credit required by applicable law and tell me when it is posted.
Please send the investigation result in writing. If the claim is denied, please provide copies of the documents relied on for that decision.
Attached are:
[List of statements, receipts, screenshots, correspondence, or other records.]
Sincerely,
[Your name]
[Mailing address]
[Safe phone number]
[Secure email or other contact method]Keep a copy of everything. Ask the bank to confirm receipt.
What happens after you file?
The bank may ask follow-up questions or request an affidavit. Answer consistently, and stick to facts you can support.
The usual investigation period is 10 business days. Thing is, the bank can use a longer period only if it follows the applicable provisional-credit requirements. An extended investigation generally can last 45 calendar days, while certain point-of-sale, foreign-initiated, and new-account cases can take up to 90 days. For some new-account cases, the bank may have 20 business days before it must provide provisional credit rather than the usual 10 business days.
A provisional credit is temporary. The bank can remove it after finding no error and giving the required explanation, so leave enough money available for a possible reversal.
If the bank finds an error, it must correct the account and provide the required notice. If it finds no error, it must send a written explanation. You can request copies of the documents it relied on.
When the merchant is the problem
An authorized debit card purchase that went wrong belongs in a different lane. The problem might be a missing refund, an incorrect amount, a duplicate payment, a canceled service, or goods that never arrived.
Contact the merchant if practical. Don't wait for the merchant's reply before notifying the bank if a covered error may be involved; the notice deadline can continue to run.
To be honest, keep the receipt, order confirmation, cancellation message, refund promise, and bank statement together. That makes the timeline much easier to explain.
Tell the bank that you authorized the original payment but dispute the merchant's handling of it. Ask whether it is opening a Regulation E error claim or a separate card-network dispute, and request that process's deadline in writing.
A merchant's refund policy and a bank's dispute procedure are different things. Neither one guarantees a refund.
If the bank denies your claim
Read the denial closely. Its stated reason should determine your next response.
| Stated reason | Focused response |
|---|---|
| Notice was late | Compare the statement's send date with the date the bank received your report. Provide proof of an earlier call, message, or submission. |
| The bank says you authorized it | Explain who had access, whether the physical card was present, and what account alerts or records show. Don't guess. |
| The issue is a merchant dispute | Explain whether you authorized the payment and ask for the separate merchant or network dispute procedure and deadline. |
| The amount or transaction was misclassified | Restate the precise error, such as a duplicate or incorrect amount, and attach the statement and receipt. |
| The bank gives no meaningful explanation | Request the written investigation result and copies of the documents relied on. |
A denial is not a reason to tell a different story. Organize the dates and answer the bank's stated reason directly.
If the bank missed a required deadline, refused to investigate a timely notice, or ignored relevant evidence, you can use the CFPB complaint form. Include a short timeline and the bank's written response. The CFPB can request a company response, but its complaint process is not a court decision and does not guarantee a refund.
Situations that need separate analysis
This information assumes a personal U.S. bank or credit union account and an electronic fund transfer covered by Regulation E. Business accounts, wire transfers, paper checks, credit card billing disputes, and some payment-app transactions may follow different rules or agreements.
Payment apps need extra care. If someone accessed your account without permission, say that plainly. If someone tricked you into approving the transfer, explain exactly what you approved and what the person told you. Those facts can change the analysis.
A debit card payment made at a point-of-sale terminal may also have a longer investigation period. Ask the bank which exception it is applying.
Questions about debit card disputes
Does the 60-day period start on the transaction date?
Usually, no. The Regulation E notice period generally runs from the date the bank sends the statement that first shows the error. Report the transaction sooner anyway.
Do I have to contact the merchant before the bank?
No general federal rule requires you to wait for the merchant. You can contact both, but merchant communication does not stop the bank's notice deadline.
Is provisional credit a final refund?
No. It is temporary while the bank investigates. The bank may reverse it after finding no error and following the required notice process.
Does locking my debit card count as filing a dispute?
Don't assume it does. Tell the bank which transaction you dispute and ask for a case number or written confirmation.
What if the bank asks for a police report?
Provide the requested document through a secure channel if you can. Don't delay the initial bank notice while waiting for the report.
Your next step
Open the statement and record its send date, the transaction amount, and when you noticed the problem. Then contact the bank through an official channel, request a case number, and send written notice before the applicable deadline. Save the confirmation and watch for any provisional credit or reversal.