If a U.S. debit card transaction isn't yours, call the issuing bank or credit union now. Lock the card if possible, report an unauthorized electronic fund transfer, and send the details through the bank's approved channel. Don't wait for the merchant.
Two deadlines can matter, and they start at different points. For a personal account statement, the usual Regulation E notice deadline is 60 days after the institution sends the statement that first shows the error. If the card or another access device was lost or stolen, reporting that loss within two business days can limit liability to the lesser of $50 or the unauthorized transfers made before notice.
Those are separate clocks.
Merchant refunds follow another route. The merchant submits a credit, while a bank dispute or chargeback asks the issuer to investigate and possibly reverse a transaction. The rules below concern U.S. consumer debit cards linked to personal accounts. Credit cards, wires, business accounts, and some separately authorized payments use different rules.
Start by identifying the type of problem
The transaction label in your banking app may look the same for every problem. The facts still determine which process fits.
| Situation | Best first move | Main rule or process |
|---|---|---|
| You don't recognize a debit card charge | Call the issuer, lock the card, and report the transfer | Regulation E notice and liability rules |
| The card or access device is lost or stolen | Report the loss immediately, then dispute transactions | The two-business-day liability rule matters |
| The amount is wrong or the transaction is duplicated | Notify the bank and keep the receipt or statement | The Regulation E error process may apply |
| Goods never arrived or were defective | Contact the merchant in writing, then ask the issuer about a dispute | Bank and card-network dispute rules; no automatic Regulation E refund |
| The merchant promised a refund that never appeared | Get written confirmation and send it to the bank | Merchant credit posting and the issuer's dispute process |
| You personally approved a payment after a scam | Call the bank and explain the exact sequence | It may be treated differently from an unauthorized transfer |
Don't call a delivery problem fraud just to make the claim sound stronger. Give the bank the plain version: what you bought, what happened, and whether you approved the payment.
What Regulation E actually controls
Regulation E is the main federal framework for electronic fund transfers from U.S. consumer accounts. The CFPB's Regulation E liability rule addresses unauthorized transfers, and the error-resolution rule sets out notice and investigation procedures.
Thing is, the word "fraud" doesn't decide which rule applies. An unauthorized transfer generally means someone else initiated it without your authority. If a scam persuaded you to approve the payment yourself, the bank may analyze it differently, but you should still report it and describe the sequence accurately.
Notice timing matters.
If you learn that the access device was lost or stolen, notice within two business days generally limits potential liability to the lesser of $50 or the unauthorized transfers made before notice. Miss that window, and potential liability can rise to as much as $500 under the rule's formula.
For a statement error, count 60 days from the date the institution sends the statement, not simply from the date printed on it. Waiting for a merchant to answer can put that deadline at risk.
Some banks promise zero liability beyond the federal baseline. Check the account agreement, then act as if the legal deadline matters. Early notice helps.
How the investigation and provisional credit work
Once the bank receives a proper notice of error, it generally must investigate promptly and decide within 10 business days. What happens next depends on whether it can finish the review within that period.
| Timing | What may happen |
|---|---|
| Bank receives your notice | The institution opens the case and may ask for supporting details |
| Within 10 business days | It investigates and decides, or provides provisional credit if it needs more time |
| Extended investigation | The ordinary extended period can reach 45 days |
| Certain transactions or accounts | Some cases, including certain point-of-sale debit transactions, can use a period of up to 90 days |
| Final decision | The bank keeps the credit, issues a correction, or sends a notice explaining that it found no error |
Provisional credit is temporary access to funds, not necessarily a final refund. If the bank later finds no error, it may reverse the credit after giving the notice required by the rule.
During an extended review, the credited amount generally must be available for your use. For an oral notice, the bank may require written confirmation within 10 business days, so send it promptly if requested.
Keep watching the account.
The FTC's guidance on lost or stolen cards recommends reporting unrecognized charges quickly and following up with a letter that identifies your account, when you noticed the loss, and when you first reported it.
How to report a debit card charge
-
Stop further access. Lock the card in the official bank app if possible. Call the bank's official number, report a missing card, and ask whether you need a replacement card or new PIN.
-
Describe the transaction accurately. Give the transaction date, amount, merchant descriptor, and reason you believe it is wrong. Say it was unauthorized only if you did not approve it.
-
Create a written record. A phone call may open the case, but follow up through secure messaging, document upload, or a letter. Include your name, account identifier, transaction date and amount, and a short explanation of the error.
-
Ask about the investigation clock. Get the case number and the date the bank received your notice. Ask for the deadline for extra documents, whether provisional credit applies, and whether the bank needs written confirmation of your phone report.
-
Send the strongest evidence first. You don't need a perfect file before reporting. Start with the statement page, receipt, merchant messages, return records, delivery information, or fraud documentation you already have.
-
Track the final decision. Save messages and statements. If the bank denies the claim or reverses provisional credit, request the written reason and appeal promptly with evidence the first review missed.
A bank may request a police report in a theft case. Regulation E does not make a police report a universal substitute for timely notice, so report the loss to the bank first.
Evidence that makes a dispute easier to review
A useful evidence file answers four points: which transaction is wrong, why it is wrong, what happened afterward, and what correction you want.
| Dispute type | Useful records |
|---|---|
| Unauthorized charge | Statement page, fraud alert, card-lock history, account notifications, and a timeline of when you noticed and reported it |
| Wrong amount or duplicate | Receipt, order confirmation, merchant invoice, and the amount that should have been charged |
| Non-delivery | Order details, promised delivery date, tracking history, and messages with the merchant |
| Defective or returned item | Photos, return authorization, shipping receipt, return tracking, and the merchant's response |
| Missing merchant refund | Written refund confirmation, refund date, transaction reference supplied by the merchant, and later statements |
Keep the original files, not only cropped screenshots. Dates matter.
To be honest, the paper trail is usually untidy at first. Write down when you contacted the merchant, what it said, when you notified the bank, and every deadline the bank gave you. That record can fill gaps.
Refunds, disputes, and chargebacks are not interchangeable
A merchant refund and a bank dispute begin with different actors. The merchant sends a credit; you ask the issuer to investigate; a chargeback may be the network step the bank uses after accepting the dispute.
The issuer can approve the claim, deny it, or ask for more information. A chargeback isn't a blanket guarantee that an unwanted, late, or defective purchase will be refunded.
For an unauthorized transaction, start with the issuing bank. For a regular purchase problem, contact the merchant in writing and keep its response, but don't delay fraud reporting while you wait. If the merchant says it issued a refund, ask for written confirmation and give it to the bank if the credit doesn't appear.
Turns out, Visa and Mastercard network rules can affect the bank's internal filing process, evidence requirements, and merchant response. They aren't one universal consumer deadline. Don't rely on a generic 120-day chargeback rule found online instead of reporting the error under Regulation E.
The bank may call the case a chargeback. The merchant may call the same event a refund. Same transaction, different tracks.
Situations that need a different route
Credit card advice does not automatically carry over to debit cards. Debit transactions draw from a deposit account and generally use Regulation E, while credit card billing disputes generally use Regulation Z.
Wires, some direct account-to-account payments, and transactions sent through a separate peer-to-peer service can involve different rules or contracts. Contact the bank and payment service immediately rather than assuming a debit-card chargeback process applies.
Business accounts may not receive the same consumer protections as personal accounts. The account type matters.
An authorized scam is another boundary. If you entered the payment details or approved the transfer yourself, the bank may not classify it as an unauthorized transfer even if a criminal manipulated you. Give the bank the complete story and ask what recovery or fraud process is available.
If the bank denies the claim
Ask for the decision in writing. It should say whether the bank found no error, lacked information, treated the transaction as authorized, or reversed temporary credit after its investigation.
For a merchant dispute, ask which evidence controlled the decision and whether the bank offers an appeal or another review. Send a short appeal with dates, the specific error, and documents tied to each point. A large, unorganized file is harder to assess.
If you believe the bank ignored a timely notice, missed a Regulation E deadline, failed to provide required provisional credit, or reversed credit without the required notice, you can submit a complaint to the CFPB. Attach the statement, your notice, case number, bank correspondence, and a one-page timeline.
A complaint does not replace the original reporting deadline. It is an escalation step after you have preserved the record.
Common questions
Does filing within 60 days guarantee a refund?
No. Timely notice protects your ability to use the error-resolution process. The bank still investigates and can decide that no error occurred.
Is provisional credit the same as a final refund?
No. It gives you temporary access to funds while an eligible investigation continues. The bank can reverse it after a properly explained finding that no error occurred.
What if the charge is under $50?
You can still report it. The $50 figure concerns potential liability in some lost or stolen access-device cases, not a minimum or maximum for filing a debit card dispute.
Should I call the merchant or the bank first?
Call the bank first for an unauthorized charge or a lost card. For a delivery, quality, cancellation, or refund problem, contact the merchant and notify the bank before the Regulation E statement deadline.
If the charge is on your latest statement, save that page and contact the issuer today. Then send the written notice while the dates and details are still fresh.