If you see a debit card transaction you didn't authorize, contact your bank or credit union immediately and follow up in writing. Your evidence should identify the exact transaction, explain why it's unauthorized or incorrect, document when you reported it, and include relevant supporting records.

For most U.S. personal deposit accounts, Regulation E governs electronic fund transfer errors involving debit cards. The Fair Credit Billing Act generally applies to credit-card billing disputes, not ordinary debit-card transactions. A dispute can result in an account recredit, but no evidence package guarantees a refund.

This guidance assumes a personal U.S. account. Business accounts, wire transfers, some prepaid products, and certain person-to-person payments can follow different rules.

Quick answer: what evidence should you send?

A useful debit card dispute package usually includes:

• A statement or banking-app record showing the merchant, date, amount, and transaction status
• A short, dated explanation of what happened and when you noticed the charge
• Facts about whether you had the card, phone, PIN, or account credentials when the transaction occurred
• Records showing your contact with the merchant, if the problem involves a return, overcharge, missing goods, or cancellation
• Relevant account alerts, login notices, delivery records, travel records, or other corroborating documents
• The bank's case number and details of your phone, online, or written reports
• A police or identity-theft report when appropriate, although it isn't a universal requirement for every Regulation E notice

Report the error as soon as you discover it. To preserve the federal error-resolution protections, the bank generally must receive your notice no later than 60 days after it sent the statement that first showed the error.

A separate liability rule applies when a card or PIN is lost or stolen. Reporting that loss within two business days can limit liability to $50 in many situations. Waiting longer can increase potential liability to as much as $500, and waiting more than 60 days after the statement can expose later transfers to additional liability.

Which rule controls a debit card dispute?

Regulation E, including 12 CFR § 1005.11, sets the federal procedure for resolving many errors involving electronic fund transfers. An unauthorized transfer generally means someone else initiated it without your actual authority and you received no benefit from it.

Regulation E can also cover certain incorrect amounts, omitted transfers, and bookkeeping errors. Describe the problem accurately rather than using “fraud” for every billing disagreement.

For example:

• If someone used your card number without permission, describe the transaction as unauthorized.
• If you authorized a purchase but were charged twice, identify it as a duplicate or incorrect transaction.
• If you returned merchandise or never received it, contact the merchant and tell the bank that the issue is a merchant or billing dispute.
• If a recurring payment continued after cancellation, provide the cancellation date and any notice sent to the merchant.

The FTC sample letter for disputing credit and debit card charges includes examples such as an overcharge, returned merchandise, non-delivery, and a purchase the consumer did not make. Edit the wording so it matches your actual facts.

The FCBA is not the primary federal rule for a debit-card account. A bank may also use a card-network or merchant-dispute process, but that internal process doesn't replace the information and deadlines that apply under Regulation E.

Debit card dispute deadlines and liability limits

These are statutory liability limits, not guaranteed refund amounts. The result can depend on the type of transfer, the account, when you learned of the problem, and whether circumstances outside your control prevented timely notice. If you're late, report the transaction anyway and explain the reason.

The FTC guidance on lost or stolen credit, ATM, and debit cards recommends reporting unrecognized withdrawals and charges immediately and keeping cards, PINs, receipts, and account information secure.

Evidence that makes a debit dispute easier to review

Regulation E does not prescribe a special “winning evidence packet.” Your initial notice needs enough information for the institution to identify the account and understand the error, including the transaction type, date, and amount. Additional records help the bank evaluate conflicting accounts.

1. The transaction record

Save a copy of the statement or app screen showing:

• The exact amount
• The posting date and, if shown, the transaction date
• The merchant name and location
• Whether the transaction is pending or posted
• A reference, authorization, or transaction number

If the transaction is still pending, ask the bank how it handles pending claims and continue checking until it posts. Don't let that question cause you to miss the 60-day notice deadline.

2. A clear timeline

Write down:

• When you first noticed the transaction
• When and how you contacted the bank
• When you last used the card or account
• Whether the card was in your possession
• Who, if anyone, had access to the card, PIN, phone, or account
• What the merchant or bank told you

A one-page timeline is usually more useful than a large collection of unexplained screenshots.

3. Account and device security information

Include relevant evidence such as:

• A fraud alert or bank notification
• An account-login alert
• A password-reset or phone-number-change notification
• Proof that you froze or replaced the card
• A record showing that the card was with you while the transaction occurred

Card possession alone doesn't prove that you authorized a purchase, but it is a relevant fact. Don't send irrelevant location or personal data simply to make the package longer.

You generally don't need to obtain IP addresses, device logs, digital signatures, or notarized witness statements yourself. The bank or payment processor may have technical records that aren't available to you.

4. Merchant records

For an authorized transaction that became a billing problem, attach:

• The receipt or order confirmation
• Return or cancellation records
• Delivery information
• Messages with the merchant
• The merchant's refund promise or refusal
• A copy of the merchant's response

For a transaction you truly didn't authorize, contact the merchant only through a legitimate channel and don't share additional account credentials with a suspicious caller or website.

5. Corroborating documents

A witness statement, police report, or identity-theft report can support your explanation when relevant. These documents don't replace the bank notice. Keep the originals and submit copies through the bank's secure channel.

Never alter a receipt, screenshot, email, or statement. A focused and accurate claim is safer than an exaggerated one.

How to file a debit card charge dispute

1. Stop additional transactions

Call the number on the back of the card or on your account statement. If a card, phone, or PIN may be compromised, ask about blocking the card, replacing it, changing the PIN, securing online banking, and reviewing recent transactions.

Report every unrecognized transfer, not just the largest one. Don't rely on an email or text message that asks you to call a number; use a trusted bank contact.

2. Give the bank the required notice

You can generally notify the institution orally or in writing. Give your name, account information, transaction date, amount, and an explanation of why you believe an error occurred.

If you report by phone, ask for:

• The case or confirmation number
• The address or secure upload channel for written notices
• The deadline for sending supporting documents
• Whether written confirmation is required

A bank may require written confirmation of an oral notice within 10 business days. Send that confirmation promptly if requested.

3. Send a written dispute packet

Use the bank's designated error-notice address or secure online process. A branch employee or general customer-service representative may not be the correct recipient for a formal notice, so check the statement, account agreement, or instructions provided during the call.

Use the following template as a starting point.

[Your name]
[Your mailing address]
[City, State ZIP]
[Phone number]
[Email address]
[Date]

[Bank or credit union name]
[Error-notice department]
[Address listed by the institution]

Subject: Notice of error involving debit card transaction

Dear Sir or Madam:

I am writing to notify you of an error under Regulation E involving my
account ending in [last four digits].

Transaction amount: [$ amount]
Merchant: [merchant name]
Transaction or posting date: [date]
Reference number: [number, if available]

I did not authorize this electronic fund transfer. [Briefly explain what
happened, including when you noticed it and whether the card was in your
possession.] I first reported the transaction to [bank representative or
department] on [date] by [phone, secure message, or other method]. My
confirmation number is [number].

Please investigate this error and correct my account as required. If the
investigation cannot be completed within the initial period, please provide
any provisional credit required by Regulation E. If you determine that no
error occurred, please send the written explanation and documents relied on
in reaching that decision.

Enclosures: [list statements, screenshots, merchant records, reports, or
other documents]

Sincerely,

[Your name]

Don't include your full debit card number in ordinary email. Use the bank's secure channel and retain a copy of everything you submit. The FTC's sample dispute letter can help with wording, but the deadline and liability rules for a debit account are different from those for a credit card.

4. Track the claim

Keep a log with:

• The date and time of each contact
• The name or identification number of each representative
• Case numbers
• Documents sent and delivery confirmations
• Temporary credits or reversals
• The bank's written determination

Continue reviewing statements while the claim is open. Report new unauthorized transactions immediately rather than assuming they are part of the first case.

How long does a debit card dispute take?

Regulation E uses business days for the initial investigation and calendar days for some extended investigations.

• The bank must investigate promptly and generally determine whether an error occurred within 10 business days after receiving notice.
• If it cannot finish within that period, it may generally take up to 45 calendar days if it provides provisional credit within the required period.
• The investigation period can extend to 90 calendar days for certain point-of-sale debit card transactions, foreign-initiated electronic fund transfers, and some new accounts.
• For an account opened recently, the provisional-credit period can be extended to 20 business days.
• If the bank finds an error, it generally must correct it within one business day after making that determination.
• If it finds no error, it must provide a written explanation and, on request, the documents it relied on.

The Electronic Fund Transfer provisions in Regulation E contain the exceptions and conditions for these periods. Provisional credit is temporary, so don't treat it as a final refund until the bank sends its determination.

What to do if the bank denies your dispute

A denial isn't the end of the process, but your next submission should address the stated reason rather than repeat the original claim.

1. Request the denial in writing. Ask for the specific basis, such as a finding that the transaction was authorized, late notice, missing written confirmation, or a merchant-billing issue.
2. Request supporting documents. Regulation E allows you to request the documents the bank relied on when it concludes that no error occurred.
3. Prepare a focused response. Correct factual errors, clarify the timeline, and add only relevant records.
4. Use the bank's internal appeal or complaint process. Keep the appeal separate from any new unauthorized transactions.
5. File a complaint with the Consumer Financial Protection Bureau if the bank did not follow the process or has not addressed the issue. Include the bank's response, your notice dates, the case number, and key evidence.

A CFPB complaint is an escalation route, not an automatic refund order. It also doesn't replace the need to report the error to the bank or extend a missed statutory deadline.

Common mistakes to avoid

• Waiting to report the charge while gathering perfect evidence
• Treating the 60-day period as permission to delay
• Calling an authorized purchase “unauthorized”
• Sending only a photo without explaining the transaction and timeline
• Assuming a police report or IP log is required before making the initial report
• Sending a written notice to an address that isn't designated for error notices
• Failing to send written confirmation after an oral report when the bank requests it
• Spending a provisional credit before the investigation is final
• Ignoring other suspicious transactions on the same account

Frequently asked questions

Do I need a police report to dispute a debit card charge?

Regulation E's basic notice requirements don't list a police report as a universal prerequisite. A report may help in a fraud or identity-theft case, and the bank may request additional information. Report the transaction first rather than waiting for law enforcement paperwork.

Can I dispute a debit purchase I actually made?

You can report an overcharge, duplicate charge, missing refund, returned purchase, or non-delivery, but describe it as a billing or merchant problem if you authorized the original purchase. Contacting the merchant may resolve it faster, while the bank can explain its dispute process.

What if I missed the 60-day deadline?

Notify the bank anyway, explain why the notice was late, and ask it to investigate. If circumstances outside your control prevented timely notice, include that information. Late reporting can reduce the protections available for later transfers.

Will the bank automatically refund the charge?

No. The bank must follow its investigation process, but the final result depends on the facts and evidence. A provisional credit, when required, is temporary and may be reversed after a no-error determination.

What is the strongest evidence for an unauthorized debit transaction?

There is no single document that decides every claim. The most useful package usually combines the transaction record, a precise timeline, card and account-security facts, and relevant merchant or account-takeover records.

This is general U.S. consumer information, not legal advice. Start by reporting the transaction through a trusted bank contact and preserve the written record of that report.