Start with the bank and preserve the record

If you don't recognize a debit-card transaction, contact your bank or credit union immediately. Give the exact date, amount, and merchant descriptor. Ask whether you should lock or replace the card, whether the transaction can be reported while pending, and how to submit supporting documents.

Write down the call date, the representative's name or identification number, and the claim number. Then follow up through the bank's secure message center, dispute portal, or the mailing address it provides.

Before sending anything, save:

• The complete statement page or transaction screen
• A short, dated explanation of what happened
• A timeline of when the transaction occurred, appeared, was noticed, and was reported
• Records showing whether the card or other access device was lost, stolen, or still in your possession
• Merchant, delivery, return, cancellation, or refund records when a purchase is involved
• Copies of every message, attachment, confirmation, and final decision

This is U.S. consumer-account information. An unauthorized electronic fund transfer and a disagreement about an authorized purchase are different claims. The distinction can change the deadline, investigation process, and evidence that matters.

Identify the payment and the problem

A charge on a debit-account statement isn't always a traditional debit-card purchase. Identify the payment rail and describe the problem accurately before preparing your written statement.

A Visa or Mastercard logo does not, by itself, establish your legal rights or the deadline. The payment rail, account agreement, and applicable federal rule matter. If a descriptor is unfamiliar, check for a parent company, subscription, tip adjustment, or another household user. Report genuinely suspicious activity promptly while you investigate the name.

If a scammer tricked you into using your debit card or sharing its details, tell the bank exactly what happened. Don't label an authorized payment as an unauthorized transfer simply because the transaction resulted from a scam. The classification may differ, but the FTC still advises consumers to contact the bank immediately.

What Regulation E requires

For a U.S. consumer account, Regulation E's error-resolution rule generally applies to an unauthorized electronic fund transfer, such as an unauthorized debit-card transaction or ATM withdrawal. It also covers certain incorrect transfers and other account errors. It isn't a universal refund rule for every disappointing purchase.

The federal notice period generally ends 60 days after the institution sends the statement that first shows the alleged error. That is not always 60 days after the transaction date. Find the statement on which the charge first appeared and calculate from when the institution sent it.

Your notice should state:

• Your name and the account, usually using the last four digits rather than a full account number in an unsecured message
• The transaction date, posted date if different, amount, and merchant description
• Why you believe the transaction is an error
• The amount you believe is wrong
• When you first noticed the problem
• Any relevant card-loss, theft, or account-security facts

You can generally give notice orally or in writing. After a telephone report, the institution may require written confirmation within 10 business days in circumstances described by the rule. Written notice through a secure channel creates a clearer record of what you reported and when.

A merchant's promise to investigate or issue a refund does not automatically extend the bank's federal deadline. Contacting the merchant can help with a delivery, cancellation, return, or refund dispute, but don't wait for its response before notifying the bank when a deadline may apply.

Build evidence that answers the bank's questions

Save the full transaction record

Keep the complete statement page or transaction screen rather than a cropped image. It should show, if available:

• Posting date and transaction date
• Exact amount
• Merchant descriptor
• Whether the transaction is pending or posted
• Any related fee, reversal, or credit

The surrounding account context can matter. Hide unrelated account numbers or transactions when submitting the record, but leave enough information to connect the document to the disputed charge.

If the transaction is still pending, report suspected fraud immediately and ask whether the bank can open a claim now or requires the transaction to post first. Follow the bank's instructions rather than assuming that a pending charge will disappear.

Write a factual explanation

Use your own words and separate what you know from what you suspect. Explain which of these describes the situation:

• You never authorized the transaction
• The card or other access device was lost or stolen
• You still had the physical card, but believe the card number or account credentials were compromised
• You authorized the purchase but received nothing, received the wrong item, or are waiting for a promised refund

An authorized purchase that went badly is not automatically fraud. Calling it unauthorized can send the claim through the wrong process and create inconsistencies if the merchant's records show that you placed the order.

Make a dated timeline

A timeline helps the bank compare your account with its transaction records. Include the last legitimate use of the card, when you learned of any loss, when the charge appeared, and each report or merchant contact.

Don't guess at times or add details you can't support. If you don't know when something happened, say so.

Match merchant records to the dispute

For a non-delivery, return, cancellation, duplicate charge, wrong amount, or missing refund, gather only records that address the problem:

• Order confirmation and invoice
• Receipt or payment confirmation
• Product or service description
• Promised delivery date
• Tracking information and delivery status
• Cancellation request
• Return label and carrier receipt
• Merchant messages promising a refund
• Date and amount of any refund that never appeared

Keep the wording accurate. For example, say, "I authorized the purchase, but the goods were not delivered," or, "The merchant agreed to a refund on [date], but the credit has not appeared."

Add security and possession records when relevant

For suspected fraud, useful context may include:

• Whether the physical card remained in your possession
• When you locked or replaced the card
• Whether you changed the PIN or account password
• Fraud alerts or account notifications
• Travel, work, or location records that conflict with the transaction
• Notice that your device, email, or account was accessed

No single item proves or disproves a claim. A card remaining in your possession, for example, can be consistent with card-number theft. Consumers usually don't need to obtain IP logs or other technical records. Include them only if you legitimately have them and they directly support your account.

Never send a password, one-time code, or unnecessary sensitive information.

Consider an incident report

A police report, identity-theft report, or report to another agency can support a fraud claim, particularly when there are multiple transactions or a stolen card. It isn't a blanket federal requirement for every debit-card dispute under Regulation E, and filing one does not guarantee a refund.

The FTC advises consumers to report unrecognized debit-card charges promptly. If a scammer persuaded you to use your debit card, the FTC also says to contact the bank immediately; see its guidance on what to do after a scam.

Track the important deadlines

For many unauthorized electronic fund transfer claims involving U.S. consumer accounts, these are the main federal timing rules:

The two-business-day clock starts when you learn that the access device was lost or stolen, not when the first unauthorized charge appears. If you report after those two business days but within the statement-related 60-day period, potential liability can generally rise to the lesser of $500 or $50 plus unauthorized transfers that occurred after the two-day point and before notice.

If you wait more than 60 days after the statement was sent, you may face responsibility for later transfers that the bank can show would have been prevented by timely notice. These are liability limits, not a promise that the bank will decide in your favor. An account agreement may provide better protection, but don't assume that it does.

If the bank can't complete its investigation within the initial 10-business-day period, it generally must provisionally credit the disputed amount within 10 business days before taking more time. Certain new-account situations use a 20-business-day period. Once the investigation is complete, the bank generally reports the result within three business days and, if it finds an error, corrects the account within one business day. The rule has exceptions and conditions, so ask which timetable the bank is using.

Submit the packet and keep a paper trail

1. Save the originals. Download the statement and transaction details. Keep the original files, not only the edited copies you submit.
2. Secure the account. Ask whether to lock or replace the card. Change compromised credentials and review recent transactions for other unauthorized activity.
3. Call the bank. State whether the issue is an unauthorized electronic transfer, ATM error, or authorized purchase problem. Ask for the claim number, submission deadline, and written-document requirements.
4. Send written notice. Use the secure message center, dispute portal, or address supplied by the bank. If it requires a signed form or affidavit, follow that instruction and keep a copy.
5. Label the attachments. Put the timeline and a short explanation first. Identify each attachment and highlight the disputed transaction without exposing unrelated account information.
6. Contact the merchant when it fits the claim. For a delivery, return, cancellation, or refund problem, request a written response. The merchant's response doesn't replace notice to the bank.
7. Monitor the account. Watch for provisional credit, a final credit, a reversal, or new unauthorized activity. Provisional credit isn't necessarily final, so don't treat it as permanently available until the claim is closed.
8. Keep the complete file. Save call notes, confirmation emails, uploaded documents, claim numbers, and final notices. Continue paying unrelated bills while the dispute is pending.

More documents aren't always better. A short, consistent explanation with records that answer the bank's specific questions is usually more useful than a folder of unrelated screenshots.

A written dispute template

Use the bank's form when it requires one. Otherwise, this format covers the essential facts:

[Date]

Subject: Notice of error and debit-card transaction dispute

I am reporting an error on my [checking or other account], ending in [last four digits].

Transaction date: [date]
Posted date: [date, if different]
Merchant or description: [descriptor]
Amount: [$ amount]

I did not authorize this electronic fund transfer. [If applicable: My card or access device was lost or stolen on [date]. I first noticed the transaction on [date].]

I notified the bank by [phone, secure message, or other method] on [date] and received claim number [number].

Please investigate this reported error and confirm receipt of this notice. I have attached the statement, my timeline, and the supporting records listed below.

Attachments:
1. [statement or transaction record]
2. [timeline]
3. [other relevant record]

Name:
Mailing address:
Phone or secure contact method:
Signature, if required:

For an authorized purchase dispute, replace the unauthorized-transfer sentence with one that fits the facts, such as: "I authorized the purchase, but the goods were not delivered," or, "The merchant agreed to a refund on [date], but the credit has not appeared."

If the bank denies the claim

A denial gives you a reason to examine, not a reason to discard, your records.

1. Read the stated reason. The bank may say it found no error, classify the matter as a merchant dispute, or say notice was late.
2. Ask which process it used. Request confirmation of whether it evaluated the matter under Regulation E, its debit-card dispute procedure, or a different payment-rail rule.
3. Request the records relied on. When the bank determines that no error occurred, Regulation E provides for documents relied on in the investigation upon request.
4. Answer the specific finding. If the merchant claims delivery, send tracking or return records that address that claim. If the bank says the amount was correct, send the invoice and your calculation.
5. Use the bank's appeal or complaint channel. Add new evidence with a short cover note instead of resending unrelated material.
6. Escalate if appropriate. If you believe the bank mishandled a federal error claim, a complaint to the CFPB or the appropriate state or federal banking regulator may be available. A complaint can request a response, but it doesn't guarantee a refund.

If provisional credit is removed, ask for the effective date and written decision. That gives you a clear balance and a record for any further complaint.

Mistakes that can weaken the record

• Waiting for a police report before notifying the bank
• Treating the 60-day period as 60 days from the purchase rather than from the statement showing the error
• Reporting only by phone and keeping no proof of the report
• Calling an authorized non-delivery or refund problem "fraud"
• Sending edited screenshots that omit the date, descriptor, amount, or account context
• Uploading full account numbers, passwords, one-time codes, or unrelated sensitive documents
• Assuming a Visa or Mastercard logo guarantees a particular deadline or refund
• Spending provisional credit before the bank makes a final decision

Frequently asked questions

Does a police report prove an unauthorized debit-card transaction?

No. It can support your account, but the bank will also consider the transaction record, your notice, account activity, card status, and other facts. Regulation E does not make a police report a blanket requirement for every claim.

Is the 60-day deadline measured from the charge date?

Usually, the Regulation E notice period is measured from when the institution sends the statement that first shows the alleged error. The separate two-business-day rule can affect liability after a lost or stolen card or access device.

Can I dispute a debit-card purchase if the merchant never delivered?

You can ask the issuer to review it through its debit-card dispute process. Provide the order, promised delivery date, tracking, merchant communications, and your attempt to resolve the issue. Don't assume that the unauthorized-transaction rules or the Regulation E 60-day period automatically control.

What if the bank says the card or PIN was used?

Ask for the decision in writing and the records relied on. Explain accurately whether you had the card, whether anyone could access the PIN, and when you reported the transaction. A card or PIN record is only part of the bank's evidence; preserve your own timeline and documents and ask for the bank's next appeal or complaint step.