For an unauthorized debit-card charge, contact the bank promptly and send a focused evidence packet. The most useful packet usually combines the transaction record, a dated account of what happened, proof of when you reported it, and records about card or account access.

A statement shows that money left the account. It doesn't, by itself, show who authorized the transfer. No document guarantees a refund, and the process changes if you authorized the purchase but later had a problem with the merchant.

This article covers U.S. consumer accounts and debit-card, ATM, and other electronic fund transfer disputes. It isn't legal advice.

Identify the dispute before you report it

Use an accurate description of the problem. Calling an authorized purchase "fraud" can send the bank down the wrong investigative path.

What happened Main issue Useful evidence and usual route
Someone used your debit card, card number, account, or access device without permission Unauthorized electronic fund transfer Transaction records, prompt notice, a timeline, and supporting evidence under the bank's Regulation E process
You placed the order but never received the goods or services Merchant or fulfillment dispute Order records, delivery information, cancellation attempts, and the bank's debit-card purchase-dispute process
The amount was wrong, the transaction was duplicated, or it wasn't processed as agreed Transaction error or merchant dispute Receipts, invoices, order confirmations, and account records
You were tricked into approving a payment or sharing a security code Fact-sensitive scam or authorization issue A precise account of what you approved, what you shared, and how the payment was initiated

A chargeback is generally a bank or card-network procedure, not a legal term that guarantees recovery. Credit-card billing protections also don't automatically apply to debit-card purchases.

Evidence that can support an unauthorized debit charge

1. The statement and transaction details

Save the full statement or account record showing:

Download the original statement or save it as a PDF instead of relying on a cropped screenshot. Ask the bank for details that aren't visible in online banking, such as the ATM or transaction reference.

Use the bank's secure upload or messaging system for documents. Don't send your full account number, PIN, password, or Social Security number by ordinary email.

2. A factual, dated timeline

Write the timeline while the details are fresh. Include the facts that fit your situation:

  1. When you noticed the transaction
  2. Whether you still had the physical card
  3. Where you were when the purchase or ATM withdrawal occurred
  4. Who, if anyone, could access the card, PIN, phone, wallet, or online account
  5. When you contacted the bank, merchant, or law enforcement
  6. What you did afterward, such as locking the card or changing credentials

Use exact dates and times when you know them, and label estimates as estimates. Keep the account factual. Don't guess who committed the transaction or claim that an IP address, device record, or location proves more than it actually does.

3. Proof of prompt notice

Keep a record of the first report, including:

Oral notice may be enough to start the process, but a bank can require written confirmation within the period it specifies. If the bank asks for that confirmation, send it promptly and keep proof of delivery. A follow-up through the bank's secure system or a written dispute form can make the record easier to verify.

4. Records about the card and account

Select records that answer a specific question about access or timing. Depending on what happened, useful documents may include:

Keeping the physical card doesn't automatically disprove fraud. Someone may have copied the card number or used a compromised digital wallet. Card possession is one fact for the bank to consider, not a complete explanation.

5. Merchant and ATM information

For a merchant transaction, preserve receipts, order confirmations, shipping notices, cancellation requests, and messages with the seller. For an ATM transaction, record the location, date, time, receipt details, and any error message.

If video may exist, ask the merchant, ATM owner, or bank to preserve the relevant footage quickly. You may not be able to obtain CCTV footage yourself, and a business may release it only to the bank or law enforcement. The preservation request still documents that the evidence could be time-sensitive.

The bank or merchant may have additional records, including:

Those records can help, but they don't always identify the person who authorized a transaction. An IP address identifies an internet connection, not necessarily its user. A PIN entry, chip read, or login record can show how the transaction was processed without proving who approved it.

6. Digital records, reports, and witnesses

Save original emails, texts, security alerts, password-reset notices, and account notifications. Preserve sender and date information. If an online account was taken over, look for an unfamiliar email address, shipping address, device, or password change.

Don't edit the original files. Put explanations in a separate notes document or evidence index.

A police report can support your account when a card, wallet, phone, or identity information was stolen. If personal information was misused, the FTC's identity theft guidance lists reporting and recovery steps. Keep the report number, but don't wait for a police report before notifying the bank. The bank's deadlines may run first.

A witness statement is most useful when the witness personally observed that you were elsewhere, your card or wallet was stolen, you didn't make a withdrawal, or someone accessed your phone or account. Ask the witness to state only what they know, with dates and contact information. A signed statement or affidavit supports the transaction records; it doesn't replace them.

Regulation E deadlines

The Electronic Fund Transfer Act and Regulation E cover many consumer electronic fund transfers, including ATM and point-of-sale transactions. The regulations are in 12 CFR part 1005.

Several deadlines can apply, and they address different issues:

The two-business-day rule concerns learning that an access device was lost or stolen. The 60-day rule concerns an error shown on a periodic statement. Neither is a reason to wait: report the transaction as soon as you discover it.

A provisional credit isn't necessarily final. The bank may reverse it after completing the investigation if it concludes that no error occurred. The Regulation E error-resolution rule includes further requirements for oral and written notices, provisional credits, investigation results, and supporting documents. Your account agreement may provide better terms than the federal minimum.

How to submit the dispute

Secure the account

Use the bank's official phone number or secure app, not contact information in an unexpected text or email. Ask the bank to:

Change exposed passwords from a trusted device and turn on account alerts. Check for small or unfamiliar transactions too; they may show that access is continuing.

Report the error precisely

If you didn't authorize the transaction, say that you are reporting an unauthorized electronic fund transfer and an error under Regulation E. If you made the purchase but the goods were defective or never arrived, describe that problem instead.

You can adapt this wording:

I am reporting an unauthorized electronic fund transfer and an error on my account. The transaction was [$amount] on [date] and appears as [merchant description]. I did not authorize this transaction. [State whether the card was lost, stolen, or still in your possession.] Please investigate, provide my case number, and tell me whether you need written confirmation or additional documents.

Only include statements that are true. A false or exaggerated detail can undermine otherwise useful evidence.

Arrange the evidence so the bank can follow it

An investigator shouldn't have to reconstruct the story from a pile of screenshots. A practical order is:

  1. A short cover page identifying the disputed transaction
  2. The relevant statement, with unrelated information redacted
  3. Your dated timeline and signed statement, if useful
  4. Proof of notice, case numbers, and bank correspondence
  5. Card, account, travel, work, or security records
  6. Merchant, ATM, police, or identity-theft documents
  7. A list of additional records the bank should request or review

Leave the transaction date, amount, descriptor, and identifying account digits visible. Name digital files by date and document type, and use the bank's secure upload system when possible.

Contact the merchant when that makes sense

If you recognize the merchant, ask whether it can identify the order or issue a refund. Keep the request in writing, but don't postpone notifying the bank while waiting for an answer.

A purchase you authorized but didn't receive, canceled, or received in defective condition is generally a merchant-performance dispute rather than an unauthorized-transfer claim. Keep the order confirmation, promised delivery date, tracking information, cancellation request, and refund response. Then ask the bank for its debit-card purchase-dispute process and deadline; that deadline may differ from the Regulation E deadline for an unauthorized transfer.

Keep a contact log

For every call, message, or upload, record the date, channel, representative, case number, requested documents, and next deadline. If the bank asks for a signed statement or other documents, respond promptly and keep proof that the bank received them.

If the bank decides an error occurred, it generally must correct the account and report the result. If it rejects the claim, ask for the written explanation and, where the error-resolution rule makes them available, the documents it relied on.

What makes an evidence packet persuasive?

The strongest packets are consistent and transaction-specific. Each document should help answer one of these questions:

A police report, affidavit, IP address, or CCTV preservation request can add support, but none is automatically decisive. The bank may consider merchant records, authentication data, card use, account history, and your statements together.

Examples of useful evidence

An ATM withdrawal while you were elsewhere

Suppose you still have your card, but an ATM withdrawal occurred while you were at work in another state. Send the statement, ATM location and time, work or travel records, notice to the bank, and a request to preserve ATM footage. Together, those records create a clearer timeline than a bare statement that the withdrawal wasn't yours.

An online purchase after an account takeover

An unfamiliar order is followed by a password-reset alert and a shipping address you don't recognize. Preserve the alerts, emails, order details, and account-change history. Ask the bank to review or request the merchant's device, token, shipping, and transaction records.

An authorized purchase that was never delivered

You placed the order, but the merchant never delivered it. Keep the order confirmation, promised delivery date, tracking information, cancellation request, and response about a refund. Report it as a merchant or fulfillment dispute and ask the bank about its debit-card purchase-dispute procedure.

If the bank denies the claim

Read the written denial carefully. Check whether the bank misunderstood the transaction, treated an unauthorized-transfer report as a product dispute, or overlooked a document.

Then:

  1. Request the explanation and records the bank relied on.
  2. Respond in writing to each stated reason for denial.
  3. Attach only new or relevant evidence, and identify each attachment.
  4. Ask whether the bank offers an internal appeal or review process.
  5. If the issue remains unresolved, submit a complaint through the CFPB complaint portal.

A CFPB complaint gives the bank an opportunity to respond and creates a record of the problem. It doesn't replace the original notice to the bank, guarantee reimbursement, or resolve every private legal claim. For a substantial loss, a consumer-law attorney or legal-aid service may be able to discuss state deadlines, arbitration terms, and small-claims procedures.

Mistakes to avoid

Start with the official bank contact channel, report the transaction accurately, and save the case number before assembling the rest of the packet.