An unfamiliar debit-card transaction calls for two separate actions: protect the account and notify the bank. Call the number on the back of the card or use the bank's official app to block the card and open a claim. Then send written notice through the secure channel, official form, or mailing address the bank identifies.
Use the fraud template below only when you didn't authorize the transaction and no one you authorized made it. If you made the purchase but the item never arrived, the amount was wrong, or the merchant didn't honor a return, describe that problem accurately instead. Reporting quickly protects your options, but it doesn't guarantee an immediate refund.
Quick answer
For a U.S. consumer debit-card dispute:
- Report suspected fraud as soon as you see it. Ask the bank to block the card, replace it, and check for related transactions.
- Give the bank notice no later than 60 days after it sent the statement showing the alleged error. The institution must receive the notice; a sent email by itself may not prove that.
- Use Regulation E for an unauthorized debit-card electronic fund transfer. The Fair Credit Billing Act generally addresses credit-card billing errors, not ordinary debit-card transactions.
- Ask about provisional credit if the bank can't finish an eligible investigation within the initial period. The credit is temporary and doesn't apply automatically to every complaint.
- Keep the statement, claim number, notice, delivery confirmation, correspondence, and any evidence showing what happened.
The rule for an unauthorized debit-card transaction
Most unauthorized debit-card transactions are electronic fund transfers covered by the Electronic Fund Transfer Act and its Regulation E error-resolution rule. The rule addresses notice, investigation, provisional credit, and written explanations. See the Regulation E error-resolution rule.
Here are the points that usually matter most:
- Notice deadline: The financial institution generally must receive notice within 60 days after it sends the periodic statement on which the alleged error first appears. That is a notice deadline, not a deadline for the bank to finish the claim.
- Lost or compromised card: Report a lost, stolen, or compromised card promptly after learning about it. Waiting can affect the protection available for later transfers.
- Phone notice: Oral notice by phone will usually start the process. The institution may require written confirmation within 10 business days after an oral notice, so ask exactly where to send it.
- Initial investigation: The bank generally must investigate promptly and determine whether an error occurred within 10 business days after receiving the notice.
- Longer investigations: The rule permits longer investigation periods in some circumstances, but only if the institution follows the applicable conditions and notices. There isn't one universal 45-day or 90-day deadline for every dispute.
- No-error decision: If the bank says no error occurred, request the written explanation and the documents it relied on.
Email isn't automatically an approved dispute channel. Use it only if the bank confirms that it accepts error notices there and gives you the correct address. A secure message, official claim form, or notice sent to the bank's designated address is safer than an address copied from an old template.
Free unauthorized debit-card dispute email template
Delete anything that isn't true. If the bank gives you a specific form or secure-message process, use that process instead of sending sensitive information to an ordinary email address.
Subject: Regulation E error notice: $[amount] debit on [date], card ending [last four]
Dear [Bank or Credit Union Disputes Team],
I am giving notice of an error under Regulation E involving an electronic fund transfer from my [checking or other account]. The transaction details are:
Amount: $[amount]
Date posted: [date]
Merchant or statement descriptor: [name as shown]
Card or account ending: [last four digits]
Transaction or reference number: [number, if available]
I did not authorize this transaction, and no one I authorized to use the account made it. I first noticed it on [date].
[If applicable: My card was lost or stolen on [date], and I reported it on [date] under case number [number].]
Please investigate this error and correct my account if the transaction was unauthorized. Please confirm the date you received this notice and tell me whether you need a signed form or written confirmation through another channel.
If the investigation cannot be completed within the initial period, I request any provisional credit required under Regulation E and an explanation of how I can access it.
Please send your decision in writing. If you determine that no error occurred, please provide the written explanation and the documents relied on.
Attachments: [statement page, card-report confirmation, transaction details, and other relevant records]
Name: [full name]
Mailing address: [address]
Phone: [phone number]
Safe reply method: [secure message, phone, or other method]
Sincerely,
[Name]The useful parts of the notice are the account identifier, amount, date, transaction descriptor, and a clear statement that the transfer wasn't authorized. Legal-sounding language matters less than accurate facts.
Don't put your PIN, CVV, password, Social Security number, or full account number in ordinary email. If the bank's secure form requires the full number, use that form. Otherwise, use the last four digits and ask how the bank wants you to identify the account.
When the purchase was authorized but something went wrong
A charge for an item that wasn't delivered isn't automatically an unauthorized electronic fund transfer. You authorized the purchase, but the seller may not have fulfilled the agreement. Contact the merchant first when practical, then ask the bank how to use its debit-card dispute process if the issue remains unresolved.
The FTC provides a sample letter for disputing credit and debit card charges. This shorter version covers common merchant problems:
Subject: Refund request for order [number]: $[amount] [problem]
Dear [Merchant],
I authorized the purchase below, but there is a problem with the transaction:
Order number: [number]
Purchase date: [date]
Amount: $[amount]
Item or service: [description]
The problem is: [the item was not delivered, the amount was incorrect, the item was returned, or another accurate explanation].
I contacted you on [date] through [method], but the issue has not been resolved. Please refund $[amount] to the original payment method and confirm the result in writing.
Attachments: [receipt, order confirmation, tracking information, return proof, and prior correspondence]
Name: [name]
Contact information: [phone or email]
Sincerely,
[Name]Don't wait for a merchant response before reporting clear fraud to the bank. On the other hand, don't call an authorized purchase fraud simply because the merchant failed to deliver it. Use terms such as non-delivery, incorrect amount, returned purchase, cancellation, or service problem.
The steps that protect your claim
- Check the transaction descriptor, but don't stall. Statements sometimes show a parent company, payment processor, or abbreviated merchant name. Look at receipts, subscriptions, and purchases made by authorized household users. If the charge still appears fraudulent, report it without waiting for a definitive explanation of the descriptor.
- Call the bank or open its official app. Ask it to block the card, issue a replacement, review related transactions, and open a dispute. Record the case number, representative's name, date, and time.
- Confirm the written-notice route. Ask whether the bank accepts a secure message, email, online form, fax, or postal notice. Find out whether it requires a signature or written confirmation after a phone report.
- Send the notice and copies of the evidence. Keep the originals. A police report may help or may be requested, but don't wait for one before reporting the transaction and blocking the card.
- Save proof of receipt. Keep the sent message, secure-message confirmation, claim number, screenshots, mailing receipt, delivery confirmation, and replies showing when the bank received the notice.
- Watch the account. Report additional unauthorized transactions as the bank instructs. Change exposed passwords and turn on account alerts if online-banking information may have been compromised.
- Treat provisional credit as temporary. The bank may remove it if the investigation finds no error or if another source, such as the merchant, refunds the amount.
Deadlines and provisional credit
| Event | General U.S. timing | What to do |
|---|---|---|
| Lost, stolen, or compromised card | Immediately | Call the bank, block the card, and document the report |
| Notice of an error | No later than 60 days after the statement showing the error was sent | Submit the notice through an accepted channel |
| Initial investigation | Generally within 10 business days after notice is received | Answer requests for information promptly |
| Longer investigation | Only when permitted by the rule and the bank follows its conditions | Ask whether provisional credit applies and when the review is due |
| Final result | After the investigation is completed | Request a written explanation and supporting documents if the bank says no error occurred |
Provisional credit is a temporary credit while an eligible error claim is being investigated. If the bank can't complete the investigation within the initial period, Regulation E may require that credit, subject to the rule's conditions and exceptions. It isn't an automatic final refund, and the bank may reverse it after a no-error decision.
If the bank finishes its investigation within the initial period, provisional credit may not be necessary. A dispute over product quality, cancellation, non-delivery, or a merchant refund generally follows a separate bank or card-network process.
Which contact method should you use?
| Method | Best use | What to preserve |
|---|---|---|
| Phone | Immediate fraud report, card blocking, and opening a claim | Case number, call date, and representative details |
| Official banking app | Card controls and digital claim submission | Confirmation screen and claim reference |
| Secure message or designated email | Written notice and a record of the facts | Sent copy and receipt |
| Postal notice to the bank's designated address | When the bank requires or recommends a letter | Copy, mailing receipt, and delivery confirmation |
| Merchant support | Non-delivery, returns, wrong amounts, or service problems | Order records and the merchant's response |
| PayPal or Venmo support | Transactions initiated through those platforms | Platform case number and bank dispute number |
Calling first and then sending written notice is often practical: the call can stop further card use, while the written notice preserves the details of the error. Don't send account information to an address unless the bank confirms that it handles consumer disputes.
Wells Fargo, Chase, Capital One, PayPal, and Venmo
There isn't one universal debit-card dispute email address for every institution. The correct route depends on the issuer, account type, and transaction. Use the number on the card, the bank's official website, or the secure area of its app instead of an address copied from an old blog post.
Wells Fargo's debit-card FAQs describe Zero Liability protection for its debit cards. That is an issuer policy; it doesn't replace prompt reporting under Regulation E. Chase and Capital One customers should confirm the current dispute channel after signing in or by calling the number on the card.
If PayPal or Venmo appears in the transaction description, first work out how the payment was made:
- For an unauthorized platform transfer, report it through the platform's official process and notify the bank if the debit account or card was also charged.
- For an authorized purchase that wasn't delivered, describe the non-delivery or other merchant problem instead of calling it fraud.
- Give the platform and bank each other's case number when the two investigations overlap.
- If one party refunds you, tell the other party so you don't receive duplicate recovery.
Platform terms and bank error-resolution rules can differ. Don't assume a platform's dispute window is the same as the Regulation E notice period.
If the bank denies the claim or says it never received your notice
A denial should leave a paper trail. Take these steps:
- Ask for the decision in writing, including the reason for the denial and the evidence considered.
- Request the documents the bank relied on if its explanation says no error occurred.
- Compare the decision with your records. Identify specific discrepancies, such as the transaction date, amount, card status, or date of an earlier fraud report.
- Use the bank's stated appeal or complaint process and attach the original notice, evidence, and proof of delivery.
- If the bank appears not to have followed the error-resolution process, consider filing a complaint through the CFPB complaint portal. A complaint doesn't replace the original dispute notice or guarantee a refund.
- For a substantial loss or a genuinely disputed set of facts, consider advice from a qualified consumer attorney or legal-aid organization.
If the bank says it never received your email, show the confirmation and ask which address or form it designates for error notices. Sending the notice again through that verified channel can limit further delay, but keep the first receipt and the original dates.
Frequently asked questions
Should I cite the FCBA in a debit-card dispute?
Usually not. The FCBA generally concerns credit-card billing errors. For an unauthorized debit-card transaction, refer to Regulation E and describe the electronic fund transfer accurately.
Can an email qualify as notice to the bank?
It can, but only if the bank accepts that channel and receives the message. Ask for the approved email address, or use the secure message center, online form, or designated mailing address. If you report by phone and the bank requests written confirmation, send it within 10 business days.
Will I automatically receive provisional credit?
No. Provisional credit depends on the type of error and the bank's investigation timeline. If the bank can't complete an eligible investigation within the initial period, Regulation E may require provisional credit subject to the rule's conditions and exceptions. A merchant complaint about non-delivery or product quality doesn't automatically qualify.
What if I don't recognize a PayPal or Venmo charge?
Check whether it was a direct card purchase, an authorized recurring payment, or a transfer initiated through the platform. Report unauthorized activity to the platform and the bank when both are involved. Use the description that matches what actually happened.
Should I attach a police report?
Attach one if the bank requests it or if it supports your claim. Don't wait for a police report before blocking the card and notifying the bank, and keep copies of everything you submit.
This information is for U.S. consumer accounts and is general information, not legal advice. If the transaction wasn't authorized, call the bank through a verified channel today and save proof of when it receives your notice.