If a debit-card purchase or ATM withdrawal was not yours, contact your bank or credit union immediately, report the transaction as unauthorized, and secure the card and account. For many U.S. consumer accounts, that starts the error-resolution process under Regulation E.
If you authorized the payment but the seller never delivered the item, sent the wrong item, or failed to issue a promised refund, describe it as a merchant dispute. Don't call an ordinary service or delivery problem fraud. Debit-card network rules and your account agreement may provide a dispute process, but Regulation E does not automatically require a refund for a disappointing purchase.
No dispute route guarantees that money will be returned. Reporting quickly, using the correct category, and keeping records give the bank the information it needs to investigate.
Start by identifying the problem
| What happened | Best first move | Rules or process that may apply |
|---|---|---|
| You did not make or authorize a debit-card purchase or ATM withdrawal | Contact the bank immediately and secure the card | Regulation E unauthorized-transfer rules |
| The amount is wrong, a transfer appears twice, or the statement lists a transaction incorrectly | Tell the bank what is wrong with the transaction | Regulation E error-resolution procedure |
| You authorized a purchase but goods were not delivered, were defective, or a refund is missing | Contact the merchant, then notify the issuer before its deadline | Merchant policy, card-network dispute process, and account terms |
| A recurring payment is pulled directly from your bank account | Cancel with the merchant and request a stop payment from the bank | Regulation E preauthorized-transfer rules |
| The transaction was ACH, a payment-app transfer, or a wire | Identify the payment rail when you report it | Coverage and procedures can differ from a debit-card dispute |
A merchant name on a statement may not match the store or website you recognize. Check receipts, subscriptions, delivery services, household purchases, and authorized users before concluding that the charge is fraudulent. If you still cannot identify it, report it promptly and explain what you know.
In this article, "bank" includes a credit union or other financial institution that holds the consumer account.
Secure the account before the next charge appears
Use the phone number printed on the card or the bank's official app or website. Do not use a phone number in an unexpected text, email, or pop-up.
If the card is missing, the account may be compromised, or a transaction is clearly unauthorized:
- Lock or cancel the card and request a replacement.
- Tell the bank whether the card is lost, stolen, or still in your possession.
- Review other recent transactions, including ATM withdrawals and recurring charges.
- Change online-banking passwords through the official site if credentials may have been exposed.
- Turn on multifactor authentication and transaction alerts if the bank offers them.
- Record the date and time you noticed the problem and the date and time you reported it.
- Get a claim or case number.
The FTC's guidance on lost or stolen cards also recommends monitoring accounts and reporting unrecognized withdrawals or charges as soon as you find them.
A pending debit-card charge can be harder to dispute through the usual process before it posts. Still report suspected card compromise immediately. The bank can tell you whether it can block the pending transaction or whether it needs to post first.
Give the bank a clear error notice
For a Regulation E claim, the bank needs enough information to identify the transaction and understand why you believe there is an error. Be ready to provide:
- Your name and account information
- The merchant, ATM, recipient, or transaction description
- The date and amount
- The date you discovered the issue
- Whether the transaction was unauthorized, duplicated, incorrect, or missing from the statement
- Whether the card was lost, stolen, or still in your possession
- Any related merchant contact or cancellation attempt
For an unauthorized charge, a simple factual statement works:
"I did not authorize the debit-card transaction from [merchant] for [$amount] on [date]. I discovered it on [date]. My card is [lost/stolen/still with me]."
For an authorized merchant problem, say that directly:
"I authorized this purchase, but the goods were not delivered. I contacted the merchant on [date] and have attached the order and delivery records. I am asking you to review this through your debit-card merchant-dispute process."
An oral report can start a Regulation E error claim. The bank may ask for written confirmation within 10 business days after your phone call. Ask where to send it, whether a signed form is required, and the exact deadline. If the bank properly requests written confirmation and does not receive it, that can affect provisional-credit obligations during an extended investigation.
Save the case number, the representative's name if available, and proof that you submitted any form or documents.
Gather evidence, but do not wait to report
Don't delay notice while trying to assemble a perfect file. The deadline for reporting can matter more than having every receipt on the first call.
Match the records to the dispute:
| Dispute type | Useful records |
|---|---|
| Unauthorized transaction | Statement or transaction screenshot, date discovered, card status, evidence of account compromise, police report if one exists |
| Wrong amount or duplicate | Receipt, agreed price, and statement entries showing the mismatch or duplicate |
| Item or service not received | Order confirmation, promised delivery date, tracking history, and merchant correspondence |
| Returned item or canceled service | Return receipt, cancellation confirmation, refund promise, and expected refund date |
| ATM error | ATM location, date, requested amount, cash received, receipt, and any error message |
Keep original documents. Use copies or the bank's secure upload system when submitting evidence, and avoid sharing unrelated account information unless the bank asks for it.
A police report is not a universal requirement for a debit-card dispute. The bank may request one when a card was stolen or identity theft is involved, so provide it if available and accurate.
When the purchase was authorized, contact the merchant too
For fraud or an unauthorized transfer, a merchant conversation is optional and should not delay notice to the bank. For an authorized purchase problem, the merchant is usually the first place to seek a refund, replacement, or correction.
Put the request in writing and include:
- The order or account number
- Transaction date and amount
- What went wrong
- The remedy you want
- A reasonable date for a response
The FTC's sample letter for disputing credit and debit card charges can help you organize a written request.
A merchant's failure to respond does not by itself turn the purchase into an unauthorized transfer. There is also no single nationwide rule requiring every merchant to resolve a debit-card complaint within 45 days. Network and issuer timelines may apply, so check with the card issuer before its dispute deadline passes.
If the merchant refunds you after the bank has issued a temporary or final credit, tell the bank. Keeping both credits can create another account issue.
What Regulation E covers, and what it does not
The current text of Regulation E sets federal electronic-transfer protections for covered U.S. consumer accounts. Many debit-card purchases and ATM withdrawals are electronic fund transfers under the rule.
Its error-resolution procedure commonly applies to:
- Unauthorized electronic fund transfers
- Transfers with an incorrect amount
- Duplicate transfers
- Transfers omitted from or incorrectly shown on a statement
- Certain bookkeeping or calculation errors
The rule does not automatically treat a product-quality, delivery, return, or customer-service disagreement as an electronic-transfer error.
An unauthorized transfer generally involves a transaction made without your actual authority and from which you received no benefit. A person you gave the card, PIN, or other access device to may be treated differently, particularly until you tell the bank that person is no longer authorized to use it.
Credit cards use different federal billing rules. Credit-card disputes generally fall under the Fair Credit Billing Act and Regulation Z, not Regulation E. Do not assume a credit-card deadline or procedure applies to a debit-card transaction.
ACH transfers, payment-app transfers, prepaid accounts, and wire transfers can also involve different terms or rules. Tell the bank exactly how the money moved rather than describing every transaction as a debit-card charge.
The key deadlines
For a Regulation E error notice, the usual deadline is 60 days after the bank sends the periodic statement that first shows the error. It is not usually 60 days from the transaction date.
There is a separate timing rule for a lost or stolen debit card or other access device. If you notify the bank within two business days after learning of the loss or theft, your statutory liability is generally limited to the lesser of $50 or the amount of unauthorized transfers made before you reported it.
Waiting longer can increase potential liability. If you do not report an unauthorized transfer within 60 days after the statement was sent, you may be exposed to later unauthorized transfers that the bank can show it could have prevented if you had reported the earlier error on time.
These are federal baseline protections, not a promise of zero liability in every case. A bank may offer broader protection under its own policy, but its conditions can still matter.
How long the bank can take
The error-resolution process is governed by Regulation E section 1005.11. The Federal Reserve reference to section 1005.11 summarizes the investigation framework.
| Stage | General Regulation E timing |
|---|---|
| Consumer's error notice | Usually within 60 days after the statement showing the error was sent |
| Initial investigation and determination | Within 10 business days after notice |
| Provisional credit if the bank uses more investigation time | Generally within 10 business days; up to 20 business days for certain accounts in their first 30 days |
| Extended investigation | Generally up to 45 calendar days after notice; up to 90 days for certain point-of-sale debit transactions, transfers initiated outside the United States, or certain new accounts |
| Notice of results | Within three business days after the investigation is completed |
If the bank determines that an error occurred, it must correct it promptly under the rule. If it needs extra time, provisional credit is generally required, subject to conditions such as a properly requested written confirmation of an oral notice.
Provisional credit is temporary. The bank may reverse it after finding no error, subject to its notice obligations. Treat the funds as potentially reversible until you receive the final decision.
If the bank denies the claim, request copies of the documents it relied on. Regulation E gives consumers the right to request the records used to conclude that no error occurred.
Stop recurring charges the right way
A recurring payment might be a card-on-file subscription or a preauthorized transfer pulled directly from your bank account. The steps differ.
For a preauthorized transfer from the bank account:
- Cancel the service with the merchant and keep the confirmation.
- Tell the bank you want to stop the specific recurring transfer.
- Make the request at least three business days before the scheduled payment.
- If the bank requires written confirmation of an oral stop-payment request, provide it by the deadline. Regulation E generally allows 14 days for that confirmation.
- Dispute any payment that already posted if there is a valid reason.
A stop-payment request does not automatically refund an earlier transfer or end the underlying service contract.
For a subscription charged to a debit card saved by the merchant, cancel directly with the merchant and ask the issuer about card blocking or dispute options. Disputing one posted charge does not necessarily cancel future subscription billing.
If the bank says no
Read the denial reason before responding. The bank may have concluded that the transaction was authorized, that notice was late, that merchant records support the charge, or that the matter is an authorized merchant dispute rather than a Regulation E error.
A focused response is more useful than simply resubmitting the same claim:
- Request the written explanation and the records used in the decision.
- Build a short timeline with the transaction date, statement date, discovery date, notice date, merchant contact, and bank responses.
- Submit evidence that addresses the stated reason for denial.
- Ask the bank to confirm whether it handled the matter as a Regulation E error claim, a fraud claim, or a card-network merchant dispute.
- Use the bank's internal complaint or escalation channel if you believe it classified or handled the claim incorrectly.
- Consider a complaint to the Consumer Financial Protection Bureau or the institution's appropriate regulator if the bank did not accept a timely notice, investigate, provide required provisional credit, or explain its decision as required.
For an authorized merchant dispute, focus on proof of the seller's promise, delivery failure, return, cancellation, or refund commitment. Calling it fraud will not fix a claim when the facts show that you approved the payment.
Common questions
Is two business days the deadline for every debit-card dispute?
No. The two-business-day rule mainly concerns liability after learning that a card or access device was lost or stolen. A Regulation E error notice is generally due within 60 days after the statement showing the error was sent. Report suspicious activity as soon as you discover it.
Can I dispute a debit charge that I authorized?
Yes, you can ask the issuer to review an authorized purchase when goods were not delivered, the amount was wrong, or a promised refund did not arrive. That does not automatically make it an unauthorized transfer under Regulation E.
What if I missed the 60-day deadline?
Notify the bank anyway. Explain why the report was late and provide the facts. Circumstances beyond your control can matter, and the bank's own policy may provide a broader process. Do not assume, however, that Regulation E will require a refund after a late notice.
Does provisional credit mean I won?
No. It is temporary credit while an extended investigation continues. It can be reversed after a final finding that no error occurred.
Before you call, write down the amount, merchant or ATM name, transaction date, statement date, and the date you discovered the problem. For an unauthorized charge, call the number on the back of the card now. For an authorized merchant problem, send the seller a written request and notify the issuer before its deadline.