How to Handle Unauthorized Charges on Your Credit or Debit Card in 2026

Spotting an unauthorized charge on your credit or debit card statement can trigger immediate concern, but US law provides strong protections to limit your losses and recover funds. Under the Fair Credit Billing Act (FCBA) and FTC guidelines, you have the right to dispute these charges promptly. For credit cards, your liability is typically $0 if you report before unauthorized use occurs. Debit cards cap liability at $0 within two business days of discovery, $50 if reported between two and 60 days, and potentially unlimited afterward, per FTC 2025 rules.

Start by checking statements as soon as possible to identify issues, as advised by the FTC in 2022. Secure your account immediately to prevent further charges, then contact your issuer to dispute. For billing errors, send a formal dispute letter within 60 days of receiving the statement under FCBA. No time limit applies strictly to fraud or unauthorized charges themselves, according to Experian. Issuers must acknowledge disputes within 30 days and resolve within 90 days, often issuing temporary credits during chargebacks.

Follow these steps to minimize exposure and resolve disputes effectively.

What Counts as an Unauthorized Charge?

Unauthorized charges occur when someone uses your credit or debit card without your permission, leading to transactions you did not authorize. Real-world examples include cases from FTC complaints where defendants offered "free" trials on websites that automatically triggered recurring charges through undisclosed negative option plans. Even after consumers instructed defendants to stop, the charges continued on their cards, as detailed in a 2018 FTC enforcement action.

These differ from merchant errors or recognized purchases. The FTC emphasizes checking statements regularly to spot such issues early, keeping receipts to address inaccurate charges. Recognizing patterns like unexpected subscriptions or small test charges helps consumers identify problems quickly.

Your Liability Limits for Unauthorized Charges

US federal protections sharply limit your financial responsibility for unauthorized use, depending on card type and how quickly you report. Credit cards offer $0 liability if you notify the issuer before any unauthorized charges post on your account. For debit or ATM cards, report within two business days of learning about the loss or theft for $0 liability; between two and 60 days after a statement is sent, liability maxes at $50; after 60 days, it becomes unlimited (FTC 2025).

These FTC 2025 limits focus on US consumers and underscore the need for swift action to cap exposure.

Step-by-Step Guide to Disputing Unauthorized Charges

Act fast to protect your funds with this sequential process grounded in FTC and FCBA guidelines.

1. Review statements promptly: Examine your credit or debit card statements as soon as they arrive to spot unauthorized charges, per FTC 2022 advice. Compare against receipts to confirm inaccuracies.

2. Secure your account: Contact your issuer immediately to freeze the card, block further transactions, and prevent additional unauthorized activity, as recommended by N26.

3. Contact the merchant first if possible: Reach out to the merchant to request a refund, especially for recognized but incorrect charges (The Points Guy 2024).

4. Dispute with your issuer: Call or use the app to initiate a dispute for unauthorized transactions. For formal FCBA billing errors, send a written letter within 60 days of the statement date detailing the issue, as outlined by The Points Guy in 2024.

5. Request a chargeback: Your issuer handles the chargeback process, temporarily crediting the disputed amount while investigating, according to Tips Cred 2026. Merchants may respond with evidence, but you do not need to engage them directly beyond initial contact.

Track all communications and retain records throughout.

Timelines and What Happens During a Dispute Investigation

Deadlines vary by charge type and network. Under FCBA, dispute billing errors within 60 days of statement receipt. Visa and Mastercard allow up to 120 days for certain transactions, creating some variation. Fraud or purely unauthorized charges face no strict federal time limit, per Experian.

Issuers acknowledge disputes within 30 days and complete reasonable investigations within 90 days, as noted by Bankrate in 2025. During this period, they often provide temporary credits via chargebacks (Tips Cred 2026). If unresolved after 90 days, escalate by filing complaints with the Consumer Financial Protection Bureau or your state's attorney general. These expectations guide whether to wait or pursue alternatives.

Credit Cards vs. Debit Cards: Which Dispute Process Fits Your Situation?

Credit and debit cards follow similar dispute steps but differ in liability and fund access speed, aiding your choice.

Use credit details if your card offers $0 liability and rewards; opt for debit processes emphasizing immediate account locks when funds are critical.

FAQ

How soon must I report an unauthorized charge to limit liability?
For credit cards, report before use for $0 liability. Debit requires notification within two business days for $0, up to $50 if 2-60 days, per FTC 2025.

What's the difference between unauthorized charges and billing errors?
Unauthorized charges involve use without permission; billing errors are inaccuracies like wrong amounts on authorized purchases. Both fall under FCBA 60-day disputes, but fraud has no time limit (Experian).

Do I have to contact the merchant before disputing with my card issuer?
Try the merchant first for quicker resolution, but you can dispute directly with the issuer for unauthorized use under FTC guidelines (The Points Guy 2024).

How long does a card issuer take to resolve my dispute?
Issuers acknowledge within 30 days and resolve within 90 days via reasonable investigation (Bankrate 2025).

Are there different rules for unauthorized charges in the EU vs. US?
US follows FCBA/FTC with liability caps and 90-day probes; EU requires immediate refunds unless fraud is suspected and reported, per a 2026 EU prosecutor opinion (The Future Media 2026).

What if my dispute is denied--what are your options?
Appeal with more evidence, file with CFPB, or contact your state attorney general after the 90-day window.

Monitor statements monthly and consider alerts for real-time notifications. Keep dispute records for at least two years.