Use the phone number printed on your card, statement, or official bank app the moment you see a transaction you didn't authorize. Give the amount, date, and merchant or recipient. Ask the representative to secure the account and open a case.

A number that arrived in an unexpected text or email is the wrong one to dial.

Will that one call finish the work? For U.S. consumers, the rest of the process depends on how the money moved.

Debit-card purchases and ACH withdrawals usually sit under Regulation E, while credit-card billing errors require a written notice under the Fair Credit Billing Act. Wires, plus payments you sent after a scam, need different wording.

Make the call. It still may not complete the file on its own.

Phone script to report an unauthorized transaction

Here's a starting script. Put it in your own words when you call.

"Hi, my name is [name], and my account or card ends in [last four digits]. I am reporting a transaction I did not authorize: [amount] to [merchant or recipient] on [date]. The transaction reference is [ID, if available]. Please secure my card or account, review it for other suspicious activity, and open an unauthorized-transaction case. What is the case number? Do you need written confirmation from me, and where should I send it?"

Keep the story to facts you can support. If a merchant descriptor just looks unfamiliar, say you don't recognize it. Don't call it fraud until you're sure. A shortened business name on a statement can look like a stranger.

Never share your password, PIN, or one-time security code. If someone called you first, hang up. Use a number you verified yourself.

Scripts for debit card, ACH, credit card, P2P, or wire

The payment type matters more than the logo on the card.

Some P2P services may fall within Regulation E when the provider meets the definition of a financial institution. The CFPB explains that point in its electronic fund transfer FAQs. Coverage can still depend on the service and the facts.

Thing is, a Visa or Mastercard logo does not decide the legal process by itself. The underlying account and how the transfer happened are what matter. Most bank wires are handled differently from electronic fund transfers. Ask for urgent recovery help. Don't assume a reversal is available.

Regulation E deadlines for debit cards and ACH withdrawals

For a covered electronic transfer error, Regulation E generally lets you notify the financial institution orally or in writing. The usual deadline is tight. Your notice usually must reach it no later than 60 days after it sent the periodic statement that first showed the error.

Give your name and account information. Explain why you believe there is an error, and provide the transfer type, date, and amount if you can.

The CFPB's Regulation E error-resolution rule says a financial institution generally has 10 business days to investigate. If it needs longer, it will usually need to provide provisional credit before taking up to 45 calendar days to finish. Certain situations can allow a longer period, up to 90 days.

Ask whether the bank requires written confirmation of your phone report. A bank can require it within 10 business days. Failing to send it can affect whether provisional credit is required.

Provisional credit isn't a final decision. The bank can reverse it after its investigation if it finds no error.

If a lost or stolen debit card or other access device is involved, federal liability can turn on how fast you notify them, and the Regulation E liability rule generally limits potential liability to $50 when you notify the institution within two business days after learning of the loss or theft, while later notice can raise the potential amount, sometimes to $500. The $50 figure depends on that two-business-day notice. Waiting more than 60 days after a statement can also leave you responsible for certain later transfers if the institution can show timely notice would have prevented them.

Federal law does not guarantee a $0 outcome. A stronger bank or card-network policy still isn't a substitute for prompt reporting.

Credit-card disputes: call first, then send written notice

A phone report can help the issuer block a card and start its fraud process. For the federal Fair Credit Billing Act process, you should also send written notice to the issuer.

The FTC's credit-card dispute guidance says the notice must reach the card issuer within 60 days after the first statement showing the error was sent. Send it to the billing-inquiries address shown on your statement. Not the payment address.

Your letter can be short:

"I am disputing the [amount] charge from [merchant] posted on [date] to account ending [XXXX]. I did not authorize this charge. Please investigate and correct this billing error. I have included copies of the relevant statement and supporting records."

Keep copies of the letter, statement, and delivery proof. Within 30 days, the creditor generally must acknowledge the dispute unless it has already resolved it. The investigation then has to finish within two complete billing cycles, not more than 90 days.

An app or phone dispute under the issuer's own process is convenient. To be honest, it still may not replace the written notice needed for the FCBA route. Send the letter anyway.

What to do after the call

Details vanish quickly after you hang up, and if you don't jot the time, the representative's name, every case number, and the exact next step while you're still on the line, you can leave with a reassuring answer and no clear record of whether the card was blocked, whether the case covers one charge or several, or what you were supposed to send.

1. Save screenshots of the transaction, alerts, chats, emails, and your account balance. Download the statement once it is available.
2. Check for other unfamiliar transactions. List each one separately with its date and amount.
3. Lock the affected card if your bank offers that option. If you think someone accessed your online banking, change the password through the official site and review account security settings.
4. Send any requested documents through the bank's secure channel. For a credit-card billing error, send the written notice to the billing-inquiries address within the deadline.
5. Watch the account for replacement-card charges, recurring ACH debits, or updates from the investigator.

Do not use an unauthorized-fraud script for every bad payment

An unhappy purchase isn't automatically an unauthorized transaction.

Walk through what actually happened. If a canceled subscription kept billing or an order never showed up, say that. The issuer may treat it as a merchant dispute or billing issue rather than account takeover.

A payment you sent to a scammer is a different mess. If you personally approved a P2P payment or wire because someone lied to you, tell the bank exactly that. Don't say your account was used without permission if you initiated the transfer yourself.

Turns out, the sequence of events can change the available recovery process. Clear facts help more than trying to fit the event into a legal label.

What to say if the bank denies the claim

Push for a precise reason. A vague refusal doesn't help you. Ask for the decision in writing and request the evidence or records the institution relied on.

"Please explain in writing whether you are denying this because you believe the transaction was authorized, because information is missing, or because of a deadline. Tell me what evidence you relied on and how I can request reconsideration."

Send any missing records through the channel the bank identifies. Keep the response with your original case notes.

If the company does not resolve the issue after you have used its escalation process, you can submit a complaint through the CFPB's consumer complaint system with a short timeline, the case number, statements, and copies of your written dispute.

Escalation doesn't pause a Regulation E or FCBA deadline. Preserve those rights first.

Questions callers often have

Do I need to say "Regulation E" or "FCBA" on the call?

No. State the facts clearly and meet the deadline. Mentioning the rule can help you ask the right question. No phrase automatically guarantees a refund or provisional credit.

Should I call the card network?

Call the card issuer or bank first. Visa tells cardholders to notify their issuing financial institution, which investigates the report. Visa's Zero Liability Policy also has exclusions, including certain commercial cards, anonymous prepaid transactions, and transactions not processed by Visa.

Can I demand provisional credit immediately?

You can ask whether the institution will provide it. For covered Regulation E errors, provisional credit may be required if the institution needs more time to investigate and the applicable notice requirements are met. It isn't an automatic same-day refund.

Open your current statement or banking app now. List each suspicious transaction separately.

Then call the issuer from a verified number. You'll want the case number before you hang up. Ask for the next written deadline too.