What rule controls a debit card complaint?
For most U.S. consumer accounts, Regulation E is the main federal rule for an electronic fund transfer the consumer did not authorize. It covers possible liability, notice, and the institution's error-resolution process. Credit card billing disputes use different federal rules.
The payment rail still matters. Your statement and the institution can help identify whether the entry is a debit card purchase, ATM withdrawal, ACH debit, or peer-to-peer transfer. Don't call an ACH or peer-to-peer transfer a card charge just because the money came from checking.
Start with authorization. Did you approve the transfer, or did someone you gave authority to approve it? If neither happened, contact the bank or credit union promptly. A bad purchase alone does not make a transfer unauthorized.
Thing is, a merchant descriptor may have an ordinary explanation. It could show a parent company, subscription name, digital wallet entry, or household purchase. Check those possibilities against receipts and account activity. If the transaction still doesn't belong to you, report it and explain why.
The liability rule in 12 CFR 1005.6 and the Regulation E error-resolution procedures set the main federal deadlines. A bank's debit-card workflow or a card-network procedure may add steps, but neither is itself a federal right.
Red flags in the transaction itself
Red flags call for a pause, not a conclusion. Check the account, then contact the issuer if you still can't explain the entry.
Watch for these patterns:
- Several small, unfamiliar charges appear close together, sometimes followed by a larger debit.
- An ATM withdrawal or purchase happened at a time or place you can rule out.
- A merchant descriptor doesn't match your receipts, subscriptions, household purchases, or recent travel.
- You receive a card-replacement notice, login alert, password change, or one-time code that you didn't request.
- A previously quiet account suddenly shows several transactions you can't explain.
A small pending debit may be a legitimate verification hold. Compare pending and posted entries so you don't report one transaction twice. If you believe it is unauthorized, notify the issuer promptly rather than waiting for it to post.
What can make a legitimate complaint look suspicious?
The details can matter as much as the label. A genuine complaint can look unreliable when dates shift or a screenshot leaves out context.
| Complaint detail | Why it raises a question | Better record |
|---|---|---|
| The amount or date changes between calls | The bank may not be able to match the claim to one ledger entry | Copy the exact statement line and list each disputed transaction separately |
| The report says "unauthorized," but the customer describes approving the purchase | The issue may instead be non-delivery, cancellation, or a refund problem | Explain what was authorized and what went wrong afterward |
| Only an edited screenshot is provided | The image may omit important account details | Keep the original statement, alert, receipt, and message |
| The same transaction is disputed more than once | The bank needs to know whether a refund or earlier decision already exists | Include the prior case number and any credit received |
| The claim was delayed without an explanation | Timing can affect liability and the bank's investigation | State when you first noticed the transaction and when you reported it |
None of these problems automatically defeats a claim. Use the actual facts, not a cleaner version, and never submit someone else's evidence. Don't rely on an online dispute threshold unless it is tied to your bank's rules.
Debit card dispute deadlines under Regulation E
Two separate timing rules matter here. They answer different questions.
Lost or stolen card or access device. If you learn that your card or other access device is lost or stolen, notify the financial institution within two business days. With timely notice, liability is generally limited to the lesser of $50 or the unauthorized transfers made before notice.
That is the special lost-device rule. It is not a universal two-day deadline for every unfamiliar debit.
If you miss the two-business-day window but report within the applicable 60-day statement period, federal liability is generally limited to the lesser of $500 or the sum of two amounts: the lesser of $50 or the unauthorized transfers made during the first two business days, plus unauthorized transfers made afterward and before notice. Report the loss anyway. Waiting can increase your possible exposure.
Statement showing an unauthorized transfer. The institution must receive notice no later than 60 days after it sends the periodic statement, or provides the passbook documentation, on which the alleged error first appears. If you miss that deadline, you may face liability for later transfers the institution establishes would not have happened if you had reported the earlier problem.
Turns out, 60 days is a notice deadline tied to federal error resolution. It isn't a blanket promise that the bank will refund the money.
You can generally give oral notice first. The institution may require written confirmation within 10 business days, so follow up through a secure message, letter, or its dispute form when possible.
The institution generally must investigate promptly and determine whether an error occurred within 10 business days after receiving the notice of error. If it uses a longer period allowed by the rule, provisional credit and other requirements may apply. Provisional credit is temporary, not final.
How to report a suspicious debit card transaction
Use an official contact route. Call the number on the card, open the bank's app or website yourself, or visit a branch. Don't use contact details from an unexpected text or email.
- Secure the account. Freeze the card if the bank offers that option. Tell the issuer if the physical card, PIN, phone used for account access, or account credentials may be compromised.
- Copy the entry. Save the exact merchant name, date, amount, account, and pending or posted status. Write down when you first noticed it.
- Give clear notice. Say that you believe the transfer was unauthorized, then explain why. Provide your name and account information through a secure channel, along with the date, amount, and reason for the claim.
- Separate different problems. Keep an unknown transaction apart from a late shipment, unwanted subscription, or missing merchant refund. If several issues exist, describe each one separately.
- Keep the file through the decision. Save statements, alerts, receipts, emails, delivery records, and messages. Keep the originals. Keep call notes and the case number, too. Track any provisional credit, final notice, reversal, or request for more information, and answer document requests by the stated deadline.
The FTC's guidance on lost or stolen credit, ATM, and debit cards also recommends prompt reporting, account monitoring, and stronger account security.
When the purchase was authorized but something went wrong
Authorization changes the dispute. An approved payment can still involve non-delivery, the wrong amount, a failed cancellation, or a recurring debit that continued after cancellation.
Ask the merchant for a remedy in writing. Then ask the issuer which debit-card dispute category fits. Possible categories include non-delivery, a duplicate charge, an incorrect amount, or a recurring debit that continued after cancellation.
Deadlines and procedures can depend on the issuer, card network, account type, and payment rail. Regulation E's unauthorized-transfer protections don't automatically resolve an authorized purchase dispute.
Use wording that matches the facts: "I authorized the purchase, but the item was not delivered." Don't say "I never authorized it" unless that is true.
If the bank denies the complaint
To be honest, a denial letter is a prompt to inspect the file, not discard it. Read the stated reason first. The bank may have treated the report as an unauthorized transfer, a merchant dispute, or another type of error.
Ask when the institution received your notice. If it says no error occurred, ask for the written explanation and, as permitted by the regulation, the documents it relied on.
Send a short written request for reconsideration. Include the exact statement line, a simple timeline, the case number, and evidence the bank may have missed. Mention any provisional credit, refund, or earlier decision.
If the response still doesn't address a possible Regulation E error, you can use the CFPB complaint portal as an escalation channel. A CFPB complaint doesn't replace timely notice to the bank. If the transaction came from a scam, you can also report it through the FTC's ReportFraud site.
Habits that reduce repeat problems
Alerts can't block every unauthorized transaction. They can shorten the gap between the debit and your report.
- Turn on alerts for debit purchases, ATM withdrawals, login changes, and contact-information changes.
- Use multifactor authentication for banking and email accounts. Never share your PIN or one-time codes.
- Keep cards, account information, receipts, and deposit slips secure.
- Review posted statements regularly and report transactions you don't recognize as soon as you find them.
- If card details may be exposed, ask the issuer whether replacing the card or securing the account is appropriate.
Common questions
Does an unfamiliar merchant name prove fraud?
No. Compare it with receipts, subscriptions, digital wallets, household users, and the merchant's customer-service information. Report it if you still can't identify or authorize the transaction.
Does the 60-day deadline guarantee a refund?
No. It protects the timing of your federal error notice, but the institution still investigates whether an error occurred. The facts, account type, and reporting date can affect the result.
Should I contact the merchant before my bank?
For an unauthorized transaction, contact the bank or credit union promptly. For an authorized purchase you didn't receive, or a refund the merchant didn't provide, contacting the merchant first can create useful written evidence.
Is provisional credit final?
Usually, no. Treat it as temporary until the bank sends its final decision, and keep monitoring the account.
This is general U.S. consumer information, not legal advice. For a live problem, copy the exact statement line, note when you noticed it, contact the issuer through an official channel, and save the case number.