The payment rail decides your refund rights. A debit card, credit card, ACH debit, a P2P app, and a crypto wallet do not follow one rule. These are U.S. rules. Not legal advice.

Speed matters. Report the charge now. You can gather details later.

Start With the Rail, Not the Merchant

Find the first door to knock on.

The table is a starting point. What controls your account depends on how you paid and what the platform contract says.

The EFTA Clock: $50, $500, and 60 Days

Regulation E gives debit and bank-account users real protection. The deadlines bite. If you report a lost or stolen access device within two business days after you learn about it, your liability is capped at $50. Miss that window and the cap can rise to $500. Miss the 60-day statement window and protection can shrink further for transfers after that period. The CFPB rule text spells out those limits.

If the charge came from a debit card tied to your checking account, an ACH debit someone pulled, or a prepaid card you loaded, you are usually in Regulation E territory. Merchant refund policies do not override that. Turns out, the bank still has to investigate an error notice. Under Regulation E, it generally has 10 business days to decide. If it needs more time, it usually must provisionally credit the disputed amount while it finishes. Ask for provisional credit if the bank says it needs up to 45 days. The eCFR part on electronic fund transfers is the rule source.

Put your notice in writing, even if you also call. A written trail makes it harder for the bank to say it never heard from you. Keep copies. Keep dates. Keep everything.

Credit Cards: FCBA, Zero Liability, and Chargebacks

Credit cards run on a different track. The Fair Credit Billing Act sets a federal billing-error process for credit card accounts. It caps unauthorized charge liability at $50, though many issuers advertise zero liability and absorb more. That zero-liability promise is card issuer policy, not a government refund guarantee. Read your cardholder agreement or the issuer's dispute page. Investopedia's FCBA overview explains the basics.

A chargeback is the card network's process between banks and merchants. It is not the same thing as an EFTA refund. If your issuer denies the dispute, ask for the reason in writing and for the documents the merchant submitted.

What to Do First: A Workable Sequence

Start here if a charge just landed.

1. Lock or freeze the account or card. Change passwords and PINs. Turn on two-factor authentication.
2. Call the bank or card issuer's fraud line. Say, "I am disputing an unauthorized transaction." Get a claim number.
3. Follow up in writing through the issuer's portal or billing-error address. Keep a copy.
4. Gather records: statement, transaction time and amount, your location, device logs, messages, and a police report if the loss is large.
5. Ask for provisional credit if the bank misses the 10-business-day investigation window under Regulation E.
6. Track every deadline. Put follow-up dates on your calendar.
7. If denied, appeal with new evidence and file a CFPB complaint if the issuer still won't fix it.

PayPal, Venmo, and P2P Payments

P2P apps add a layer. PayPal and Venmo publish their own dispute rules. Those rules control first. If someone got into your account and sent money without your permission, report it in the app and secure the account. If you sent money because a scammer tricked you, the app may treat it as an authorized payment. Thing is, that is a much harder refund.

If you funded the payment with a credit card, your card issuer may still review a billing dispute. If you funded it from a bank account or app balance, the bank's Regulation E process may apply only if the transfer was truly unauthorized. The line between unauthorized and authorized-but-scammed matters. The CFPB complaint portal accepts complaints about money transfers and virtual currency.

Crypto and ACH: Two Very Different Rails

ACH debits from a bank account usually fall under Regulation E. Report the debit to your bank and use the error-resolution process. Do not wait for the merchant to reverse it.

Crypto is not the same. A blockchain transfer is generally irreversible. There is no card-network chargeback for a wallet withdrawal. Some exchanges offer limited account-takeover help. Read the exchange's security and dispute policy. If the company is covered, you can file a CFPB complaint.

If Your Bank Denies the Claim

Get the denial in writing. Ask which documents the bank used and whether it contacted the merchant. Then send the missing evidence. A police report, an affidavit, or device records can change the review.

CFPB complaints go to the company. Companies generally respond in 15 days. You can review the response and provide feedback within 60 days. That route creates a record and often gets a second look. It is not a guarantee of a refund. You can start at the CFPB complaint page.

What Does Not Control the Refund

Social media posts about chargeback success rates do not control your case. A merchant's refund policy does not control it either if the charge was truly unauthorized and your bank or card issuer has a legal or contractual duty to investigate. Use the official process for your payment rail.

No single rule covers every app, card, and wallet. To be honest, the fastest path is usually the boring one. Call the issuer, write the dispute, keep the proof.

Questions After You File

How long does a bank have to respond to an unauthorized transfer claim?

Under Regulation E, the bank generally has 10 business days to investigate. It may provisionally credit the disputed amount and take up to 45 calendar days if it needs more time. The eCFR has the detailed error-resolution rules.

Is a chargeback the same as an EFTA refund?

No. A chargeback is a card-network process. EFTA and Regulation E govern bank account, debit card, prepaid card, and many ACH disputes. Credit card billing disputes follow the FCBA plus issuer policy.

Can I dispute a Venmo payment I sent?

If someone accessed your account without permission, report it through Venmo and secure the account. If you sent the payment yourself because of a scam, Venmo may treat it as authorized. A card-funded payment might also get a separate review from your card issuer.

Are crypto withdrawals refundable?

Usually not. Blockchain transfers are generally irreversible. Exchange policies may help in an account-takeover case, and the CFPB accepts complaints about virtual currency. A refund is not guaranteed.

If a charge hit today, lock the account. Call the issuer. Start a written dispute before the deadline. The paperwork you save now is what wins later.