Unauthorized debit charges hit money already in your account, which is why the timeline is tighter than people expect from credit cards.
See a charge you never made? In the United States, Regulation E usually decides how much you can lose and how quickly the bank has to investigate.
Merchant refund desks don't control that clock, and a Visa or Mastercard logo on the card doesn't replace the notice you send the bank. Tell them anyway. Waiting on the store can close your window.
What actually controls a debit card dispute
Consumer debit and ATM transfers on a personal account generally fall under the Electronic Fund Transfer Act. The error-resolution procedures in Regulation E tell the bank how fast it must investigate after it gets a proper notice of error.
Your app's dispute button is only a delivery method, and zero-liability ads are company policy, not a stand-in for timely notice. Network chargebacks help the bank pull money from a merchant. None of that rewrites the federal notice period.
Business checking and most wires follow other rules. Confirm you're on a consumer debit card before you lean on these timelines.
The two clocks people mix up
A lost card isn't the same problem as a bad line on a statement. The rule uses two starting points.
| Clock | When it starts | What is at stake |
|---|---|---|
| 2 business days | After you learn the card was lost or stolen | Extra use of that device can raise your cap |
| 60 days | After the bank sends the statement that first shows the transfer | Late notice can leave later theft on you |
Thing is, the 60-day window starts when they sent the statement. It doesn't pause for travel or an unread email.
Call about a lost card within two business days of learning it was gone. The liability rule then caps that slice at the lesser of $50 or what moved before you notified the bank. Miss those two business days and the cap can rise to $500 in the cases the rule names. Miss the 60-day statement deadline and later unauthorized transfers the bank ties to that delay can fall on you.
Card-number theft without missing plastic doesn't always use the $50/$500 lost-device ladder. File inside the 60-day statement window anyway.
Official commentary counts two 24-hour business-day periods, with midnight cutoffs. Don't treat a weekend like bonus time. Saturday can count if your bank treats it as a business day.
How to report the charge
Do this the day you spot the line.
- Write down the date, amount, merchant, and account ending digits.
- Freeze or replace the card in the official app or with the number on the card, and get a reference number.
- Give an error notice: you didn't authorize the transfer, or name the billing mistake, plus your name, account number, date, amount, and why it's wrong.
- Send written confirmation within 10 business days if they require it after a phone report.
- Save the reference number, screenshots, and any letter.
Phone, chat, or the in-app dispute flow can carry the notice. Get a timestamp you can prove. A merchant refund ticket is not notice to the bank.
Proof worth attaching
Banks ask for the same core facts repeatedly because that is how they timestamp the notice.
You will probably bounce between the app chat, a recorded fraud line, and a web form that asks for the same date and amount twice, and yes that's irritating when you just want the money reversed, but those three items (who you are, which transfer, why it's an error) are what the investigation needs to start.
Useful extras, if you have them:
- Statement screenshot or PDF that shows the charge
- Receipts, travel records, or messages that show you didn't make the purchase
- A police report number after a stolen wallet or a break-in
- Notes from any merchant refund attempt
A police report is paperwork. It isn't a guaranteed win. Don't sit on the bank notice while you wait for a precinct appointment.
Here's a short letter if the app fails:
[Date]
[Bank dispute address from your statement or the bank's official site]
Re: Notice of error, account ending [XXXX]
My name is [full name]. I hold account [number]. I did not authorize the [amount] electronic transfer on [date] to [merchant name]. Please investigate this error, provide written results, and credit the account if the transfer was unauthorized.
[Phone]
[Email]
[Signature]Mail it so you can prove delivery if you're not filing in the app.
What happens after the bank has notice
A complete notice starts the investigation clock. The bank generally must decide whether an error occurred within 10 business days.
It may take up to 45 calendar days if it provisionally credits you within those 10 business days. New accounts, many ATM and point-of-sale transfers, and foreign transfers can use the longer 20-business-day and 90-day tracks the rule allows. Ask which clock they are on. Write the answer down.
Provisional credit is spendable. It's also reversible if they later find no error, and they have to tell you before they yank it. After a reversal, they may need to honor certain checks and preauthorized payments for a few business days without stacking overdraft fees.
Check the claim weekly. Use the reference number. Late investigations belong in a regulator complaint.
When you authorized the payment yourself
Turns out a lot of dispute tickets are payments people approved after a fake text, a fake job, or a fake bank alert.
You sent the money, typed a PIN, or confirmed a Zelle-style transfer. The bank may call that authorized. Regulation E's unauthorized-transfer definition generally doesn't cover a payment you were tricked into approving. Issuer goodwill and P2P network policies are a different bucket.
Still tell the bank. Lock the account if someone else now has access. Don't assume the $50 cap covers a transfer you confirmed.
Chase, Bank of America, and other issuers
Federal deadlines don't change with the logo. Chase, Bank of America, and smaller issuers all have to take a timely error notice, large banks usually let you tap the charge in the app and upload files, and a credit union may still want a mailed letter, but you're filing the same facts either way.
Use the bank's own dispute path so the notice is on their system. Don't treat a merchant chat log as proof the bank was notified.
Visa or Mastercard recovery is your issuer's problem with the merchant. Your job is the Regulation E notice to the bank that holds the deposit account.
If the bank refuses to reverse the charge
Get the denial in writing. Read the reason. Match their reason with dates and documents, especially if they claim you authorized it, you filed late, or the merchant validated the sale.
To be honest, internal appeals move only when you add facts they didn't have. Repeating "I didn't do it" with no timeline rarely reopens a closed file.
Send the file to the Consumer Financial Protection Bureau if they won't reopen it. Attach the denial, your notice dates, and the statement. You can also log the incident at the FTC fraud site. That FTC report is a record. It doesn't replace the bank dispute or the CFPB complaint.
Keep using the new card they issued. Old numbers stay burned.
Open today's statement or app feed. Pick the charge. File the error notice with the bank that holds the account before you spend another day on hold with the merchant.