Time Limit Unauthorized Transaction Dispute: 60 Days (FCBA) vs. 120 Days (Card Networks)

Consumers facing unauthorized transactions must act within specific deadlines to protect their funds. Under the US Fair Credit Billing Act (FCBA) and Regulation Z, implemented through CFPB §1026.13, cardholders have 60 days from the date the statement is first sent or made available to notify their issuer in writing of a billing error, which includes unauthorized charges. Card networks like Visa, Mastercard, American Express, and Discover extend this window to up to 120 days from the transaction date or statement for filing chargebacks on unauthorized transactions, as outlined by sources such as PayCompass.

Merchants typically have 20-45 days to respond to these disputes, depending on the network--often 20 days for Visa, Amex, and Discover, and 30-45 days for Mastercard. Issuers must acknowledge disputes within 30 days and resolve them within 45-90 days. These timelines help consumers file promptly while giving merchants and issuers structured response periods. Missing consumer deadlines can forfeit recovery options, while merchants who respond on time can better defend legitimate sales.

Consumer Dispute Deadlines by Regulation and Payment Type

Consumers need to know precise windows for filing disputes to avoid losing rights. The FCBA sets a strict 60-day limit from the statement date for billing errors, including unauthorized credit card transactions, per CFPB §1026.13. This applies to open-end credit like credit cards and requires written notice to the issuer.

Card networks offer a broader 120-day period for chargebacks on unauthorized transactions, starting from the transaction date or statement, as detailed by Chargebacks911. This network rule covers fraud claims beyond FCBA billing errors. Note the scope difference: FCBA focuses on billing disputes, while network chargebacks handle a wider range of unauthorized activity. The exact start for the 120-day window can vary between transaction date and statement date across networks.

For ACH transfers, customers have 60 days from statement receipt to dispute unauthorized debits, according to PayCompass. These variations mean consumers should check their card agreement or network rules alongside federal law to identify the longest applicable window without assuming a universal deadline. For instance, while FCBA's 60 days is strict for billing errors, networks' 120 days may provide additional options for chargebacks if the claim fits fraud criteria.

Merchant and Issuer Response Time Limits in Disputes

Merchants must respond quickly to chargeback disputes to avoid automatic losses. Network rules generally provide 20-45 days from receiving the dispute notice. Visa, American Express, and Discover often allow 20 days, while Mastercard extends to 30-45 days, based on guidance from Merchant Cost Consulting and Chargebacks911.

For consumers, issuers play a key role post-dispute. Under CFPB §1026.13, issuers must acknowledge a billing error notice within 30 days. Resolution follows within two billing cycles, not exceeding 90 days, or up to 45 days in certain cases like new accounts. Merchants should gather transaction evidence--such as receipts, IP logs, or customer authorization--within their response window to contest invalid disputes effectively. Consumers benefit from provisional credits during these investigations, but timely merchant responses can influence outcomes.

Regional Differences in Unauthorized Transaction Reporting

Time limits vary significantly outside the US. In the European Union under PSD2, as interpreted in France by the Cour de Cassation, payment service users must report unauthorized transactions without delay, but no later than 13 months after the debit date, according to LE BOT Avocat. This extended period contrasts sharply with US FCBA's 60 days or network 120 days.

International consumers or merchants dealing with cross-border transactions should verify local regulations, as US network rules may still apply to American-issued cards, but EU timelines govern local accounts. These differences underscore the need to confirm jurisdiction-specific deadlines early, especially for transactions involving multiple regions where the shorter limit could apply.

Comparison of Key Time Limits for Unauthorized Disputes

The table below summarizes core deadlines by role, metric, start trigger, and sources for quick reference. Start dates differ--statements for FCBA/ACH, transactions for networks--potentially extending effective windows.

This comparison highlights conflicts like FCBA's shorter scope versus networks' broader chargeback access, aiding decisions on filing paths.

How to File a Dispute and Meet Deadlines

To file effectively, consumers should notify their issuer in writing as soon as possible--via certified mail, online portal, or app--detailing the unauthorized transaction, amount, and date. Retain all receipts, statements, and correspondence as evidence. For FCBA claims, send within 60 days of the statement; for network chargebacks, use the issuer's dispute tool within 120 days.

Merchants receive automated dispute notices and should log into their processor portal to submit representment with supporting documents within 20-45 days. Check network-specific rules via Visa, Mastercard, or processor guidelines. Acting early maximizes success, as provisional credits often apply during issuer investigations under FCBA. Consumers facing potential overlaps should prioritize the FCBA path for billing errors while exploring network chargebacks if additional time is needed for fraud claims.

FAQ

What is the time limit to dispute an unauthorized credit card transaction under US law?

Under the FCBA and CFPB §1026.13, consumers have 60 days from the statement date to notify the issuer in writing of unauthorized charges as a billing error.

Does the 120-day window apply to all unauthorized disputes, or just card networks?

The 120-day limit applies to chargebacks through card networks like Visa and Mastercard from the transaction or statement date, distinct from FCBA's 60-day billing error rule, per PayCompass.

How long do merchants have to respond to an unauthorized transaction dispute?

Merchants generally have 20-45 days from notice--20 days for Visa/Amex/Discover, 30-45 for Mastercard--to submit evidence, according to Chargebacks911.

What happens if an issuer takes too long to resolve my dispute?

Issuers must acknowledge within 30 days and resolve within 45-90 days per CFPB §1026.13; delays may entitle consumers to provisional credits or further recourse.

How does the EU time limit for unauthorized transactions compare to the US?

EU PSD2 allows up to 13 months from debit in cases like France, far longer than US FCBA 60 days or network 120 days, per LE BOT Avocat.

Can I dispute an unauthorized ACH transfer after 60 days?

ACH disputes are limited to 60 days from statement receipt; later claims typically fail, per PayCompass.

Review your latest statement today and contact your issuer if you spot unauthorized activity. For merchants, monitor processor alerts daily to stay within response windows.