If a debit-card charge looks wrong, act quickly and describe it accurately. In the U.S., an unfamiliar electronic fund transfer is generally handled under Regulation E, while a purchase you authorized but never received usually becomes a merchant dispute or chargeback under your bank's rules and the card network's process.
For an unauthorized transfer, Regulation E generally requires notice within 60 days after the statement that first shows the error. Your potential liability can rise if you wait. If the transaction is still pending, report suspected fraud right away and ask the bank whether it can stop the authorization or whether you need to wait for it to post before filing a formal claim.
Name the problem before you file
The bank will route your claim based on what you tell it. A merchant that failed to deliver your order is not the same as a stranger using your card number.
| What happened | How to describe it | Likely route |
|---|---|---|
| Someone used your card, card number, or account without permission | Unauthorized electronic fund transfer | Regulation E and the bank's fraud process |
| The amount is wrong, a charge duplicated, or another account error appears | Transaction or account error | Regulation E error-resolution process may apply |
| You paid but did not get the goods, returned them, or are missing a refund | Merchant dispute | Bank agreement and card-network rules |
| An ACH debit came directly from your checking account | Electronic-transfer issue | Separate ACH or electronic-transfer process |
| The charge has not posted yet | Suspected fraud or pending authorization | Bank-specific handling; report immediately |
Don't call an authorized purchase fraud because the seller didn't perform. Give the bank the date, amount, what you approved, what went wrong, and when you contacted the seller.
Dispute steps that protect your rights
1. Lock down the account first
If fraud is possible, lock or cancel the card in the bank's official app or by calling the number on the back of the card. Ask whether you need a new card and PIN. If online banking may have been exposed, change that password too.
Review recent activity, linked accounts, digital wallets, and recurring payments. Save fraud alerts, login notices, and other records before you clear messages or reset a device. You don't need to wait for an investigation to take these steps.
2. Record the transaction and the deadline
Pull the statement or transaction screen and save:
- Transaction date and amount
- Merchant description and any reference number
- Last four digits of the card or account
- Date the statement was issued or made available
- Any overdraft or related fee
For a possible unauthorized transfer, write down when you first saw it and whether the physical card or another access device was lost or stolen. Federal liability rules can turn on how quickly you reported the loss.
A statement name may not match the store name. Check receipts, subscriptions, digital wallets, and authorized users before you conclude the charge is unfamiliar. If it still isn't yours, report it and let the bank investigate.
3. Contact the bank through an official channel
Use the fraud or customer-service number on your card or statement, or start in the logged-in website or app. Don't rely on a phone number from an unsolicited text, email, search ad, or social-media message.
You can say:
I'm reporting a debit-card transaction for $[amount] on [date]. It is [unauthorized, an incorrect amount, a duplicate, or a merchant dispute]. Please open the appropriate claim and tell me whether it is being handled as a Regulation E error or under your debit-card dispute process.
Before you finish, get:
- The claim or case number
- The date the bank received your notice
- Where to send supporting documents
- Whether written confirmation is required
- Whether provisional credit may apply
- The expected date for the result
A phone call can start the record, but it may not satisfy every documentation requirement. Note the representative's name or ID, the time, and exactly what the bank asked for.
4. Send written notice
For an unauthorized electronic transfer or another possible Regulation E error, follow up in writing even if you already called. Include your name, contact details, account number or last four digits, transaction date, amount, and a clear explanation.
Use the address designated for error notices or transaction disputes. It may differ from the payment address or general mailing address. If you upload the notice, keep the confirmation screen. If you mail it, use a trackable service and keep a copy.
The FTC sample letter for disputing credit and debit card charges shows the basic format. Send copies, not originals, for receipts, statements, delivery records, and correspondence.
A simple debit-card error letter can look like this:
[Your name]
[Your address]
[City, State ZIP]
[Email and phone number]
[Date]
[Bank name]
[Dispute or error-notice address]
[City, State ZIP]
Re: Notice of error for debit-card transaction ending in [last four digits]
Dear Sir or Madam:
I am reporting an error involving a transaction of $[amount] dated [date] and shown on my account as [merchant description]. The transaction is in error because [brief reason: I did not authorize it; the amount is incorrect; it was duplicated; or another specific reason].
I first notified the bank by [phone, app, or online message] on [date]. My claim number is [number, if available]. Please investigate, correct the account if an error occurred, and send me the written results.
Enclosures: [statements, receipts, merchant messages, delivery records, or other evidence]
Sincerely,
[Your name]
If the issue is a merchant dispute instead of an unauthorized transfer, replace the error language with the facts of the purchase: what was promised, when delivery or a refund was due, how you contacted the merchant, and what remedy you want.
5. Answer questions without changing the story
Respond promptly and provide organized records. The investigator may ask whether you had the card, who else could use it, whether you used a PIN, where you were, or whether you contacted the merchant.
Be precise. If a family member, employee, or other authorized person used the card, explain what permission was given instead of calling the charge unauthorized. Conflicting explanations can slow the case.
Keep checking statements and alerts. Provisional credit is temporary, so don't treat it as final until the bank confirms the result.
Regulation E timing, without the myths
The federal error-resolution process is sometimes described as a "10-day refund rule," but that shortcut leaves out important details.
| Stage | General Regulation E framework |
|---|---|
| Notice of error | Generally within 60 days after the statement first showing the error |
| Initial investigation | Generally 10 business days |
| Extension | The bank may take longer if it provisionally credits the disputed amount within the required period |
| Provisional credit | Generally within 10 business days; timing can differ in some situations, including certain new accounts |
| Longer investigation | Generally up to 45 days, or up to 90 days for certain point-of-sale debit-card or foreign-initiated transactions |
| Result notice | Generally within 3 business days after the investigation ends |
| Correction | Generally within 1 business day after the bank determines an error occurred |
Business days usually exclude weekends and federal holidays. The bank may finish within the first 10 business days instead of issuing provisional credit. It may also require written confirmation of an oral notice within 10 business days.
Provisional credit gives you temporary access to the disputed amount while the investigation continues. If the bank finds no error, it can generally reverse the credit after sending the required explanation and notice. Read that notice carefully and ask for the documents behind the decision.
The Federal Reserve's official staff commentary on Regulation E provides regulatory background. Your account agreement may add procedures for uploading documents and checking claim status.
What you may be liable for
Federal liability for an unauthorized transfer isn't always zero. For a lost or stolen card or other access device, the general limits depend on when you notify the bank:
- If you report the loss or theft within two business days after learning about it, liability is generally limited to the lesser of $50 or the amount transferred before notice.
- If you wait more than two business days but report within 60 days after the statement showing the unauthorized transfer, liability can generally reach $500.
- If you wait more than 60 days after that statement, you risk liability for additional unauthorized transfers made after the 60-day period.
Banks and card networks may offer broader zero-liability protections, but those promises can have conditions and exceptions. Don't rely on that instead of reporting quickly.
If the unauthorized transaction caused overdraft or other fees, list each fee in your written notice and ask the bank to review them as part of the correction. Fee relief may be handled separately from the transaction claim.
Evidence that helps
A short chronology usually beats a pile of unrelated files. Put the transaction date, discovery date, contacts, and attachments on one page.
For an unauthorized transaction, copies can include:
- The statement or transaction screen
- Fraud alerts, card-lock confirmations, or replacement-card records
- Information showing where you were, when relevant
- Whether the physical card was in your possession
- Messages with the bank or merchant
- A police or incident report, if you made one
For an authorized purchase that went wrong, gather:
- The receipt, order confirmation, and advertised terms
- The promised delivery or service date
- Cancellation or refund promises
- Return tracking and proof of delivery to the seller
- Photos or records showing a defective or incorrect item
- The merchant's refusal or silence
Don't alter screenshots or submit documents that aren't yours. Redact full account numbers, passwords, Social Security numbers, and unrelated personal information.
Merchant disputes and chargebacks
A chargeback is a reversal submitted through a card network by the issuing bank. Consumers normally start with the bank; they don't file directly with Visa or Mastercard.
Network rules may cover non-delivery, duplicate charges, canceled services, or missing refunds. Deadlines vary by network, reason code, transaction type, and the date of delivery or expected service. There isn't one universal Visa or Mastercard deadline for every debit-card purchase.
Ask the bank:
- Is this an unauthorized-transfer claim under Regulation E?
- If not, is it a debit-card merchant dispute or chargeback?
- What deadline and documents apply?
- Will the bank contact the merchant, or should you?
- What happens to provisional credit if the merchant responds?
Contacting the seller can help, especially for a missing delivery or refund. Do it in writing when possible. Don't delay notifying the bank while waiting on an unresponsive seller, and don't give the bank and payment platform different stories.
Credit-card billing-dispute rules are not the same as debit-card rules. Don't borrow a credit-card deadline or assume a debit purchase gets the same federal protection.
Special situations
Recurring charges
Cancel the subscription with the merchant and keep the confirmation. If another debit-card charge appears later, report that new transaction and give the cancellation date.
An automatic ACH debit from checking is a different payment rail from a recurring debit-card payment. Tell the bank which one appears on the statement.
PayPal and other digital wallets
A debit card used through PayPal or another wallet may involve both the platform's dispute policy and the bank's process. Notify the platform promptly, but also protect any bank rights by reporting an unauthorized electronic transfer within the relevant deadline.
Tell both providers what actually happened. If you authorized the payment and the problem is non-delivery or a missing refund, don't file it as unauthorized.
International purchases
A U.S. bank account can still be covered by U.S. Regulation E even when the merchant is foreign. The bank may have a longer investigation period for certain foreign-initiated transactions, and network deadlines can differ. Ask the issuer which rule applies instead of borrowing deadlines from the seller's country.
Overdraft fees
Dispute the underlying transaction first, then identify every related fee. Ask the bank to review those fees as part of the correction. Whether a fee is removed may depend on the cause, account agreement, and bank decision.
If the bank denies the claim
A denial doesn't necessarily end the matter.
- Request the written explanation. If the bank says no error occurred, ask for the records it relied on and the documentation available under the error-resolution process.
- Check the claim category. A bank may process an authorized purchase complaint as fraud, or treat an ACH debit as a card transaction. Ask which rule and deadline it used.
- Appeal with focused evidence. Send a brief timeline, identify the factual mistake, and attach only relevant new records.
- Ask about related fees. If the transaction was corrected or mishandled but fees remain, request a separate account review.
- Escalate to the right regulator. The FDIC consumer complaint process explains what information to provide and how the agency handles complaints involving banks. The FDIC says its Consumer Response Unit generally responds within 14 days, but that response isn't a guaranteed refund.
- Use the credit-union route when applicable. The NCUA complaint process recommends trying to resolve the matter with the credit union first. It also says not to send original documents and describes a written appeal within 30 days of an adverse determination.
Keep the bank's letters, claim number, statements, call notes, and delivery confirmations together. For a large loss or a possible failure to follow required procedure, consider advice from a qualified consumer-law professional in your state.
Common questions
Is the deadline 60 days or 120 days?
For a possible Regulation E error, the key federal notice period is generally 60 days after the statement first showing the error. Some card-network chargeback rules allow different filing periods, but they don't replace timely notice to your bank.
Do I need a letter if I already called?
An oral notice may start the process, but the bank can require written confirmation within 10 business days in some situations. Sending written notice right away creates a clearer record.
Will I get provisional credit?
Not every claim gets one. If the bank can't finish a covered Regulation E investigation within the initial 10 business days, it generally must provisionally credit the alleged error to use the longer investigation period, subject to the rule's exceptions and timing requirements.
Can I dispute a charge I authorized?
Yes, you can ask for help with non-delivery, an incorrect amount, a duplicate charge, or a missing refund. Describe it as a merchant dispute or account error, not as a payment you never authorized.
What if the transaction is still pending?
Report suspected fraud immediately, lock or replace the card, and ask how the bank handles pending authorizations. A formal claim may not be available until the transaction posts, but waiting to secure the account can leave you exposed to more activity.
If you're facing a charge you don't recognize, lock the card, save the statement, and contact the bank through an official channel today. Before you hang up, ask whether the claim is a Regulation E error or a merchant dispute, then write down the case number and the date of your notice.