Did a strange charge hit your statement out of the blue? You must move quickly. A fake debit charge pulls direct cash straight out of your pocket, whereas a fraudulent credit swipe eats into a borrowing line. Your immediate plan depends entirely on which card was used.

Federal consumer statutes split credit and debit payments into two separate legal tracks. Credit cards answer to the Fair Credit Billing Act, codified in Regulation Z at 12 CFR Part 1026. Debit swipes and electronic transfers fall under the Electronic Fund Transfer Act and Regulation E at 12 CFR Part 1005.

Thing is, confusing these two frameworks can wipe out your checking balance.

The liability rules and statutory deadlines differ sharply across the two laws:

With a debit card, your clock starts immediately. Report a stolen card or PIN within two business days, and your maximum loss is $50. Miss that window, and your liability leaps to $500. Worse yet, if you fail to flag the charge within 60 calendar days of receiving your statement, you risk unlimited losses on later transactions.

Credit cards offer much cleaner legal shields. Under Regulation Z, your statutory liability cannot exceed $50, no matter when you spot the theft. In practice, major card issuers waive that $50 fee completely. You still have to send a written notice within 60 days of the statement date to preserve your federal rights.

First Steps Before Sending an Email

Open your mobile banking app and toggle the card lock feature right away. Freezing the card blocks additional pending transactions before they settle.

Next, dial the customer service number stamped on the plastic card back. Tell the representative flat out that you have an unauthorized transaction to report. Ask for an internal claim number or dispute code. Write that reference down immediately, alongside the date, call time, and representative's name.

Phone calls stop active bleeding, but you cannot rely on customer support phone calls alone because reps get distracted, call notes disappear into internal ticketing queues, and you end up two weeks later trying to explain the entire nightmare from scratch to a new agent who has no clue what the previous person promised. A call halts the theft. A paper trail locks down your legal standing.

Template 1: Credit Card Dispute Under the FCBA

Send this message through your card issuer's authenticated portal or email it to their billing inquiry address. Check your monthly statement carefully for that address. Do not mail this notice to the remittance address where you send monthly checks, or the letter will get delayed.

Subject: Formal Billing Error Notice - Unauthorized Charge - Account ending in [Last 4 Digits]

Date: [Current Date]
To: [Card Issuer Billing Inquiries Department]

Account Holder Name: [Your Full Name]
Account Number: [Full Account Number or Last 4 Digits]
Contact Phone Number: [Your Phone Number]
Mailing Address: [Your Mailing Address]

I am writing to dispute an unauthorized transaction under the Fair Credit Billing Act (12 CFR Part 1026). I did not authorize, make, or benefit from the following charge:

Transaction Date: [Date of Charge]
Merchant Name: [Merchant Name as it appears on statement]
Disputed Amount: $[Dollar Amount]

My credit card remained in my possession at all times [or: My card was reported lost or stolen on Date]. I have enclosed a copy of my statement with the disputed charge highlighted.

Under the Fair Credit Billing Act, please acknowledge this notice within 30 days and correct the error within two billing cycles. Please ensure all disputed amounts, including related interest charges or finance fees, are suspended while your investigation proceeds.

Sincerely,
[Your Name]

Template 2: Debit Card or Bank Transfer Dispute Under Regulation E

Turns out, debit disputes require an entirely different legal baseline. Use this draft to contest electronic fund transfers from a checking or savings account.

Subject: Notice of Unauthorized Electronic Fund Transfer - Account ending in [Last 4 Digits]

Date: [Current Date]
To: [Bank Name Fraud Department / Customer Support]

Account Holder Name: [Your Full Name]
Account Number: [Checking or Savings Account Number]
Debit Card Number: [Last 4 Digits, if applicable]
Phone Number: [Your Phone Number]

I am submitting formal notice of an unauthorized electronic fund transfer under the Electronic Fund Transfer Act and Regulation E (12 CFR 1005.6 and 1005.11).

I discovered the following unauthorized transaction on [Date You Discovered It]:

Transaction Date: [Date of Transaction]
Amount: $[Dollar Amount]
Description: [Merchant or Recipient Name on Statement]

I did not authorize this transfer, nor did I share my PIN, login credentials, or access device with anyone.

Because this notice is submitted within the statutory reporting window, please open an investigation immediately. If your investigation cannot be completed within 10 business days, Regulation E requires you to grant provisional credit to my account for the disputed amount while you finish your inquiry.

Please confirm receipt in writing and provide my claim reference number.

Sincerely,
[Your Name]

What Happens After You Send the Dispute

Strict federal timelines take over once your bank receives written notice. They cannot sit on the file indefinitely.

For credit cards, the card issuer has 30 days to acknowledge your letter in writing, unless they resolve the error sooner. Their investigators get two full billing cycles, capped at 90 days total, to complete the inquiry. You do not have to pay the disputed portion or any related interest while the case stays open.

Debit accounts run on much tighter clocks. The bank gets 10 business days to run its investigation. If they need more time, they must grant provisional credit to your account for the disputed funds, minus up to $50. That credit frees them to take up to 45 calendar days to finish. That window expands to 90 calendar days if the transaction happened abroad, involved a point-of-sale terminal, or occurred within 30 days of account opening.

What to Do If the Bank Denies Your Claim

Banks love to issue quick denials claiming you authorized the charge or failed to protect your credentials. Never accept an oral denial.

Demand the complete investigative file. Under 12 CFR 1005.11(d), you have an explicit legal right to see every document and data point the bank used to reject your claim. Request their IP records, device signatures, and merchant transaction logs in writing. To be honest, institutions often reopen supposedly shut cases the second an account holder formally demands the underlying evidence file.

If the bank refuses to cooperate, submit a complaint to the Consumer Financial Protection Bureau through consumerfinance.gov. The CFPB routes complaints directly to senior executive escalation teams at the bank, triggering a mandatory written reply within 15 days.

Download PDF copies of your statements, sent emails, and claim numbers right now. Keep those records organized.