Did an unexpected charge empty out part of your checking balance this morning? You have clear protections under federal law, but your recovery window shuts down fast if you hesitate.
The core rule is 12 CFR Part 1005, known as Regulation E. Under this framework, banks must investigate claims, issue temporary refunds when investigations take time, and return stolen money. Speed matters more than anything else here. Don't wait.
Federal Liability Limits for Stolen Bank Funds
Your exposure depends on whether a physical card was lost and how fast you speak up under 12 CFR Section 1005.6.
| Scenario | Reporting Deadline | Maximum Consumer Liability |
|---|---|---|
| Lost or stolen card or PIN | Within 2 business days of learning about loss | $50 |
| Lost or stolen card or PIN | 3 to 60 calendar days after statement transmittal | $500 |
| Lost or stolen card or PIN | More than 60 calendar days after statement | Unlimited for losses occurring after day 60 |
| Card number stolen (card still in your possession) | Within 60 calendar days of statement transmittal | $0 |
| Card number stolen (card still in your possession) | More than 60 calendar days after statement | Unlimited for losses occurring after day 60 |
Business days do not include weekends or official federal holidays.
How Provisional Credit Works While Banks Investigate
Banks generally have 10 business days to investigate an unauthorized charge and fix it. If your account is brand new, meaning it was opened within the last 30 calendar days, the bank gets up to 20 business days instead.
Thing is, tracking down merchant logs across payment networks often takes more than two weeks. When a bank needs up to 45 calendar days - or up to 90 days for point-of-sale debit purchases and foreign transactions - it must grant you provisional credit for the disputed amount, minus up to $50.
That credit hits your account within 10 business days. You can use those funds while the fraud team finishes its work. If the bank later rules that no error happened, it can reverse the credit, but it must give you advance written notice before pulling cash out. Watch your balance closely.
Immediate Steps to Dispute an Unauthorized Charge
- Lock the compromised card right away inside your mobile banking app.
- Call the fraud department immediately, recording the date, time, and representative's name or badge number.
- Send a follow-up letter within 10 business days to protect your provisional credit rights.
- Review your last two bank statements line by line to catch small test charges.
- Request copies of all evidence the bank relied on if they deny your claim.
The Critical Written Notice Rule
Phoning your bank is enough to start the required inquiry immediately.
Many banks will follow up by asking you to sign an affidavit or mail written confirmation. If they ask for written paperwork and you do not supply it within 10 business days, the institution has no legal obligation to issue provisional credit while it investigates. You might end up waiting 45 or 90 days without your cash. Do not skip that written follow-up.
Different Payment Rails Have Different Rules
How your money left determines which legal framework protects you.
- Debit cards and ACH transfers: Covered squarely under Regulation E, which enforces liability caps and mandatory investigation clocks.
- Wire transfers: Handled by Uniform Commercial Code Article 4A, meaning completed wires are virtually impossible to reverse unless the bank failed security protocols.
- Credit cards: Shielded under Regulation Z and the Truth in Lending Act, where disputed transactions never touch your personal checking funds.
- P2P payment apps: Account takeovers on platforms like Zelle, Venmo, or Cash App fall under Regulation E, but sending money voluntarily after being tricked into a scam usually does not count as an unauthorized transfer.
What to Do If the Bank Denies Your Dispute
Turns out, financial institutions often reject initial disputes by claiming you authorized the transaction or shared your security codes. Federal law requires the bank to deliver copies of every document, terminal log, and IP record it used to reach an adverse finding.
Ask for those files in writing right away. If the institution dragged out its review, refused provisional credit without asking for written notice, or simply ignored your evidence, file a complaint through the Consumer Financial Protection Bureau guidance system and alert the Federal Trade Commission.
Take your bank statement right now. Circle every unauthorized debit with a pen. Then, mail your formal dispute letter by certified mail with return receipt requested so you have undeniable proof of delivery.