Unauthorized Transaction Complaint Process Explained (2026 Guide)

Spot an unfamiliar charge on your bank statement? Don't panic--this comprehensive guide walks you through filing an unauthorized transaction complaint, leveraging legal protections like Regulation E (Reg E), Visa and Mastercard rules, CFPB timelines, and FTC guidelines. Whether it's debit card skimming, wire scams, or online fraud, you'll find step-by-step instructions, sample letters, evidence checklists, real case studies, and prevention tips to recover your funds quickly.

Quick Answer: Notify your bank within 60 days of your statement (CFPB rule). They'll investigate in 10 business days (provisionally refund if longer) and resolve in 45 days. Use the FTC sample letter and escalate to CFPB if denied.

Key Takeaways:

• 60-day rule: Report unauthorized transactions within 60 days of your statement, or risk full liability (CFPB/FTC).
• Reg E protections: $0 liability for prompt debit/ATM/P2P reports; banks must provisionally credit after 10 days.
• Fraud stats: $48B e-commerce losses in 2024 (Juniper/INETCO); wire fraud recovery only 26% (Qualia); BEC scams $55B globally (Trustpair/IC3).
• Credit cards: Stronger protections (zero liability); wires: low reversal odds under UCC 4A.

Quick Answer: How to File an Unauthorized Transaction Complaint

1. Check your statement and confirm the charge (e.g., date, amount, merchant).
2. Notify your bank immediately--call the number on your card, then follow up in writing within 60 days (CFPB: latest by statement date showing the charge).
3. Expect provisional credit: Bank investigates in 10 business days (SoFi/S-PRO); refunds temporarily if needed, resolves in 45 days (extensions for foreign txns or new accounts).
4. Gather evidence: Statements, police report, IP logs.
5. Escalate if denied: File CFPB complaint (15-day response) or FTC identity theft report.

Sample FTC letter excerpt: "I am writing to dispute a charge of [$__] to my [credit or debit card] account on [date]. The charge is in error because I did not buy the items."

Key Takeaways: Unauthorized Transaction Complaint Essentials

• Timelines: 60 days to report (CFPB); 10 days initial probe/provisional credit; 45 days full resolution.
• Protections: Reg E for debit/electronic transfers ($0 liability if prompt); FCRA Section 609(e) for identity theft records.
• Stats: BIN attacks up 80% since 2020 (INETCO); 44% disputes from theft (Nex.io); wire recovery 26% (Qualia).
• Rights: Banks can't deny based on privacy laws; escalate via CFPB (companies respond in 15 days).

What Counts as an Unauthorized Transaction Legally?

Under CFPB/EFTA (Reg E), unauthorized means any electronic fund transfer you didn't authorize--ATM withdrawals, debit POS, P2P (Zelle/Venmo), direct deposits. Excludes negligence (e.g., shared PIN) or authorized scams (PSR rules post-Oct 2024 for voluntary payments).

Not covered: Self-authorized fraud (e.g., you sent money to a scammer). Legally: "A transfer... you did not initiate or authorize" (EFTA examples via classaction.org).

Common Types: Debit Skimming, Wire Scams, Online Fraud

• Debit skimming: Fake ATM overlays steal magstripe data (Paytm: inspect for odd wires/stickers).
• Wire scams: BEC fraud ($55B losses, Trustpair); only 26% full recovery (Qualia)--not always irreversible under UCC 4A.
• Online fraud: BIN attacks (80% rise, INETCO; Redstone FCU Walmart flood, 2024); P2P like PayPal/Zelle under EFTA.

Step-by-Step: How to File an Unauthorized Charge Dispute with Your Bank

Checklist:

1. Notify within 60 days (CFPB): Call, then send written dispute (certified mail/email).
2. Use FTC template (below).
3. Gather evidence: Account statements, merchant details, police report (FTC ReportFraud.ftc.gov), affidavits.
4. Follow up: Track via app/portal.
5. Escalate: CFPB complaint if denied (consumerfinance.gov/complaint).

Visa and Mastercard Unauthorized Transaction Rules & Timelines (2026)

Visa: Reason codes like fraud (TC40); VAMP thresholds: 0.3-0.5% disputes = $5 fee; >0.5% = $10/excessive (Sift). Zero liability if reported promptly; chargeback evidence: no prior similar txns.

Mastercard: Fraud claim steps mirror Visa; timelines align with Reg E. Compare: Visa stricter on patterns (2+ prior txns with matching IP/device = denial risk).

Chargebacks: Merchant vs. customer--networks side with cardholder evidence.

Credit Card vs. Debit Card vs. Wire Transfer Disputes: Comparison

PayPal, P2P (Zelle/Venmo), Online Banking: PayPal disputes via app (EFTA-covered); P2P under Reg E for unauthorized (not voluntary scams).

Evidence Requirements & Sample Complaint Letter Template

Evidence Checklist:

• Statements showing txn.
• Police/IC3 report.
• IP logs/device fingerprints.
• Affidavit: "I didn't authorize this."
• No prior patterns (Visa rule).

Full FTC Template (consumer.ftc.gov):

[Your name]
[Your address]
[City, state, ZIP]
[Date]

[Card issuer name]
[Issuer address]
[City, state, ZIP]

Re: Dispute of unauthorized charge on account [account #]

Dear Sir or Madam:

I am writing to dispute a charge of [$______] to my [credit or debit card] account on [date]. The charge is in error because I did not authorize it.

Please credit my account for this amount and send me a confirmation. Enclosed: statements, police report.

Sincerely,
[Your name]

Common denials: Prior similar txns (Visa).

Bank Investigation Process, Timelines & What Happens Next

Banks flag anomalies via AI (S-PRO: 24/7 monitoring). Process: 10 business days initial (SoFi); provisional credit if longer; 45 days full (CFPB). Online fraud: Escalate to fraud team.

Denial risks: Patterns, negligence (Bankrate: Regions Bank case--bedridden customer denied $500 Walmart charges).

FTC Guidelines, CFPB Complaints & Reg E Protections (2026)

• FTC: Section 609(e) FCRA--forces businesses to provide identity theft records (no GLBA privacy block).
• CFPB: File at consumerfinance.gov/complaint (15-day response; 60 days feedback).
• Reg E 2026: Covers P2P/mobile; $0 liability prompt reports.

Common Reasons Banks Deny Claims + How to Fight Back

• Negligence: Shared credentials.
• Patterns: Multiple similar txns (Visa).
• Authorized scam: Voluntary wires.
• Cases: Regions denial overturned via escalation (Bankrate); Wells Fargo $185M fine (S-PRO scandal).

Fight back: CFPB complaint, class actions (classaction.org for denied EFTA claims).

Real Case Studies: Successful Reversals & Lessons Learned

• Success: Bedridden customer's Regions dispute--escalated, provisional credit issued after evidence (Bankrate).
• BIN Attack: Redstone FCU Walmart flood--chargebacks won via AVS limits (INETCO).
• Failure: Wire BEC $47M Ubiquiti loss (Trustpair)--funds dissipated fast; only 26% recover (Qualia).
• Lesson: Prompt reporting + police report = 80%+ success for debit (CFPB data).

Prevention Best Practices & Checklist to Avoid Complaints

Checklist:

• Enable AVS/3DS; monitor for low-value tests (BIN attacks).
• Use strong passwords; 4-eye principle for wires (Trustpair).
• Inspect ATMs (Paytm); limit checkout attempts (INETCO).
• Track patterns: 44% disputes theft-related (Nex.io).

FAQ

How long does a bank have to investigate an unauthorized transaction?
10 business days initial (provisional credit); up to 45 days full resolution (CFPB).

What is the 60-day rule for reporting unauthorized charges?
Notify within 60 days of statement showing charge, or bear liability for later txns (CFPB/FTC).

Can I recover money from a wire transfer scam?
Possible via recall (UCC 4A), but only 26% full recovery (Qualia)--act fast before funds move.

What if my bank denies my unauthorized transaction claim?
Escalate to CFPB (15-day response); provide more evidence/police report.

Does Regulation E cover PayPal or Zelle disputes?
Yes, for unauthorized electronic transfers/P2P (classaction.org).

How do Visa vs. Mastercard fraud rules differ in 2026?
Visa VAMP fees for high disputes (0.5%+ = $10); MC similar but less threshold-focused; both zero liability prompt.

Sources: CFPB, FTC, INETCO, Qualia, SoFi, Bankrate. Last updated 2026.