Your bank can help more when you report an unauthorized charge early. That part is a race against a clock. Turns out, the amount on the charge rarely decides your rights. The payment rail does. Debit card purchases, ATM withdrawals, and many ACH transfers fall under Regulation E. Credit cards fall under the Fair Credit Billing Act, or FCBA. These rules apply to U.S. consumer accounts.

Does a $12 debit charge get treated differently than a $1,200 one? No. Both follow the same reporting rules. A credit card charge follows a different set even when the dollar amount matches. Start with how you paid.

Start With the Payment Rail, Not the Amount

Credit cards run under the FCBA. That law gives you a formal billing-error process. For unauthorized charges, the legal liability cap is usually $50. Many card issuers offer zero liability as a policy. That policy is not the legal minimum. You still need a written dispute within 60 days of the statement date that first showed the charge. A phone call alone may not protect that deadline.

Debit cards, ATM transactions, and many ACH transfers run under Regulation E. This is the electronic fund transfer rule. Its deadlines depend on when you learned about a lost or stolen card or code. It also has a 60-day statement deadline for unauthorized transfers. Regulation E liability rule sets the core caps. The CFPB's answer on missing money explains the reporting clock in plain language.

Wire transfers sit in a separate lane. If a wire left your account, call your bank right away. Ask about its wire recall or fraud process. Don't assume the Reg E timeline will cover it.

What Counts as Unauthorized

An unauthorized transaction is one you did not approve. Someone used your card number, account number, PIN, or login without your permission. Skimming can do it. So can account takeover, a stolen card, or a fake payment request.

A disputed transaction is not the same thing. You approved the purchase, but something went wrong. The item never arrived. The wrong item came. You got charged twice. Those problems can still be valid disputes. The bank may handle them under a different process.

Labels change the evidence and the deadline. Fraud claims focus on whether you authorized the transfer. Billing disputes focus on the sale terms, the merchant's response, and the bank's billing-error rules.

Regulation E Deadlines and Liability Caps

For a lost or stolen debit card, the first deadline is tight. Tell your bank within two business days after you learn about the loss or theft. If you do, your liability is capped at $50, or the amount taken before you notified the bank, whichever is less. The rule text is specific about business days and timing.

Miss that two-day window but report within 60 days of the statement that shows the unauthorized transfer. Then the cap can rise to $500. Wait past 60 days, and you may owe the full amount of transfers that happened after the 60-day period and before you notified the bank. People miss that part. The 60-day deadline is not a suggestion.

For unauthorized electronic transfers that do not involve a lost card or code, the 60-day statement deadline still applies. Report as soon as you spot the problem. If the bank asks for a written follow-up, send it within 10 business days. If you don't, the bank may not have to give you provisional credit while it investigates.

Banks generally must resolve a dispute within 45 days. Some cases take longer, including new accounts or certain foreign or point-of-sale transactions. Ask for the claim number and the expected resolution date.

FCBA Deadlines for Credit Cards

Credit card disputes run on a written clock. Send your dispute within 60 days of the statement date that first showed the charge. The issuer must acknowledge it within 30 days. It must resolve it within two billing cycles, or 90 days, whichever comes first. The issuer also cannot charge interest on the disputed amount during that period.

Unauthorized credit card charges are usually capped at $50 by law. Many major issuers offer $0 liability as a policy. That policy is not the legal minimum. Keep your written dispute. A phone call alone may not protect the FCBA deadline.

How to File an Unauthorized Transaction Complaint

1. Lock the account or card. Use your bank app or call the number on the back of your card. Stop using the card if you still have it. If someone has your login, change the password and turn on multi-factor authentication.

2. Call the fraud or dispute line. Use the number on the card, statement, or official app. Say: "I am reporting an unauthorized transaction." Ask for a claim number and written confirmation.

3. Put the dispute in writing. Many banks accept a secure message or online form. If you mail a letter, use certified mail. Include your name, account number ending in four digits, the date and amount of each charge, the merchant name, and a short statement that you did not authorize it.

4. Send the written follow-up if asked. The bank may ask you to confirm the dispute in writing. Do that within 10 business days. This keeps the provisional credit process moving.

5. Keep everything. Save screenshots, emails, chat transcripts, the claim number, and any certified mail receipt. Write down the name of each person you speak with and the date.

6. Escalate if the bank stalls. If it misses a deadline, denies the claim without a clear reason, or refuses provisional credit, file a complaint with the FDIC Consumer Response Unit for an FDIC-insured bank. You can also file with the CFPB or your state attorney general.

What Your Bank Does After You File

The bank acknowledges the claim, then investigates. It may review transaction history, device data, IP logs, merchant records, and whether the charge fits your normal pattern. You do not need to prove fraud upfront. Under the applicable rule, the bank carries the investigation burden.

Provisional credit is common for debit disputes. It is not automatic in every case. The bank may reverse that credit if it later denies the claim. Thing is, the written explanation matters if you need to escalate. If the bank denies the claim, ask for the evidence it relied on.

Unauthorized vs. Disputed: What Changes

Sample Dispute Letter

Use this as a starting point. Keep it short and factual.

[Your name] [Your address] [Date]

[Bank or card issuer name] [Dispute address]

Re: Account ending in [last 4 digits], unauthorized transaction on [date] for $[amount]

To whom it may concern,

I am disputing the transaction listed above. I did not authorize this charge. Please investigate it under Regulation E or the Fair Credit Billing Act, as applicable, and provide provisional credit if required.

Transaction details: Date: [date] Amount: $[amount] Merchant: [merchant name] Description: [what appeared on the statement]

I first noticed the charge on [date]. I reported it to you on [date]. Please send written confirmation and a claim number.

Sincerely, [Your name] [Phone number] [Email address]

Chargebacks and Mobile Payments

A chargeback is a card network process. It is not a separate consumer law. Your bank or card issuer usually files it after you dispute the charge. For Apple Pay, Google Pay, or another mobile wallet, the dispute still goes back to the underlying card or bank account. The wallet is a layer. It does not create a new set of federal rights.

If the bank denies your claim, ask whether it filed a chargeback. Sometimes the bank treats the issue as fraud. Sometimes it treats it as a merchant dispute. That path changes the evidence you need and the deadline that applies.

Common Mistakes That Weaken a Claim

To be honest, most claims do not fail because of one dramatic error. They fail because of small delays and missing paper.

• Waiting to see whether the charge disappears.
• Calling the merchant but never notifying the bank.
• Ignoring the bank's request for a written follow-up.
• Closing the account before the dispute is resolved.
• Throwing away the statement or confirmation emails.

When to Escalate

Escalate when the bank misses a legal deadline or gives you a vague denial. Start with the bank's internal appeals process. If that fails, file a complaint with the CFPB or the FDIC. For identity theft, file an FTC identity theft report and consider a police report. Those reports do not replace the bank dispute, but they can support it.

Keep your complaint language simple. Give a short timeline: when the charge appeared, when you reported it, what the bank said, and what you want. Ask for a written response.

FAQ

What is the deadline for reporting an unauthorized debit card charge?

For the $50 cap after a lost or stolen card, report within two business days of learning about the loss. For the 60-day statement deadline under Regulation E, report as soon as you see the unauthorized transfer.

How long does a bank investigation take?

The bank generally has 45 days to resolve the dispute. Some cases can take longer. The bank must tell you if it needs more time.

Do I need a police report?

Not usually for a simple unauthorized charge. A police report may help if your identity was stolen, the amount is large, or the bank asks for one.

Is a chargeback the same as a fraud dispute?

No. A chargeback is a network process. A fraud dispute is your claim that you did not authorize the transaction. The bank may use a chargeback to recover funds, but the legal rights come from Regulation E or the FCBA.

What if I gave the merchant my card but never got the product?

That is usually a disputed transaction, not an unauthorized one. The FCBA or card network chargeback rules may apply, but the deadline and evidence are different.

The Next Step That Matters

Call your bank or card issuer today. Get a claim number. Then send the written dispute and keep the receipt. The clock is the part you control, and it is the part that usually decides how much you can recover.