If a transaction isn't yours, report it to the bank, card issuer, or payment service today. A police report can wait. So can the next statement. In the United States, the payment method, not the name printed on the statement, usually controls the deadline and your potential liability.

A credit-card charge generally follows the Fair Credit Billing Act (FCBA) billing-error process. A debit-card, ACH, ATM, or some peer-to-peer transfer may be an electronic fund transfer covered by Regulation E. An ordinary bank wire is different: it usually follows the bank's wire-fraud and recall procedures, not those two federal tracks.

There is no reliable universal "80% success rate" for these claims. Reporting quickly, describing what happened accurately, and keeping the paperwork organized can improve your position. A bank's brand and a chargeback statistic still don't guarantee a refund.

Identify the transaction before disputing it

Transaction type Main rule or process Action and key deadline
Credit-card purchase FCBA billing-error procedure, plus the issuer's zero-liability policy if applicable Send written notice so the issuer receives it within 60 days after the first statement containing the error was sent
Debit-card or ATM transaction Regulation E may apply to a covered electronic fund transfer Notify the bank immediately; reporting within two business days can limit liability to no more than $50 in many cases
ACH debit or some payment-app transfers Regulation E may apply, depending on how the transfer was initiated and which account was debited Report the error to the bank and the payment service as soon as possible
Bank-to-bank wire The bank's wire agreement, fraud procedures, and recall process Call the wire or fraud department immediately and request a recall or hold
Unrecognized merchant descriptor Usually an identification issue, not automatically fraud Check receipts, subscriptions, and the merchant's payment processor before making a factual fraud report

The Federal Trade Commission's credit-card dispute guidance covers the written-notice process and investigation deadlines. For a plain-language overview of Regulation E, see this Regulation E explanation.

How to dispute an unauthorized transaction

1. Check whether the charge is actually unauthorized

Start with the transaction details, not just the name on the statement. A restaurant, marketplace, or payment processor may bill under a different descriptor. Cross-check the date, amount, location, and last four digits of the card against recent receipts, email confirmations, free trials, recurring subscriptions, and household purchases. Also ask whether a spouse, family member, employee, or authorized user had permission, and whether the item was a card purchase, cash withdrawal, ACH debit, payment-app transfer, or wire.

If the charge is yours but the amount is wrong, the goods never arrived, or a subscription kept billing after cancellation, describe that problem as it is. Those are billing or merchant disputes, not necessarily unauthorized-use claims.

If you were tricked into pressing "send" yourself, say so. A payment you initiated after a scammer's instructions may be treated differently from a transfer someone else started without your permission.

2. Report the transaction through an official channel

Call the number on the back of the card, use the bank's official app, or visit a branch. For a payment app, report the transaction in the app and contact the bank or card issuer that funded it.

Ask the provider to:

Don't use a phone number from a suspicious text, email, or social-media message. A scammer may be posing as your bank.

3. Send written notice when the credit-card rules apply

A phone call or in-app report may start the issuer's internal process. Written notice is still the safest way to use the FCBA billing-error procedure. Send it to the issuer's billing inquiries address shown on the statement. That address may be different from the payment address.

Your letter should identify:

The letter must reach the issuer within 60 days after the first bill containing the error was sent. Keep a copy and proof of delivery.

For a covered debit or other electronic fund transfer, oral notice may be enough to start error resolution, although the bank may ask you to confirm the details in writing. Written follow-up still gives you a clear record of what you reported and when.

4. Preserve useful evidence

A police report can help later, but don't wait for one before you notify the provider. Gather whatever is available: the statement or transaction screen with the charge highlighted; a timeline of when you noticed and reported it; proof that you had the card or phone somewhere else; travel records, work records, or receipts that contradict the transaction; emails, texts, or payment-app messages connected to the fraud; merchant correspondence and tracking information; a fraud affidavit or identity-theft report if requested; and the case number and notes from every call.

Don't edit screenshots or exaggerate what happened. If evidence is missing, say so instead of guessing.

5. Secure related accounts

Change the password for the affected account and any reused password. Turn on multifactor authentication, remove unfamiliar devices, and review account-recovery details. Ask whether the bank should issue a new card, change the account number, or place a temporary restriction on transfers.

Replacing a card may not protect an online banking account that was also compromised. Review email, phone, payment-app, and bank settings together.

6. Track the investigation

Write down the date and time of each report, the department and representative, your claim number, documents you submitted, any provisional credit, and the date the bank says it will respond.

A provisional credit is temporary. The bank may reverse it after the investigation, so don't treat it as a final refund until the claim is resolved.

For a credit-card billing error, the issuer generally must acknowledge a written dispute within 30 days unless it resolves the issue sooner. It must resolve the dispute within two billing cycles, and no later than 90 days, under the FTC-described FCBA process.

For a covered Regulation E error, the financial institution generally has 10 business days to determine whether an error occurred. If it needs more time, it generally must provide provisional credit under the rule's conditions and may have up to 45 days to complete the investigation. Certain transactions or account situations can allow a longer period, sometimes up to 90 days.

Pay the part of a credit-card bill that isn't disputed by the due date. If you properly use the FCBA process, you generally don't have to pay the disputed amount or related finance charges while the issuer investigates. Ignoring the rest of the bill can create a separate problem.

Sample unauthorized transaction dispute letter

Use the address and instructions on your statement. Keep the bracketed sentence that matches your payment type and remove the others.

[Your name]
[Your mailing address]
[City, State, ZIP code]
[Date]

[Issuer or bank name]
Billing Inquiries or Fraud Department
[Address shown on the statement]

Subject: Dispute of unauthorized transaction on account ending in [last four digits]

I am disputing a transaction of [$amount] dated [transaction date] from [merchant or recipient]. I did not make, initiate, or authorize this transaction, and I did not give anyone permission to use this account for it.

I first noticed the transaction on [date]. The first statement showing it was sent on [date].

[For a credit card: Please treat this letter as written notice of a billing error under the Fair Credit Billing Act.]

[For a covered electronic fund transfer: Please treat this letter as notice of an error under Regulation E, if applicable.]

Please investigate the transaction, remove the disputed amount and related charges if the claim is confirmed, and send me the written result. If you deny the claim, please identify the facts and documents relied on and tell me how to request supporting records.

Enclosures: [statement, transaction record, affidavit, report, or other documents]

Sincerely,

[Your name]
[Phone number]
[Email address]
[Account number or last four digits]

Don't include your PIN, online-banking password, card security code, or full Social Security number. Send copies rather than originals.

Unauthorized transaction dispute examples

A reported credit-card denial

Bankrate reported a case in which a bedridden cardholder's mother had about $500 in transactions at Walmart, Shell, and CVS over three days. The card issuer initially refused the claim. That report is not proof that every similar claim will be reversed. It is a reminder that you can ask why a claim was denied, point out facts the first review missed, and escalate a dispute that looks as if it received only a cursory investigation.

Use this kind of appeal:

  1. Identify each disputed transaction separately.
  2. Explain why the cardholder could not have made or authorized it.
  3. Attach the statement and supporting records.
  4. Ask what evidence the issuer relied on.
  5. Request a written reconsideration.

The Bankrate report on the case is secondary reporting, not a statement of law or a guarantee of a particular result.

An unauthorized online credit-card purchase

Someone used your credit card for an online order, and you never shared permission for the purchase. Report it to the issuer, send the written billing-error notice within the 60-day period, and secure the account. A merchant's delivery record may matter to the investigation. It doesn't by itself prove who authorized the purchase. Answer the issuer's questions with the facts you know.

An unauthorized debit or ATM withdrawal

A debit-card or ATM transaction appears while the card was in your possession. Report it immediately and ask the bank to investigate it as an electronic transfer error. Explain whether the card, PIN, phone, or online credentials were lost or exposed. Prompt notice can be especially important because Regulation E liability can increase after two business days and may extend to later transfers after the 60-day statement period.

A PayPal or other payment-app transaction

First determine whether the payment came from a credit card, bank account, debit card, or stored balance. Report an account takeover or a transaction you did not initiate to the payment service and to the funding provider.

The payment service's own user-protection and dispute process may be separate from FCBA or Regulation E. A credit-card charge shown as a payment-app transaction may still involve the card issuer's billing-error process. A transfer you personally sent after being deceived may be treated differently from an account takeover. Describe the sequence honestly and don't seek duplicate recovery from multiple providers.

A bank wire sent to a scammer

Call the bank's wire-fraud department immediately and ask for a recall, a hold, and contact with the receiving bank. Provide the exact amount, date, recipient, confirmation number, and communications with the recipient. Speed matters because a wire may move before the bank can stop it. Don't assume that the debit-card two-day rule applies to an ordinary bank wire.

What can improve a denied claim

A denial letter should tell you what the provider concluded, even if the explanation is brief. From there:

  1. Request the written reason and supporting documents. For a Regulation E claim, ask for the records the bank relied on and the written explanation of its findings.
  2. Compare the reason with your evidence. Correct errors about your location, card possession, device access, merchant contact, or report date.
  3. Submit a focused appeal. Include a one-page timeline, the statement, the claim number, and only relevant documents.
  4. Ask for the issuer's internal review or executive escalation process. Follow the deadline in the denial notice.
  5. File a complaint if the response remains inadequate. The CFPB complaint portal accepts complaints about many consumer financial products. USA.gov's bank and credit complaint guidance can help identify the appropriate agency or next route.

A CFPB complaint can prompt a company response. It isn't a court ruling and doesn't guarantee a refund. Remove passwords, PINs, and unnecessary full account numbers from documents before uploading them.

Common mistakes to avoid

Questions about unauthorized transaction disputes

Is an unfamiliar charge automatically unauthorized?

No. Merchant descriptors can differ from the store name, and an authorized user or recurring subscription may explain the transaction. Check the details promptly. If you still don't recognize it, report it rather than waiting for certainty.

Do I need a police report to dispute a charge?

Not usually as the first step. Report the transaction to the financial institution immediately. Obtain a police or identity-theft report if the provider requests it or the facts warrant one.

What happens if I miss the 60-day deadline?

Report the transaction anyway and explain any circumstances that caused the delay. The provider may still investigate under its policy, but you shouldn't assume the full federal dispute protection remains available. For Regulation E claims, liability can extend to later transfers after the statement period.

Can I dispute a PayPal payment through my bank?

Possibly, depending on the funding source and transaction facts. Report it to PayPal and the bank or card issuer, and explain whether you were a victim of account takeover, a merchant problem, or a scam payment you personally initiated. Follow each provider's instructions and don't claim more than one refund for the same loss.

These rules describe U.S. consumer accounts. Business accounts, specialized payment products, and unusual transfer types may have different agreements or protections. If you haven't reported the charge yet, use the number on the back of the card or the bank's official app now, then send written billing-error notice if it's a credit-card charge still inside the 60-day window.