An unauthorized debit card transaction should be reported to your bank immediately. Call the bank now.
Under U.S. Regulation E, the timing of your notice affects potential liability, and the bank usually must investigate an eligible error within 10 business days or provisionally credit the disputed amount while it continues. The CFPB also says you should notify the bank no later than 60 days after the statement showing the unauthorized transaction was sent to you.
These protections cover certain electronic fund transfer errors. They don't turn every disappointing purchase into a legal bank error.
First, identify what went wrong
Your next step depends on whether you deny making the transaction or simply have a problem with the purchase.
| Situation | Likely route | What to tell the bank |
|---|---|---|
| Someone used your debit card or account without permission | Regulation E error notice | The transaction was unauthorized and when you first noticed it |
| The amount was wrong, duplicated, or an ATM debited you without giving cash | Regulation E error notice | The exact amount, date, and type of error |
| You authorized the purchase, but the item never arrived or was defective | Merchant refund request and possibly a bank or network dispute | What you bought, what went wrong, and your contact with the merchant |
| You personally sent a wire or peer-to-peer payment after being tricked | Payment-rail-specific rules and the provider's procedures | How the payment was initiated and what happened |
A merchant dispute is not automatically fraud. Calling an authorized purchase "unauthorized" can create confusion and weaken your account of what happened.
Debit card charge disputes commonly involve unauthorized electronic fund transfers, incorrect amounts, duplicate debits, and cash withdrawals that were not completed as shown. A complaint about product quality usually follows a different process.
Regulation E deadlines and liability limits
Regulation E uses more than one clock. They are easy to mix up.
| When you notify the bank | Federal liability rule |
|---|---|
| Within two business days after learning that your card or other access device was lost or stolen | Liability for unauthorized transfers is generally limited to $50 |
| More than two business days later, but within 60 days after the statement showing the transfer was sent | Liability may reach the lesser of $500 or the unauthorized transfers made after the two-day period and before notice |
| More than 60 days after the statement was sent | You may lose federal protection for later unauthorized transfers made before you notify the bank |
The two-day rule concerns learning about the loss or theft of an access device. The separate 60-day rule concerns the statement showing the unauthorized transfer. Read the CFPB guidance on unauthorized transactions for the basic federal framework.
Reporting within 60 days is not a blanket promise of a full refund. If you waited more than two business days, federal liability can still be higher than $50. Your bank or card network may offer a broader zero-liability policy, so check the account agreement as well.
The 60-day period generally runs from when the bank sends the periodic statement showing the alleged error, not simply from the transaction date. Report the problem anyway if you missed the deadline. The bank's agreement or a separate network process may still help.
Gather the facts, but do not wait to report
You don't need a perfect evidence file before calling. Notice first.
| Record to save | Why it helps |
|---|---|
| Statement or account screenshot | Shows the transaction date, amount, and merchant description |
| Card, account, and device details | Helps explain whether the physical card was lost, stolen, or still with you |
| Receipts and order records | Distinguishes an unauthorized charge from a merchant problem |
| Emails, texts, and merchant messages | Shows your attempts to cancel, obtain a refund, or report non-delivery |
| Bank confirmation number and call notes | Creates a timeline for follow-up |
Keep the original files. Don't edit screenshots in a way that removes dates or transaction details.
How to dispute a debit card transaction
Use the bank's fraud or dispute channel first. A merchant contact alone does not give the bank notice under Regulation E.
-
Report the transaction promptly. Call the number on the back of the card or use the bank's secure app or website. Ask whether the bank needs written notice sent to a particular address or department.
-
Describe the transaction precisely. Give your name, account information, transaction date, amount, merchant name, and the reason you believe an error occurred. Say clearly whether the transfer was unauthorized, duplicated, for the wrong amount, or otherwise incorrect.
-
Follow up in writing. A secure message, bank form, or letter creates a better record than a phone call alone. Send it through the method the bank identifies, and keep a copy with the submission date.
-
Ask about provisional credit. Ask whether the bank expects to complete the investigation within the initial period or will temporarily credit the disputed amount while investigating. This credit is not always an instant refund.
-
Respond to bank requests. If the bank asks for written confirmation after an oral notice, provide it within 10 business days. If you do not, the bank may not have to provide temporary credit while it investigates.
-
Track the claim. Save the claim number, the name or identification number of each representative, promised dates, and every letter or secure message.
A short, factual account works best. Don't speculate about who committed the fraud, and don't describe an authorized purchase as unauthorized.
A debit card dispute letter template
Use a secure bank channel whenever possible. Avoid putting a full account number in an ordinary email.
Subject: Notice of error under Regulation E
Name: [Your name]
Account: [Account number, sent through a secure channel]
Date: [Date]
I am notifying you of an error involving this electronic fund transfer:
Merchant or transaction description: [Description]
Transaction date: [Date]
Amount: [Amount]
I believe this transaction is [unauthorized / for the wrong amount / duplicated / another eligible error] because [brief factual explanation].
I first noticed the transaction on [date]. Please investigate this notice under Regulation E and tell me if you require any additional written confirmation. If the investigation will continue beyond the initial investigation period, please provide any provisional credit required by the regulation.
Attached are copies of the following records: [List documents].
Please send me the investigation result and any explanation of the evidence used.
Sincerely,
[Your name]
[Phone number]
[Preferred secure contact method]The letter is a tool, not a substitute for prompt notice. If the 60-day deadline is close, call first and send the written notice the same day.
How provisional credit works
Provisional credit is temporary money placed back in the account while the bank investigates. It is not a finding that the dispute has been decided in your favor.
Under 12 CFR 1005.11, the bank generally must determine whether an error occurred within 10 business days. If it cannot finish then, it may generally take up to 45 calendar days if it provisionally credits the alleged error within 10 business days, gives you full use of the funds, and informs you within two business days after making the credit.
| Timeline | What it means |
|---|---|
| 10 business days | The bank generally determines whether an error occurred, or provides provisional credit if it needs more time |
| Up to 45 calendar days | The usual extended investigation period when the bank provides provisional credit |
| Up to 20 business days initially and 90 calendar days overall | Longer periods may apply to certain point-of-sale debit transactions, transfers not initiated within a state, or transfers involving a very new account |
The 10-day provisional-credit rule is not limited to claims above $50. The cited federal rule also does not create a universal 24-hour credit requirement for claims below $100 or require every bank to accept disputes digitally. A bank may offer faster processing by policy.
If the bank decides no error occurred, it may reverse provisional credit after giving the required notice and explanation. Watch your balance during the investigation so a reversal does not cause an avoidable payment problem.
If the bank denies the dispute
Ask for the decision in writing. When the bank concludes that no error occurred, the rule requires an explanation, and you can request copies of the documents it relied on.
Compare the decision with your original notice. Did the bank investigate the transaction you reported? Did it treat a merchant-quality complaint as fraud, or overlook evidence that you never authorized the transfer? Send a concise response addressing those points and attach only relevant records.
A bank's evidence may include transaction details, card use, account access, or information from the merchant. Explain anything that does not fit your circumstances, such as being somewhere else, not possessing the card, or reporting a stolen device before the transaction occurred.
If the bank did not follow Regulation E's notice or investigation procedures, consider submitting a complaint to the Consumer Financial Protection Bureau. A complaint can create a formal record, but it does not guarantee a refund and may not decide a separate merchant or network claim.
Situations that need extra care
A stolen physical card is only one form of unauthorized use. Someone may use the card number, account credentials, or another access device while you still have the card. Tell the bank exactly what happened.
A PIN transaction is evidence the bank may consider, not a complete explanation by itself. Describe who had access to the card or PIN and whether you gave anyone permission.
Thing is, a payment you personally initiated after a scam can be treated differently from a transfer made by someone else without permission. Report it quickly, explain that you were deceived, and ask the provider which protection and recovery process applies. Don't label it unauthorized unless that is accurate.
International activity does not automatically create a 90-day deadline for every debit card claim. The longer Regulation E periods apply to certain transactions, including some transfers not initiated within a state and some point-of-sale debit transactions. Ask the bank which period it is using and why.
Visa and Mastercard network procedures can affect a merchant dispute, especially for non-delivery or goods that differ from the order. Those private rules do not replace Regulation E, and their deadlines or evidence requirements may differ from the bank's legal obligations.
Debit card disputes versus credit card disputes
Debit and credit cards are not interchangeable for billing problems. Debit transactions take money from your account, while a credit card issuer bills you under a different federal process.
| Issue | Debit card | Credit card |
|---|---|---|
| Main federal framework | Regulation E and the Electronic Fund Transfer Act | Fair Credit Billing Act and Regulation Z |
| Notice deadline | Generally no later than 60 days after the statement showing the error was sent; earlier notice can reduce liability | Written notice generally within 60 days of the statement showing the billing error |
| Money at risk | Funds may already be gone from your bank account | The disputed amount is generally part of the issuer's bill |
| Temporary relief | Regulation E may require provisional credit during an extended investigation | The billing-error process uses different protections rather than Regulation E provisional credit |
| Merchant complaint | Usually depends on the merchant, bank, and network process unless the transfer itself was an error | Credit card billing-error rules may cover certain billing problems |
The FTC's billing-error guidance explains the separate credit card process. Don't use credit card instructions as a substitute for a debit card notice.
Common questions
Can I dispute a debit card purchase for something I never received?
You can ask the merchant for a refund and ask your bank whether it offers a debit-card purchase dispute. Keep the order, delivery information, cancellation request, and merchant response. A non-delivery complaint is not automatically an unauthorized electronic fund transfer under Regulation E.
Does reporting within 60 days guarantee a full refund?
No. The deadline helps preserve federal protections, but the bank still examines whether an error occurred and when you gave notice. Reporting within two business days after learning of a lost or stolen access device can provide a lower liability limit.
Does the bank have to give provisional credit?
Not in every situation. The bank may finish an eligible investigation within the initial period, or it may not have to provide temporary credit if it requested written confirmation and did not receive it within 10 business days. Ask the bank which rule or fact explains its decision.
Can the bank take back provisional credit?
It can generally reverse temporary credit after deciding that no error occurred and giving the required explanation. Keep enough information to recognize the reversal, and challenge it promptly if the bank ignored relevant evidence.
What should I do today?
Save the statement, call the bank, and write down the notice date. Then send a clear written dispute through the bank's approved channel and keep the confirmation number. To be honest, that simple paper trail often matters more than a long argument.