Call the bank today if a debit card transaction isn't yours. Don't wait for the next statement.
For most U.S. consumer accounts, Regulation E sets the notice and investigation rules for debit card purchases, ATM withdrawals, and similar electronic fund transfers. The Fair Credit Billing Act generally applies to credit-card billing disputes instead.
A debit card charge can mean several things. Someone may have used the card without permission. A merchant may have entered the wrong amount. You may even have approved a payment after a scam. The facts affect the deadline, the investigation, and whether a refund is available.
What rule controls a debit card dispute?
Start with Regulation E. It covers many electronic fund transfers from consumer accounts and provides error-resolution procedures.
That protection isn't a guarantee that every bad purchase will be refunded. A merchant disagreement and an unauthorized transfer are different claims.
Credit-card billing disputes generally follow the Fair Credit Billing Act. A bank or card network may also offer a chargeback process, but that process is separate from your federal Regulation E rights.
See Regulation E, 12 CFR 1005.6 for liability rules. The investigation procedures are in 12 CFR 1005.11.
Debit card dispute deadlines
Two different clocks can matter.
The first starts when you learn that an access device was lost or stolen. The second starts with the statement that first shows the unauthorized transfer. For lost or stolen access devices, the federal liability framework generally works like this:
| When you notify the bank | Possible liability under federal law |
|---|---|
| Within two business days after learning that the access device was lost or stolen | Generally no more than the lesser of $50 or the unauthorized transfers made before notice |
| After those two business days but within 60 days after the statement showing the transfer was sent | The potential cap can reach the lesser of $500 or the formula described below |
| More than 60 days after the statement showing the transfer was sent | You may be responsible for unauthorized transfers after the 60-day period and before notice if the bank establishes that timely notice would have prevented them |
The $500 figure is not an automatic fee. The cap is the lesser of $500 or the sum of the lesser of $50 or the transfers made during the first two business days, plus certain transfers made afterward and before notice.
That two-business-day rule concerns learning that the access device was lost or stolen. If the card is still in your wallet but the account number was compromised, report the transaction as soon as you see it. Report it promptly.
The Consumer Financial Protection Bureau's guidance says to notify the bank no later than 60 days after it sends the statement showing the unauthorized transaction. Waiting past that point can expose later transfers to greater liability.
What the bank must do after notice
Once the bank receives a proper notice of error, it must investigate promptly. In an ordinary case, it must decide whether an error occurred within 10 business days.
If the bank needs more time, it can generally take up to 45 calendar days if it provisionally credits the disputed amount within 10 business days. The regulation allows longer periods for some point-of-sale, foreign-initiated, and new-account transactions.
Thing is, provisional credit is temporary. If the bank finds no error, it may reverse the credit, but it must send a written explanation and provide the documents supporting its decision if you request them.
A phone call can begin the process. If the bank asks for written confirmation, send it within 10 business days. Otherwise, the bank may not have to provide provisional credit while it investigates.
How to dispute an unauthorized debit card transaction
-
Block further use. Call the bank's fraud or disputes number. Freeze the card if the bank offers that option, ask whether it should be replaced, and change exposed online-banking credentials or PINs.
-
Describe the error clearly. If accurate, say you are reporting an unauthorized electronic fund transfer. Give the transaction date, amount, merchant description, and the reason you did not authorize it. Ask for a claim or confirmation number.
-
Send written notice. Use the bank's secure-message system or the address it designates for error notices. Include your name, account information, the type and amount of the error, and a short explanation. Keep proof of delivery or receipt.
-
Approach a known merchant separately. Request a written refund if the merchant is identifiable. Do this without delaying notice to the bank. A merchant's promise to investigate does not extend a federal deadline.
-
Write down the timeline. Record when you first saw the transaction, when you called, who handled the report, and what the bank requested. Keep the confirmation number.
-
Monitor the account. Look for related transactions, check for provisional credit, and answer requests for documents. Treat temporary credit as reversible until the bank closes the matter.
Evidence that can strengthen the claim
Give the bank a timeline it can check against the account records. Keep these materials together:
- The statement or account screenshot showing the transaction date, amount, and merchant description
- The report date, confirmation number, and copies of secure messages or letters
- Receipts, travel records, card-possession details, or other records showing what happened
- Merchant correspondence, a truthful fraud affidavit if requested, and a police report if theft was reported
Be exact. Don't guess at missing details or exaggerate.
Don't sign a statement that conflicts with what you know.
If you approved a payment after a scam
Approval after a scam can change the analysis.
A Regulation E unauthorized EFT generally means that someone other than the consumer initiated the transfer without actual authority and that the consumer received no benefit from it. If someone used your card without permission, say that plainly.
A bank may view the payment differently if you entered a code, approved a banking prompt, or instructed the bank or payment app to send the money yourself. Deception may have caused the payment, but the bank can still treat it as authorized depending on the facts and payment method.
Report the scam anyway. Describe the sequence, not just the word "fraud." Ask whether the bank is reviewing a debit purchase, ATM withdrawal, ACH transfer, account-to-account payment, or peer-to-peer transfer. The payment rail matters.
When the problem is really a merchant dispute
A bad purchase isn't automatically an unauthorized transfer. The merchant may have charged the wrong amount, charged twice, failed to deliver, or failed to issue a promised refund without anyone taking your card.
| What happened | Start here | What to know |
|---|---|---|
| You don't recognize a card purchase or ATM withdrawal | Notify the bank immediately under Regulation E | Give a clear error notice and watch the 60-day statement deadline |
| The merchant charged the wrong amount or charged twice | Contact the merchant and ask the bank to review the transaction | Ask whether the issue qualifies as a Regulation E error or a network dispute |
| Goods weren't delivered, were defective, or a subscription kept billing | Request a written merchant refund, then contact the bank's dispute team | A chargeback may be available, but this isn't automatically an unauthorized-transfer claim |
| You approved a payment after an impersonation or other scam | Report it to the bank and payment provider | Explain exactly what you approved and when; the result depends on the payment type and facts |
Chargeback isn't magic. It usually means a card-network or bank process with separate evidence requirements and deadlines. Ask which process the bank opened and whether your notice is also being treated as a Regulation E error claim.
If the bank denies the dispute
Read the bank's written decision carefully. If you received only a phone answer, request the explanation in writing and ask for the documents used to reach it.
Compare the reason with your timeline. If the bank says you authorized the payment, ask what evidence supports that conclusion and identify any missing or incorrect facts. A focused response is more useful than repeating the same accusation.
To be honest, a denial may not end the matter. Request an internal review, file a complaint with the appropriate banking regulator or the CFPB when applicable, and keep copies of everything. A regulator complaint may prompt a response, but it doesn't guarantee reimbursement or replace a court deadline.
Check the account agreement for arbitration requirements. Small-claims court may be available, depending on your state, the amount involved, and the bank's contract. For a large loss or complicated scam, consider local legal advice.
Questions about debit card disputes
Does the Fair Credit Billing Act cover a debit card purchase?
Usually, no. Debit card purchases generally involve electronic transfers from a bank account, so the federal procedures discussed here are usually Regulation E procedures. Credit-card billing protections are different.
Will the bank refund the money immediately?
Not necessarily. The bank may investigate first.
If it cannot finish within the initial period, Regulation E generally requires provisional credit within 10 business days, subject to exceptions and any required written follow-up.
Can the bank ask for an affidavit?
Yes. A bank may request a written statement or fraud affidavit. Give a truthful account promptly.
Make the initial report before you have gathered every document.
What if more than 60 days have passed?
Report the transaction anyway. Federal protection for later transfers may be weaker, but the bank may still review the account under its agreement or card-network procedures.
Keep the statement, explain the delay, and seek help quickly if the loss is substantial.
Do this today
Write down the discovery date, report date, transaction amount, and bank confirmation number. Send the written notice through the bank's approved channel, then keep checking the account for related transfers and any provisional credit.