You can dispute a charge if you got scammed, and federal law gives you a real path to a refund — but how much protection you have depends almost entirely on how you paid. Credit cards offer the strongest recovery, with liability for unauthorized charges capped at $50 and a formal dispute process written into statute. Debit cards work on tighter deadlines, and waiting too long can cost you everything in the account. Wire transfers, gift cards, and peer-to-peer apps like Zelle sit at the hard end: once the money moves, getting it back is genuinely difficult. The rules that apply to your situation are the ones tied to the payment method you used, so start there.
If You Paid by Credit Card
Credit cards give scam victims two separate federal protections, and most people only know about one.
The first covers unauthorized charges. If someone stole your card number and ran up transactions you never approved, your personal liability tops out at $50, and most major issuers waive even that.1Office of the Law Revision Counsel. 15 U.S.C. 1643 – Liability of Holder of Credit Card This applies whether a thief used a physical card or just the number online. Once you report the unauthorized use, the issuer cannot charge you for anything that happens afterward.
The second protection covers the situation most scam victims find themselves in: you willingly handed over your card, but you got defrauded. If you paid for something that never arrived, or the product was fundamentally different from what the seller described, federal law treats that as a “billing error.”2Office of the Law Revision Counsel. 15 U.S.C. 1666 – Correction of Billing Errors The statute specifically names goods not delivered in accordance with the agreement. That is the provision that protects you when you buy from a fraudulent online store or pay a contractor who disappears.
How Long You Have
You have 60 days from the date the issuer sent the statement containing the fraudulent charge to submit a written dispute.3Consumer Financial Protection Bureau. Regulation Z – 1026.13 Billing Error Resolution Miss that window and the issuer has no legal obligation to investigate. The clock starts when the statement is sent, not when you notice the charge, which is why checking statements regularly matters.
Once the issuer receives your dispute, it must send written acknowledgment within 30 days and resolve the investigation within two full billing cycles, capped at 90 days. During the investigation, you can withhold payment on the disputed amount. The issuer cannot report the disputed amount as delinquent or threaten your credit rating while the matter is open.4Federal Trade Commission. Using Credit Cards and Disputing Charges You still need to pay any undisputed portion of the bill on time.
If You Paid by Debit Card
Debit card fraud pulls money straight from your checking account, and the federal rules are less forgiving. The Electronic Fund Transfer Act and its implementing regulation set up a tiered liability system where reporting speed determines how much you can lose.5eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Report within 2 business days of learning about the fraud, and your liability caps at $50 or the actual amount of unauthorized transfers, whichever is less.
- Report after 2 business days but within 60 days of the statement date, and your liability jumps to as much as $500.
- Report after 60 days from the statement date, and you could lose every dollar taken through unauthorized transfers that occurred after that 60-day window, with no cap at all.
That third tier is where people get hurt badly. If a scammer drains your account over several weeks and you don’t check your statements for two months, the bank has no obligation to reimburse the later transfers.5eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
The Authorized vs. Unauthorized Trap
Here is the biggest pitfall in debit card disputes: federal law only requires reimbursement for unauthorized transfers. If a scammer tricked you into sending money yourself, many banks will argue that you authorized the payment and deny the claim.
The Consumer Financial Protection Bureau has pushed back on the narrowest version of that argument. The CFPB’s position is that when someone fraudulently induces you into sharing your account login, debit card number, or a texted confirmation code, and the scammer then uses that information to move money out, the resulting transfer qualifies as unauthorized even though you handed over the access information.6Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs The key factor is who actually initiated the transfer. If the scammer used your stolen credentials to move money, that is unauthorized. If you logged into your own bank app and sent the money at the scammer’s direction, that is a much harder case.
The Bank’s Investigation Clock
After you report the error, your bank has 10 business days to investigate. If it needs more time, it can extend the investigation to 45 days, but only if it provisionally credits your account within those initial 10 business days.7eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors The provisional credit restores the disputed funds while the investigation runs. The bank can hold back up to $50 of the credited amount if it has reason to believe an unauthorized transfer occurred and an access device was involved.
If the bank ultimately decides no error occurred, it can reverse the provisional credit, but it must give you five business days’ notice before debiting your account and must honor any checks or automatic payments for five business days after notifying you.8Consumer Financial Protection Bureau. Regulation E – 1005.11 Procedures for Resolving Errors That buffer prevents a surprise reversal from triggering a cascade of bounced payments.
If You Paid Through Zelle, Venmo, or Cash App
Peer-to-peer apps are where scam recovery gets genuinely bleak. These platforms were built for sending money to people you know and trust, and their dispute protections reflect that assumption.
If someone gained access to your account and sent payments without your knowledge, you have a legitimate unauthorized-transaction claim under federal law. The same Regulation E protections apply because P2P transactions that meet the definition of an electronic fund transfer are covered.6Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs Report immediately, change your password, enable two-factor authentication, and file a dispute through both the app and your linked bank.
The harder scenario is when you sent money yourself because a scammer convinced you to. A romance scammer, a fake landlord collecting a deposit, a fraudulent seller on a marketplace — in all of these, you pressed “send.” Federal law does not require the platform or your bank to reimburse you for payments you authorized, even if you were lied to.
Zelle has moved slightly further than the law requires. Starting in mid-2023, Zelle’s parent company began requiring its roughly 2,100 participating banks and credit unions to reimburse consumers for “qualifying imposter scams,” which include someone pretending to be a bank, a government agency, a utility company, or a business to trick you into sending money. The policy does not cover every scam. If you sent money to buy something that never arrived, or fell for a romance scam, that likely falls outside the policy. Zelle’s own guidance still warns that because you authorized the payment, you may not be able to get your money back for non-qualifying scams.
Venmo’s unauthorized-payment process follows a similar structure: file a dispute through the app’s support system, select unauthorized activity as the issue, and provide screenshots and dates. Investigations for unauthorized payments on Venmo take roughly 10 to 30 business days. For payments you sent voluntarily, Venmo’s purchase protection covers goods and services bought through its platform, but personal transfers between friends are not covered unless someone accessed your account without permission.
If You Sent a Wire Transfer or Bought Gift Cards
These two payment methods are scammer favorites precisely because they are almost impossible to reverse.
Wire Transfers
A domestic wire settles within hours, sometimes minutes. Once the receiving bank processes the funds and the recipient withdraws them, the money is gone. Your window to request a recall is measured in minutes, not days. Call your bank the moment you realize what happened. The bank will try to contact the receiving institution and request a hold on the funds, but neither bank is legally obligated to reverse a completed transfer.
Filing a complaint with the FBI’s Internet Crime Complaint Center at IC3.gov is worth doing for wire fraud, because the FBI can sometimes freeze stolen funds if they act quickly enough. This is one of the few scenarios where law enforcement may directly help recover money.
Gift Cards
If a scammer convinced you to buy gift cards and read them the numbers, contact the gift card company immediately using the information on the card. Some issuers, including Apple and Google Play, can freeze the remaining balance if the scammer hasn’t spent it yet and may refund the frozen amount.9Federal Trade Commission. Avoiding and Reporting Gift Card Scams Keep your purchase receipt and the physical card, because both are typically needed to file a claim. The FTC notes that some companies are helping stop these scams and may return your money, but there is no federal law requiring them to do so. Speed matters: once the balance is drained, recovery is essentially impossible.
How to File the Dispute
For credit card billing errors, federal law requires you to submit your dispute in writing to the address the issuer designates for billing inquiries, not the address for payments.10Federal Trade Commission. What To Do if Youre Billed for Things You Never Got or You Get Unordered Products In practice, most major banks now accept disputes through their app or online portal, and those digital submissions satisfy the requirement. If you go the paper route, send via certified mail with a return receipt so you have proof of when the issuer received it.
For debit card disputes, call your bank immediately to report the unauthorized transfer, then follow up in writing. The two-business-day window for the lowest liability tier does not leave room for deliberation. Many banks accept verbal notice to start the process, but some require written confirmation within 10 business days of your call.7eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors If the bank requests written confirmation and you don’t provide it within that window, it can withdraw any provisional credit it already issued.
Whichever method you use, save the confirmation number, email receipt, or certified mail tracking number. If a disagreement later arises about when you filed, that record is your proof.
Evidence That Strengthens Your Case
A dispute backed by documentation gets resolved faster and more often in your favor. Start collecting before you contact the bank.
Pull up the transaction and note the exact date, dollar amount, and merchant name as it appears on your statement. The merchant name often looks nothing like the company you thought you were buying from, and that discrepancy itself can be evidence of fraud.
Collect everything that shows what the scammer promised versus what you received. Screenshots of product listings, website checkout pages, and email confirmations are the backbone of most successful disputes. If goods never arrived, save any tracking information the seller provided. If tracking shows “delivered” but nothing came, note that too.
Document any attempts you made to resolve the issue with the seller: emails, chat logs, phone notes with dates and what was said. Most issuers expect a good-faith attempt before escalating. If the merchant’s website has vanished or their contact information leads nowhere, screenshot that as well, since a defunct website strongly supports a fraud claim.
For identity theft, file a report at IdentityTheft.gov. The report the site generates serves as official proof to businesses that your identity was stolen and creates the letters and forms you need to clean up the damage.11Federal Trade Commission. IdentityTheft.gov Helps You Report and Recover from Identity Theft
If the Bank Denies Your Dispute
A denial is not the end. You have the right to request the documents and evidence the bank relied on when it made its decision. Reviewing that evidence can reveal whether the merchant provided fabricated delivery records or whether the bank misunderstood the nature of your claim.
For credit card disputes, you can send a written response within 10 days of the denial (or before the issuer’s deadline for paying the disputed amount, whichever is later) explaining why you still believe the charge is wrong. If the issuer then reports the amount as delinquent, it must also report that the amount is in dispute and notify you of every entity it reports to.
You can also file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov. The CFPB forwards complaints to the financial institution and requires a response, which sometimes prompts a second look at the evidence. This is particularly effective when a bank applied the wrong legal standard or ignored evidence you submitted.
If the dollar amount justifies it, small claims court is an option. Filing limits range from about $2,500 to $25,000 depending on the state, and the process is designed for people without lawyers. You would sue the merchant, not your bank, though in some credit card situations you can assert your claim against the card issuer directly.12Office of the Law Revision Counsel. 15 U.S.C. 1666i – Assertion by Cardholder Against Card Issuer of Claims and Defenses
Where to Report the Scam
Filing a bank dispute recovers your money. Reporting the scam helps shut down the operation and occasionally aids recovery.
The FTC collects scam reports at ReportFraud.ftc.gov. The FTC does not resolve individual complaints, but it enters every report into a database shared with more than 2,800 law enforcement agencies, which use the data to build cases against fraud networks.
For internet-based scams, the FBI’s Internet Crime Complaint Center at IC3.gov is the federal intake point. IC3 analyzes complaints and may refer them to federal, state, or local law enforcement. In wire fraud cases specifically, the FBI can sometimes freeze stolen funds before the scammer withdraws them.
A local police report creates a paper trail that strengthens both your bank dispute and any future legal action. Some banks explicitly require a police report for higher-dollar fraud claims. Even when they do not, attaching one to your dispute file signals that you are serious and have consistent documentation.
Business Accounts Are Not Covered
Every protection in this article applies to consumer accounts. If you were scammed through a business checking account or a business credit card, the landscape changes. Regulation E does not cover business accounts, which means the liability caps and provisional credit requirements for debit transactions do not apply. Business credit cards are also generally excluded from the Fair Credit Billing Act’s protections, though some issuers voluntarily extend similar dispute processes to business cardholders. Check your account agreement for the dispute rights your bank has chosen to offer, because federal law does not guarantee them.