You can dispute a debit card charge by notifying your bank that a transaction on your account is unauthorized or incorrect, and under federal law the bank then has to investigate on a defined timeline and tell you what it found. The protections come from the Electronic Fund Transfer Act and its implementing rule, Regulation E. How much you can lose, how fast the bank must act, and whether you can dispute the charge at all depend on what kind of problem you’re reporting and how quickly you pick up the phone.
What You Can and Can’t Dispute
Regulation E defines the problems that qualify as “errors” your bank must investigate. The most common one is an unauthorized transfer: someone used your card or account number without permission. That covers a stolen physical card and a card number skimmed and used online for purchases you never made.1Legal Information Institute. Electronic Funds Transfer Act
Beyond fraud, you can challenge charges that are simply wrong. A transaction posted for the wrong amount, a purchase that hit your account twice, a transfer missing from your statement, or a computational mistake by the bank itself all qualify.2eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
There is a gap worth knowing about. Regulation E does not cover disputes about the quality of goods or services, or even non-delivery. If you ordered something that never arrived or showed up broken, that isn’t an “error” under federal debit card law the way it would be for a credit card. Your bank may still process a chargeback through the card network’s own rules, but the statute doesn’t require it for merchant-quality problems.
Why Reporting Fast Protects Your Money
Delay costs real money. Federal law uses a tiered system in which your maximum out-of-pocket loss grows the longer you wait.
- Within 2 business days of learning of the loss or theft, your liability is capped at $50, or the actual loss if less.3eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- After those 2 business days but before 60 days from the statement, liability can rise to $500. The bank can hold you responsible for unauthorized transfers that happened after the first two days and that it can show earlier notice would have prevented.4Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- After 60 days from the date your statement was sent, liability for later unauthorized transfers can be unlimited. The bank doesn’t have to reimburse losses it can prove timely reporting would have caught.4Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
The 60-day clock starts when the bank sends the statement showing the disputed transaction, not when you read it. Skip two months of statements and most of your protection is already gone. The rule does allow an extension for extenuating circumstances such as hospitalization or extended travel, which pushes the deadlines to a “reasonable period.”3eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
Check statements regularly and report anything suspicious the day you spot it.
Zero-Liability Policies From Visa and Mastercard
The tiers above are the federal floor. Most debit cardholders actually get better protection through the card network. Visa’s zero-liability policy says cardholders “won’t be held responsible for unauthorized charges” on credit or debit transactions, in person or online, and requires the issuing bank to replace stolen funds within five business days of notification.5Visa. Visa’s Zero Liability Policy Mastercard offers a similar guarantee for purchases in stores, online, by phone, or at ATMs.6Mastercard. Zero Liability Protection
Conditions apply. Both networks require that you used reasonable care protecting your card and reported the loss or unauthorized use promptly. Neither policy applies to commercial cards or anonymous prepaid cards like gift cards. Where federal or state law gives you more, that law controls. In practice, these policies mean many fraud victims pay nothing out of pocket.
How to File the Dispute
You can start a dispute by phone, through your bank’s mobile app, or online. Most banking apps now show a dispute option next to each transaction. An oral report is enough to start the legal clock and trigger the bank’s investigation obligations.7Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
Your bank is allowed to require written confirmation within 10 business days of your call. If the bank asks for it and gives you an address, don’t skip the step. A bank that requests but doesn’t receive written follow-up is not required to provisionally credit your account during the investigation.8eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors That means the disputed funds sit out of your account the entire time.
Send the written confirmation by certified mail. Keep a copy of the letter, the tracking number, and the claim or reference number the bank gives you.
What to Have Ready
When you contact the bank, you need to give three things: enough information to identify you and your account, the transaction you believe is wrong (date and amount), and your explanation of why it’s an error.7Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution The merchant name as it appears on your statement helps the bank find the transaction, since statement descriptors don’t always match the business you visited.
Documentation isn’t technically required to open an investigation, but it strengthens your claim. Receipts, order confirmations, or screenshots of the expected amount make the case harder to deny. For fraud or identity theft, a police report number adds credibility. If you tried to resolve the problem with the merchant first, save those emails or chat logs; they show good faith and can tip a close call.
What the Bank Must Do and When
Once your bank receives a valid error notice, it has 10 business days to investigate and report back.7Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution Many disputes take longer, and the law has an extension mechanism for that.
If the bank can’t finish in 10 business days, it can take up to 45 calendar days total, but only if it provisionally credits your account for the disputed amount within those first 10 business days. The bank must notify you within two business days of posting the provisional credit so you know the funds are available.9National Credit Union Administration. Electronic Fund Transfer Act Regulation E You have full use of those funds while the investigation runs.
Point-of-sale transactions and transfers initiated outside the United States get a longer window, up to 90 calendar days.10Consumer Compliance Outlook. Error Resolution and Liability Limitations Under Regulations E and Z
If the bank confirms an error, it has to correct it within one business day of that conclusion, including any applicable interest.7Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
If the Bank Finds No Error
A denial comes with a written explanation of the bank’s findings and, if you ask, copies of the documents it relied on. If you had a provisional credit, the bank can reverse it, but it must give you at least five business days’ notice before pulling the funds back. If you’ve already spent the credit, that reversal can trigger overdraft fees.11Consumer Financial Protection Bureau. Overdraft/NSF Revenue in 2023
Denial isn’t the end of the road. You can escalate by filing a complaint with the Consumer Financial Protection Bureau, which supervises bank compliance with Regulation E. You can also talk to an attorney about the EFTA’s private right of action, especially if you think the bank never conducted a real investigation.
Debit Disputes vs. Credit Card Disputes
Credit cards and debit cards sit under different federal laws. Credit disputes run through the Truth in Lending Act and Regulation Z; debit disputes run through the Electronic Fund Transfer Act and Regulation E. The gap is bigger than most people realize.
Credit card law explicitly covers goods or services not delivered as agreed, wrong quantities, and late deliveries. Regulation E does not. If a merchant charges your debit card and never ships the product, that isn’t a defined “error” under federal debit card law.
Cash flow is the other difference. A disputed credit card charge is money you haven’t paid yet, so the issuer’s funds are at stake during the investigation. A disputed debit card charge has already left your checking account. Even with a provisional credit, that lag can be a problem if rent or bills are coming due. For purchases where delivery or quality is uncertain, a credit card gives you more leverage.
When the Bank Breaks the Rules
The EFTA has teeth. If the bank ignores your dispute, misses the investigation deadline, or refuses a required provisional credit, you can sue for actual damages plus statutory damages between $100 and $1,000 per violation. A winning plaintiff can also recover attorney’s fees and costs.12Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability
The penalties climb for worse behavior. If the bank fails to provisionally credit within 10 business days and either skipped a good-faith investigation or knowingly reached an unsupported conclusion, a court can award treble damages, three times what you’d otherwise recover.7Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution The provision exists to discourage rubber-stamp denials.
The practical lesson: document everything. The date you called, what you sent and when, the claim number, the bank’s responses. If the bank didn’t follow the rules, those records are your case.