Can You Do a Chargeback on a Debit Card? Regulation E Rights and Limits

Yes, you can do a chargeback on a debit card, but the protections come from two separate systems that most people confuse. Federal law (the Electronic Fund Transfer Act and Regulation E) covers unauthorized and incorrect transfers through your bank. Visa and Mastercard run their own chargeback programs that can cover merchant disputes like defective or undelivered goods. Which path applies depends on what went wrong, and both have deadlines that can cost you money if you miss them.

Two Different Dispute Systems

When people say “chargeback,” they usually mean the credit card process where the card issuer pulls funds back from a merchant. Debit cards have something similar, but it lives in two places.

Regulation E is the federal rulebook. It handles unauthorized transfers, incorrect amounts, missing transactions, ATM errors, and bookkeeping mistakes by the bank. It does not handle disputes about the quality of what you bought. If a merchant charged your card without permission or ran the wrong amount, this is your path.¹

The card network chargeback program is contractual, run by Visa or Mastercard. Mastercard lists “goods or services were either not as described, defective, or not provided” as a valid dispute category.² Visa has similar reason codes. These protections generally apply to signature-based debit transactions routed through the Visa or Mastercard network. PIN-based transactions on other networks may not carry the same rights, and enforcement is up to your bank rather than federal law.

When you call your bank, be specific about which process you need. If the charge is unauthorized, say so. If the merchant delivered a broken product or nothing at all, ask about the card network’s dispute process rather than a Regulation E error claim.

How Fast You Report Decides How Much You Lose

For unauthorized debit card transactions, your liability climbs with delay. This is the biggest practical difference between debit and credit cards, and it is the reason people sometimes lose their entire checking account balance with no recourse.

Report within 2 business days of learning your card was lost or stolen: liability capped at $50, or the amount of unauthorized transfers before you notified the bank, whichever is less.
Report after 2 business days but within 60 days of your statement: liability can reach $500. That includes the first $50 tier plus any unauthorized transfers between day two and the date you gave notice.
Report more than 60 days after your statement: potentially unlimited liability for unauthorized transfers occurring after the 60-day window. The bank only has to reimburse losses it can prove would not have been prevented by earlier notice.

The law carves out an exception for extenuating circumstances like extended travel or hospitalization, which can push these deadlines to a reasonable period under the circumstances.³

One thing that surprises people: your bank cannot impose greater liability just because you were careless. Even writing your PIN on the card does not override the caps Regulation E sets.⁴

What Regulation E Counts as an Error

The federal definition of “error” is narrower than most people expect. It covers:

Unauthorized transfers made without your permission through theft, skimming, or a data breach.
Incorrect amounts moving to or from your account.
Missing transactions that should appear on your statement.
Computational or bookkeeping mistakes by the bank.
Wrong cash amounts dispensed by an ATM.
Transactions on your statement that lack the identifying information federal rules require.

You can also submit a notice just to request documentation or clarification about a transfer, even to determine whether an error occurred at all.¹

What Regulation E does not cover is a dispute about the quality of goods or services. If a product arrived broken or a service was poorly performed, that falls outside the federal framework and belongs in the card network chargeback path instead.⁵

Scams and Fraudulently Induced Payments

A common modern situation: you were tricked into giving up account access or sending money yourself. Phishing calls, fake tech support, romance scams, and impersonators posing as your bank all fall in this category.

The CFPB’s position is that if a third party fraudulently induces you into sharing your account access information and then uses it to move money, that transfer is unauthorized under Regulation E. Its example is a caller pretending to be your bank’s representative who tricks you into providing your debit card number or a texted confirmation code. A consumer deceived into handing over credentials has not voluntarily furnished an access device.⁴

Peer-to-peer app payments like Zelle are harder. In late 2024, the CFPB sued the operator of Zelle and several major banks over the handling of fraud complaints.⁶ Banks have been inconsistent about honoring these claims, especially where the customer initiated the transfer while being deceived. File the dispute anyway and reference the CFPB’s guidance that fraudulently induced transfers qualify as unauthorized.

How to File the Dispute

You can notify your bank orally or in writing, and the investigation obligation kicks in as soon as the bank receives your notice. A phone call is enough to trigger the bank’s legal duties.⁷ Most banks also let you start disputes through their app or website.

Your notice needs enough information to identify you and your account, the specific transaction you believe is wrong, and why you think it is an error. Include date, amount, and merchant name from the statement. You do not have to contact the merchant first. The CFPB has found that requiring a consumer to contact the merchant before investigating violates Regulation E.⁴ That said, records of a failed refund attempt help if the investigation comes down to conflicting accounts.

The Written Confirmation Trap

Here is where disputes quietly die. Your bank is allowed to require written confirmation within 10 business days after you report an error orally. If it requires this and you do not follow through, the bank does not have to provisionally credit your account while investigating. The bank must tell you about this requirement and give you an address during your initial call.⁸ If you dispute by phone, ask immediately whether written follow-up is required, then send it the same day.

Keep the written notice straightforward: name, account number, date and amount of the disputed transaction, merchant name as it appears on your statement, and a brief reason. If unauthorized, say so plainly. If the amount is wrong, state the correct amount. Send it by a method that gives proof of delivery.

The Investigation Timeline and Provisional Credit

Once your bank receives a valid error notice, it must investigate promptly and resolve the dispute within 10 business days. If it finds an error, it must correct the account within one business day and report results to you within three business days.⁹

If the bank cannot finish in 10 business days, it can extend the investigation to 45 days, but only if it provisionally credits your account within those first 10 business days. The credit must include interest where applicable, and the bank must notify you of the amount and date within two business days of posting it. You have full use of the funds during the investigation. For unauthorized transfers, the bank can hold back up to $50 from the provisional credit.⁹

Point-of-sale debit transactions, which include most in-store purchases, get a 90-day investigation window rather than 45. Foreign-initiated transfers also get 90 days. New accounts, where the disputed transfer occurred within 30 days of your first deposit, get 20 business days for the initial deadline and 90 days for full resolution.¹

If the Bank Denies Your Claim

If the bank concludes no error occurred, or that a different error occurred than the one you described, it must send a written explanation of its findings. That letter must tell you that you have the right to request copies of the documents the bank relied on to reach its decision.⁹ The bank must provide those copies promptly and in an understandable form.

If you received provisional credit, the bank will reverse it. Request the investigation documents immediately. Denials often rest on IP address logs, device fingerprints, or the merchant’s authentication records, and reviewing those can reveal problems with the investigation itself. If you believe the determination was wrong, you can file a complaint with the CFPB, contact your state attorney general, or take the matter to small claims court. Under the EFTA, a bank that fails to provisionally credit on time or investigates in bad faith can be liable for treble damages.⁸

Stopping Recurring Preauthorized Payments

A related right people often actually need: stopping a subscription, gym membership, or loan debit you previously authorized. Regulation E lets you stop any preauthorized electronic debit by notifying your bank at least three business days before the next scheduled payment, orally or in writing.⁷

If you give the order by phone, the bank can require written confirmation within 14 days. Miss that follow-up and the oral order expires, letting the next debit go through. Cancel the underlying agreement with the merchant at the same time, since a bank stop-payment does not end your contract. If a preauthorized debit posts after you properly submitted a stop-payment order, that transfer is itself an error under Regulation E and triggers the same investigation and provisional credit rules as any other dispute.

1
eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
2
Mastercard. Chargebacks Made Simple Guide
3
GovInfo. 15 USC 1693g – Consumer Liability
4
Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
5
Consumer Compliance Outlook. Credit and Debit Card Issuers’ Obligations When Consumers Dispute Transactions with Merchants
6
Consumer Financial Protection Bureau. CFPB Sues JPMorgan Chase, Bank of America, and Wells Fargo for Allowing Fraud to Fester on Zelle
7
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers, Regulation E
8
GovInfo. 15 USC 1693f – Error Resolution
9
Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors