Debit Card Dispute Process: Deadlines, Filing, and Appeals

The debit card dispute process starts with a notice to your bank, and federal law gives you 60 days from the statement that shows the problem to send it. Once the bank has your notice, it has 10 business days to investigate. If it needs more time, it has to put the disputed money back in your account as provisional credit while it keeps looking, usually for up to 45 more days. The rules come from the Electronic Fund Transfer Act and Regulation E, and they apply to any consumer debit card tied to a personal checking or savings account.

What You Can Actually Dispute

Regulation E defines “error” narrowly. The categories that qualify are:

Unauthorized transfers, meaning someone used your card or account information without permission.
Incorrect transfers, where the wrong amount was charged or the money moved to or from the wrong account.
Missing transactions that should appear on your statement but don’t.
Computational or bookkeeping errors by the bank.
ATM cash errors, where the machine dispensed the wrong amount.
Transactions on your statement that lack required identifying information.
Your request for documentation or clarification about a transfer.

What is not on that list: buyer’s remorse, a defective product, or a merchant who never shipped your order. Regulation E treats those as disputes with the merchant, not errors by the bank. Credit cards carry stronger protection for purchase problems under a different federal law; debit cards do not. For a bad purchase on a debit card, you work through the merchant first, and the card network’s own chargeback policies may help, but the federal error resolution process is not the right tool.¹

The 60-Day Deadline and Why Speed Matters

Your bank must receive your notice no later than 60 days after it sent the periodic statement that first reflected the problem. Miss that window on an unauthorized charge and you lose the structured protections entirely. The bank no longer has a federal obligation to investigate, and your liability for unauthorized charges that keep happening after the 60 days expire has no cap.²

For a lost or stolen card specifically, how fast you report also sets your maximum liability for charges the thief ran up:

Report before any unauthorized charges post: you owe $0.
Report within two business days of learning the card is gone: liability caps at $50.
Report after two business days but within 60 days of the statement: liability caps at $500.
Report more than 60 days after the statement was sent: no federal cap on charges that occurred after the window closed.

The two-business-day clock runs from when you discovered the loss, not when charges appeared. Extended travel or hospitalization can stretch these deadlines to what is reasonable under the circumstances.³

The practical point: review every statement. Reporting a problem on day 15 and reporting it on day 75 are two different legal situations.

How to File the Dispute

You can call the bank. Oral notice is legally sufficient to start the investigation clock. But the bank is allowed to require you to confirm the report in writing within 10 business days, and if it asks and you don’t send the written follow-up, the bank can skip provisional credit.⁴ Most banks also accept disputes through their mobile app or online banking portal, and some still take mailed forms.

Whatever channel you use, your notice needs to give the bank enough to work with: your name and account number, the reason you believe there’s an error, and the approximate date and amount if you know them.¹ Before you contact them, gather:

The full account number tied to the card.
The exact date, dollar amount, and merchant name as shown on your statement.
A clear, specific reason. “I did not authorize this transaction” or “I was charged $85.00 but my receipt shows $58.00” is the kind of thing that moves fast. Vague descriptions slow everything down.

You are not required to contact the merchant first. Some banks suggest it; federal law doesn’t. If timing is tight because the 60-day deadline is approaching, go straight to the bank.

Get a confirmation number. If you mail written notice, use a method with delivery tracking. The date the bank receives your notice is the date the legal clock starts, and you want proof of it.

What Happens After You File

Once the bank has your notice, Regulation E puts it on a schedule.

The bank has 10 business days to investigate. If it finishes within that window and agrees an error occurred, it has to correct the account within one business day of reaching that conclusion.¹

Most disputes take longer than 10 business days. When the bank needs more time, it can extend the investigation to 45 days, but only if it provisionally credits your account for the full disputed amount, plus any interest that would have accrued, within the original 10-business-day window. During the extended investigation, you have use of that money.⁵

Three categories get a longer window, 90 days instead of 45:

Transactions that originated outside the United States.
Point-of-sale debit card purchases made by swiping, inserting, or tapping at a terminal.
Transactions on a new account, meaning within 30 days of the first deposit.

ATM transactions do not get the 90-day extension even if they would otherwise fit one of those categories.⁵

The one way to lose provisional credit: if the bank asked you to confirm your oral report in writing within 10 business days and you didn’t, the bank is not required to issue provisional credit.⁶

If the Bank Sides With You

When the investigation confirms an error, the bank has one business day to correct the account. Correction includes refunding any fees that the error triggered, such as overdraft or nonsufficient-funds charges tied to the disputed transaction.⁷ If you already had provisional credit, that credit becomes permanent. Either way, the bank has to report the result to you within three business days of finishing the investigation.¹

If the Bank Denies the Dispute

If the bank concludes no error occurred, it has to send you a written explanation of its findings within three business days of completing the investigation. That letter must tell you that you can request the documents the bank relied on, and if you ask, the bank has to send copies promptly. There is no fee for the request.⁶

Ask for those documents. Banks sometimes deny based on evidence that looks less conclusive than the denial letter suggests. You might see an IP log, a shipping confirmation, or a signed receipt. Looking at the actual records tells you whether the bank’s conclusion was reasonable and whether you have a basis to push back.

If you had provisional credit, a denial means the bank will take it back. Before debiting the amount, the bank has to tell you the date and amount of the reversal. For five business days after that notification, it must continue to honor checks, automatic payments, and similar debits without charging overdraft fees on them. That grace period is there to keep a denied dispute from cascading into bounced rent.⁵

Escalating a Denial

If you think the bank mishandled the investigation, you have two main paths beyond the bank itself.

File a CFPB Complaint

The Consumer Financial Protection Bureau takes complaints about banks that fail to follow Regulation E’s procedures. The CFPB forwards complaints to the institution, which generally responds within 15 days. Have your contact information, a clear description of what went wrong, and supporting documents like statements and correspondence ready. Submit online at consumerfinance.gov or by phone at (855) 411-2372.⁸

Sue Under the EFTA

A bank that violates the Electronic Fund Transfer Act can be sued for actual damages plus statutory damages of between $100 and $1,000 per violation in an individual action. A prevailing plaintiff can also recover reasonable attorney’s fees.⁹ The damages triple if the bank knowingly and willfully concluded there was no error when that conclusion could not reasonably have been drawn from the evidence, or if it failed to issue timely provisional credit and either skipped a good-faith investigation or had no reasonable basis for its conclusion.¹⁰

One Boundary: Business Accounts

Everything above applies to consumer accounts, meaning accounts opened primarily for personal, family, or household use. Regulation E defines “consumer” as a natural person, and business debit cards tied to commercial accounts fall outside its reach.⁶ For business accounts, disputes run under the Uniform Commercial Code, mainly Article 4A for fund transfers. There is no required provisional credit, no 10-business-day investigation window, and no tiered liability cap. Instead, a business has a general duty to review account notifications and report problems within a reasonable time, often capped at 90 days, with the full loss falling on the business if it misses that window.¹¹ Some banks voluntarily extend consumer-style protection to small business accounts; that’s contractual, so check your account agreement.

1
eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
2
eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
3
Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
4
Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
5
Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors
6
eCFR. 12 CFR Part 205 – Electronic Fund Transfers, Regulation E
7
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers, Regulation E
8
Consumer Financial Protection Bureau. Submit a Complaint
9
Federal Reserve. Electronic Fund Transfer Act
10
Office of the Law Revision Counsel. 15 USC Chapter 41, Subchapter VI – Electronic Fund Transfers
11
Legal Information Institute. Uniform Commercial Code Article 4A – Funds Transfers