When you dispute a charge, your bank investigates by pulling the transaction’s digital trail, opening a chargeback against the merchant’s bank, weighing the merchant’s rebuttal against your evidence, and issuing a written decision inside a federally set deadline. For debit card disputes under Regulation E, that deadline is 10 business days, extendable to 45 if the bank issues provisional credit. For credit card disputes under Regulation Z, the issuer gets up to two full billing cycles and never more than 90 days. How a bank investigates a dispute, and how fast, depends almost entirely on which of those two rulebooks applies.
What the Bank Does Once You File
The fraud or dispute team starts by reconstructing the transaction. Investigators look at whether the purchase was made with a physical chip, a manual card-number entry, or a mobile wallet. They check the geographic location of the transaction against your usual spending patterns. A purchase at a store in another state while your phone’s GPS shows you were at home is strong evidence of fraud. A purchase that matches your normal shopping habits is harder to challenge.
For online transactions, analysts review IP addresses, device identifiers, and whether the shipping address matches the billing address on file. Tokenized mobile wallet transactions through Apple Pay or Google Pay add complexity because the actual card number is never transmitted; the bank has to work with token data rather than raw card details. That can make tracing the origin harder, but the token itself is strong evidence of which device authorized the payment.
Once the bank has its internal picture, it initiates a chargeback by formally notifying the merchant’s bank (the acquirer) that the transaction is being challenged. The merchant then gets a window to respond with evidence. Merchants who fight chargebacks typically submit signed delivery receipts, tracking numbers with confirmed delivery, AVS and CVV match results showing the correct billing information was entered, IP address logs, screenshots of the customer accessing a service, or copies of their terms and refund policy. The bank weighs the merchant’s rebuttal against your evidence and the transaction data, then reaches a decision.
How Long the Investigation Takes
The deadlines are set by federal regulation and depend on the type of card.
Debit Card Investigations Under Regulation E
The bank must investigate and determine whether an error occurred within 10 business days of receiving your notice. If it finds an error, it must correct it within one business day of that determination and report the results to you within three business days.1eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
If the bank can’t finish within 10 business days, it can extend the investigation to 45 days, but only if it provisionally credits your account for the disputed amount within those initial 10 business days. The bank must notify you within two business days of issuing the provisional credit, telling you the amount and date, and you get full use of the funds while the investigation continues.1eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
Three situations push the deadline out to 90 days: transactions initiated outside the United States, point-of-sale debit card transactions, and transactions that occurred within 30 days of the first deposit to a new account. For new accounts, the bank also gets 20 business days instead of 10 to issue provisional credit.2Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors If you just opened a checking account, expect the process to take longer.
Credit Card Investigations Under Regulation Z
You must send your billing error notice within 60 days of the date the issuer sent the statement containing the error. Miss that window and you lose your dispute rights for that charge.3eCFR. 12 CFR 1026.13 – Billing Error Resolution The notice must go to the address the issuer designated for billing disputes, which is usually different from the payment address. Check your statement or the issuer’s website for the correct address.
After receiving your notice, the issuer must send a written acknowledgment within 30 days unless it resolves the dispute within that period. The issuer then has two complete billing cycles, but no more than 90 days, to finish the investigation and either correct the error or explain why it believes no error occurred.3eCFR. 12 CFR 1026.13 – Billing Error Resolution
During the investigation, you don’t have to pay the disputed amount or any related finance charges, and the issuer cannot report the disputed balance as delinquent to the credit bureaus. You’re still responsible for the undisputed portion of your bill.3eCFR. 12 CFR 1026.13 – Billing Error Resolution
What You Need to Give the Bank
The bank needs enough information to identify the exact transaction and understand your claim. Gather the transaction date, the merchant name as it appears on your statement, and the exact dollar amount. If you can locate a transaction ID or authorization code, include it. Most banks let you file through their app, website, or at a branch, and the dispute form will walk you through categorizing the issue.
Supporting evidence makes or breaks a dispute once the merchant pushes back. For items not received, save tracking information and delivery confirmations. For damaged goods, take clear photos. For services not rendered, keep screenshots of confirmation emails and any written communication with the merchant. Attaching this evidence upfront prevents the back-and-forth that slows investigations down.
If your dispute involves identity theft or unauthorized card use, the bank will likely require a signed affidavit confirming you didn’t authorize or benefit from the transaction. You can also file an identity theft report through the FTC at IdentityTheft.gov, which some banks accept in place of a separate affidavit.4Federal Trade Commission. Businesses Must Provide Victims and Law Enforcement with Transaction Records Relating to Identity Theft Keep copies of everything you submit. If the investigation drags on or the bank asks for clarification, you’ll want your own record.
One note on timing: your liability for unauthorized debit card charges escalates sharply the longer you wait to report. Within two business days of learning about the activity, you’re capped at $50. After that it can rise to $500, and after 60 days from your statement there’s no cap on transfers that occur beyond the window.5eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers Reporting fast protects you regardless of how long the investigation itself takes.
How the Merchant’s Side Plays Into the Decision
Winning the initial dispute doesn’t always close the case. Merchants can challenge a chargeback through a process called representment, where they submit a rebuttal package to their bank arguing the original charge was legitimate. That package goes back to your card issuer for a second review. If the merchant’s evidence is strong enough, your issuer can reverse the chargeback, and the credit you received goes away.
If the merchant’s representment fails, the dispute can escalate to pre-arbitration or full arbitration through the card network such as Visa or Mastercard. At arbitration, the network makes the final call, and the losing party typically pays an arbitration fee. As a consumer, you don’t directly participate; the fight happens between the banks. But the outcome lands on your account.
The practical takeaway: keep your evidence even after you receive a favorable decision. If a representment reverses the outcome weeks later, you’ll want to be ready to escalate.
How You Learn the Outcome
For debit card disputes, the bank must send you a written explanation of its findings. If it determines no error occurred, the notice must explain the bank’s reasoning and inform you of your right to request the documents the bank relied on.6eCFR. 12 CFR Part 205 – Electronic Fund Transfers (Regulation E) If the bank used electronic records, it must convert that data into a readable format before providing it. Ask for these documents. They tell you exactly what evidence the bank weighed and can reveal whether the merchant’s rebuttal had gaps you could address in an escalation.
If the bank issued provisional credit and then determines the transaction was valid, it will debit that amount back from your account. Before doing so, it must notify you of the date and amount. It must also honor checks and preauthorized payments from your account for five business days after that notification, without charging you overdraft fees, to give you time to adjust.6eCFR. 12 CFR Part 205 – Electronic Fund Transfers (Regulation E)
For credit card disputes, the issuer must either correct the billing error and send a correction notice, or send a written explanation of why it believes no error occurred and provide copies of supporting documents if you request them.7Consumer Financial Protection Bureau. 12 CFR 1026.13 – Billing Error Resolution
If the Bank Sides Against You
A denial isn’t necessarily the final word. Start by requesting the documents the bank relied on during its investigation. For debit card disputes, the bank is legally required to provide them promptly.6eCFR. 12 CFR Part 205 – Electronic Fund Transfers (Regulation E) Review the merchant’s evidence carefully. Sometimes the documentation has gaps, like a delivery confirmation that shows the package reached your city but not your address, or a signed receipt with a signature that clearly isn’t yours.
If you believe the bank mishandled the investigation or ignored evidence, file a complaint with the Consumer Financial Protection Bureau. The CFPB forwards complaints directly to the financial institution, and companies generally respond within 15 days. In complex cases, the company may take up to 60 days but must notify you that it’s working on a response. After the company responds, you have 60 days to review and provide feedback.8Consumer Financial Protection Bureau. Learn How the Complaint Process Works A CFPB complaint doesn’t guarantee a different outcome, but banks take them seriously because the bureau tracks complaint patterns.
For smaller amounts, small claims court is another option if neither the bank’s dispute process nor a CFPB complaint resolves the issue. Filing fees vary by jurisdiction but typically run from a few dozen dollars up to a few hundred. You can sue the merchant for breach of contract or the bank if you believe it violated Regulation E or Regulation Z procedures.
One Boundary: Don’t File a Dispute You Can’t Back Up
Knowingly filing a dispute for a transaction you actually authorized is fraud. Banks track dispute patterns and flag accounts that file an unusual number of claims. Internally, this can lead to account closure and placement on industry blacklists like the MATCH list, which makes it difficult to open accounts at other institutions.
The legal exposure goes further. Intentionally defrauding a financial institution through false dispute claims falls under federal bank fraud law, which carries penalties of up to $1,000,000 in fines, up to 30 years in prison, or both.9Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud Those are maximum penalties, and most cases don’t result in federal prosecution. But the exposure is real. Filing a dispute because you have buyer’s remorse, or because you want to keep both the product and your money, is not what the system is designed for.