How Far Back Can You Dispute a Debit Card Charge: 60-Day Rule

Under federal law, you can dispute a debit card charge going back 60 days from the date your bank sent the statement that shows it. That deadline comes from the Electronic Fund Transfer Act and Regulation E, and it governs almost every debit card transaction in the United States.¹ Miss it, and your bank has no legal obligation to investigate or refund the money. Card networks like Visa and Mastercard sometimes allow disputes further back through their own chargeback systems, but the 60-day statutory window is the one that controls your maximum liability.

When the 60-Day Clock Starts

The 60 days run from the date your bank transmitted the periodic statement showing the problem, not the date you opened the envelope or logged in to look.² If statements go out on the first of the month and you don’t check yours until the twentieth, twenty days are already gone. Consumers who review statements weekly, especially electronic ones, have a real practical edge.

The clock covers unauthorized charges, incorrect amounts, missing transfers, computational mistakes by the bank, and situations where an ATM dispensed the wrong amount of cash.²

The statute includes a narrow exception. If extenuating circumstances such as extended travel or hospitalization kept you from reporting on time, a court may find that notice given within a “reasonable time under the circumstances” still counts.³ Relying on that exception is a gamble, and the safe move is to check every statement as it lands.

Why Speed Matters: Your Liability Grows

For unauthorized transactions, the amount you could be on the hook for depends entirely on how quickly you report. Federal law sets three tiers when a card or access device is lost or stolen:

Report within 2 business days of learning the card was lost or stolen, and your liability is capped at $50 or the amount taken before you notified the bank, whichever is less.³
Report after 2 business days but within 60 days of the statement, and liability can rise to $500 for unauthorized transfers made during that gap, if the bank can show they wouldn’t have happened had you reported sooner.⁴
Wait more than 60 days after the statement, and you can be held responsible for every unauthorized dollar that leaves your account after that window closes. There is no cap.³

The two-business-day tier is written around a lost or stolen physical card. When your card number is stolen online but the card itself never left your wallet, that particular clock works differently, but the 60-day statement deadline still applies in full.⁴ However the fraud happened, letting a bogus charge sit for more than 60 days exposes you to unlimited liability for anything that follows.

Past 60 Days: Card Network Chargebacks

Visa and Mastercard each maintain their own zero-liability policies and chargeback systems that sit on top of the federal rules. These are not federal law. They are contractual commitments the networks impose on issuing banks.

Visa’s zero-liability policy covers both credit and debit cards for unauthorized charges made online or in-store, and requires the issuing bank to replace stolen funds within five business days of notification.⁵ Mastercard offers similar coverage for unauthorized purchases made in-store, online, by phone, or at an ATM.⁶ Both networks exclude commercial cards and anonymous prepaid cards like gift cards.

Chargeback windows under the network rules typically run up to 120 days from the transaction date, which is longer than the 60-day federal period. If you’re past the Regulation E deadline, ask your bank to file a chargeback through the card network anyway. It won’t restore your federal liability protections, but it may still get the money back.

What You Can Actually Dispute

Regulation E defines the specific categories of “errors” that trigger your bank’s investigation obligations:²

Unauthorized transfers where someone used your card, card number, or account access without permission.
Wrong amounts, such as a merchant charging $85 for a $58 purchase.
Missing transfers that should appear on your statement but don’t.
Computational or bookkeeping mistakes by the bank.
ATM transactions where the machine dispensed less cash than the receipt or statement shows.
Charges that appear without enough information to identify them.

One important boundary: Regulation E does not cover disputes about the quality of goods or services. If you paid with a debit card and the item arrived broken, or the service wasn’t what the merchant promised, your bank has no federal obligation to investigate through the Reg E process. For those complaints, the route is the card network’s chargeback process or direct resolution with the merchant.

How to File the Notice in Time

A phone call is legally sufficient to start the dispute. The statute accepts “oral or written notice,” and your bank cannot delay its investigation while waiting for something in writing.¹ The moment you call and describe the problem, the clock stops. A phone call on day 59 preserves your rights even if the paperwork follows a week later.

Your bank can require you to send a written confirmation within 10 business days, but only if it tells you about that requirement during the call and gives you the address.² Skip the written follow-up after being properly notified and the bank doesn’t have to issue provisional credit while it investigates.¹ The investigation still has to proceed, but access to temporary funds disappears. Send the written confirmation anyway.

Your notice should include your name and account number, the transaction and dollar amount, and why you believe it is an error. No legal language, no special form. Most banks offer dispute forms through their online portal or app. If you mail it, use certified mail with return receipt so you can prove the bank received it within the deadline.

Federal law does not require you to contact the merchant before disputing a charge with your bank. Some banks ask whether you’ve tried, and the network chargeback process may prefer merchant contact first, but there is no Regulation E prerequisite. If someone stole your card number, you have no obligation to call the thief before filing.

What the Bank Has to Do After You File

Once your bank receives notice, Regulation E imposes strict timelines. The bank must investigate and reach a decision within 10 business days.⁷ If it needs longer, it gets an extension to 45 days but must provisionally credit your account for the full disputed amount within those first 10 business days.¹

That provisional credit is real money you can spend while the review continues. Unlike a credit card dispute, where the charge sits on an unpaid bill, a debit dispute involves cash that has already left your checking account. The provisional credit exists so you don’t bounce rent checks while the bank works.

Three categories of transactions get a longer investigation window of 90 days instead of 45: point-of-sale debit transactions made with a PIN, international transfers, and transfers on accounts opened within the last 30 days.⁷ New accounts also get 20 business days for provisional credit rather than 10.

If the bank determines no error occurred, it can reverse the provisional credit, but it must first notify you of the date and amount it plans to debit and continue honoring checks and preauthorized transfers for five business days after that notice without charging overdraft fees.² You can also request copies of the documents the bank relied on. Read the denial carefully. Banks sometimes reject disputes on narrow technical grounds that a second review can overturn.

If the Bank Denies Your Dispute

A denial is not the end. Start with a complaint to the Consumer Financial Protection Bureau, which you can file online at consumerfinance.gov. The CFPB forwards it to the bank, and companies generally respond within 15 days.⁸ A regulator complaint tends to get routed to a different department than the one that denied you. Include the key dates, amounts, and dispute history, and attach supporting documents (up to 50 pages).

If the bank violated the Electronic Fund Transfer Act by failing to investigate on time, refusing to provide provisional credit, or ignoring your timely notice, you can sue. The statute provides for actual damages plus statutory damages between $100 and $1,000 per individual action, along with attorney’s fees if you win.⁹ You have one year from the violation to file. Class actions are also available, capped at $500,000 or one percent of the defendant’s net worth, whichever is less. The statutory damages provision means you can recover money even when your actual losses were small, which gives the law its practical bite.

1
Office of the Law Revision Counsel. 15 US Code 1693f – Error Resolution
2
Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors
3
Office of the Law Revision Counsel. 15 US Code 1693g – Consumer Liability
4
eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
5
Visa. Visa Zero Liability Policy
6
Mastercard. Mastercard Zero Liability Protection Policy
7
eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
8
Consumer Financial Protection Bureau. Submit a Complaint
9
Office of the Law Revision Counsel. 15 US Code 1693m – Civil Liability