How to Dispute a Debit Card Charge: Deadlines and Bank Duties

To dispute a debit card charge, contact the merchant first, and if that doesn’t fix it, notify your bank of the error either by phone, through its app, or in writing. Move quickly: federal law caps how much you can lose only if you report within specific windows, and the strongest protection expires two business days after you learn about the problem.

Report Fast, Because the Deadline Controls Your Loss

The Electronic Fund Transfer Act and Regulation E tie your maximum liability for unauthorized debit card transactions directly to how quickly you contact your bank. The clock starts when you learn your card was lost or stolen, or when a statement arrives showing a charge you didn’t make.

Within 2 business days of learning about the problem: your liability tops out at $50, or the actual unauthorized amount if it’s less.
After 2 business days but within 60 days of the statement: your liability can climb to $500.
After 60 days from when the statement was sent: you can be on the hook for the full amount of any unauthorized transfers that happen after that 60-day window, with no cap.

That third tier is the one that catches people off guard. If someone drains your checking account and you don’t notice for more than 60 days after the statement was mailed, the bank has no obligation to cover the losses that occurred after that deadline passed.¹ The same 60-day window applies to disputing errors that aren’t outright fraud, like a duplicate charge, a wrong amount, or a bank computational mistake. Notify the bank within 60 days of the statement that first reflected the error, or the bank may have no obligation to investigate.²

Try the Merchant First

Banks generally expect you to attempt resolution directly with the merchant before filing a formal dispute. This isn’t just a formality. Merchants can often reverse a charge on the spot, which is faster than waiting weeks for a bank investigation. A quick call to a store’s customer service line or a message through an online retailer’s support portal may get you a refund without paperwork.

If the merchant agrees to a refund, get a confirmation number or cancellation receipt. Debit card refunds typically take a few business days to appear in your account. If a week passes without the credit showing up, that confirmation number becomes evidence for the next step. Keep a record of who you spoke with and when, because the bank will want those details if you end up filing a dispute.

What to Include When You Notify Your Bank

Regulation E requires your dispute notice to include enough information for the bank to identify your account and understand the alleged error. You need to provide your name, account number, why you believe an error occurred, and, to the extent you can, the type, date, and amount of the error.² Including the merchant name as it appears on your statement and the transaction ID helps the bank trace the funds, though the regulation doesn’t strictly require it.

Supporting evidence strengthens your case. Digital receipts, screenshots of order confirmations, photographs of damaged goods, or email threads with the merchant all help the bank understand what happened. If you already contacted the merchant, note the date and the name of the person you spoke with. Most banks provide a dispute form through their mobile app or online banking portal that walks you through categorizing the error, whether it was a duplicate charge, an incorrect amount, or a completely unauthorized transaction.

Not sure yet whether a charge is wrong? You can also submit a notice simply to request additional information or clarification about a transfer.² That’s useful when a vague merchant name appears on your statement and you need the bank to help you figure out what the charge was before deciding to dispute it.

How to Submit the Dispute

You can notify your bank either orally or in writing. Both count under Regulation E, and the clock on the bank’s investigation starts the moment the notice is received.²

Phone: call the customer service number on the back of your card. This is the fastest way to start the process and establishes the date of your notice.
Online or mobile app: most banks let you select the transaction and follow a guided dispute workflow. The digital submission creates its own paper trail.
Mail: sending a letter to the dispute address on your statement gives you a documented record. Use certified mail if you want proof of delivery.

After you submit, the bank should provide a case number or reference code. Save it along with any confirmation email or secure message. That timestamp marks the start of the bank’s legally mandated investigation window.

One trap catches many people who report by phone: your bank can require written confirmation within 10 business days. The bank must tell you about this requirement during the call and provide the address where to send it.³ If the bank asks for written follow-up and you don’t provide it within those 10 business days, the bank is not required to give you provisional credit while it investigates. Ask explicitly on the call whether written confirmation is required and where to send it.

What the Bank Has to Do Next

Once the bank receives your notice, it generally has 10 business days to investigate and determine whether an error occurred. If it needs more time, it can extend the investigation to 45 days, but only by first depositing a provisional credit for the disputed amount (including any applicable interest) into your account. That provisional credit must appear within the initial 10-business-day window.²

Two situations stretch these timelines. For new accounts where the disputed transfer happened within 30 days of the first deposit, the bank gets 20 business days instead of 10 to provide provisional credit, and 90 days instead of 45 to finish investigating. The same 90-day extension applies to point-of-sale debit card transactions and transfers that crossed international borders.²

For unauthorized transfer disputes specifically, the bank may withhold up to $50 from the provisional credit amount if it has a reasonable basis for believing an unauthorized transfer actually occurred and it has complied with its disclosure obligations.⁴

After the investigation ends, the bank must report the results to you within three business days. If the error is confirmed, the provisional credit becomes permanent. If the bank concludes no error occurred, it must provide a written explanation and tell you when the provisional credit will be removed from your account.²

If the Bank Denies Your Dispute

A denial isn’t necessarily the end. You have the right to request copies of the documents the bank relied on to reach its decision, and the bank must promptly provide them.³ Reviewing those documents sometimes reveals that the bank misunderstood the transaction or overlooked evidence you provided. If that’s the case, resubmit with the additional information.

If you believe the bank handled your dispute improperly, you can file a complaint with the Consumer Financial Protection Bureau. The CFPB forwards your complaint to the bank, which generally responds within 15 days (or up to 60 days for complex issues). The CFPB then gives you 60 days to review the bank’s response and provide feedback.⁵ You can submit online or call (855) 411-2372 during business hours.

For smaller amounts, small claims court is another option. Filing fees vary widely by jurisdiction but are generally modest enough that they won’t exceed the disputed amount for most debit card charges. You wouldn’t need a lawyer, and the process is designed for exactly this kind of consumer dispute.

Stopping a Recurring Charge

If a merchant keeps charging your debit card after you’ve canceled a subscription or service, you don’t have to keep disputing individual transactions. Federal law lets you place a stop-payment order on recurring debit charges. Notify your bank at least three business days before the next scheduled payment. The notice can be oral or written.⁶

Two catches. If you stop the payment by phone, the bank can require written confirmation within 14 days, and the oral stop-payment order expires without it. And stop-payment orders on recurring transactions generally last only six months, so you may need to renew them if the merchant keeps attempting charges. The cleaner fix is to also contact the merchant directly, cancel the underlying authorization, and get written confirmation.

Charges You Sent Yourself Aren’t Covered

This distinction catches a lot of scam victims by surprise. Regulation E protects you against transfers someone else initiated without your permission. It does not protect you when you voluntarily sent the money yourself, even if you were tricked into doing it.⁷

If someone impersonated a government agency or a company and convinced you to send them a payment, that payment is technically “authorized” under the law because you initiated it. Deceptive authorization doesn’t automatically make it an unauthorized transfer under Regulation E. Your bank may still investigate and refund the money as a courtesy, but it has no legal obligation to do so.

Visa and Mastercard Zero-Liability Policies

Beyond federal law, Visa and Mastercard both offer zero-liability policies that may provide broader protection than Regulation E alone. Visa’s policy covers unauthorized charges on both credit and debit cards, whether the transaction happened online or in person.⁸ Mastercard’s version similarly covers unauthorized transactions at stores, over the phone, online, through mobile devices, and at ATMs, as long as you used reasonable care in protecting your card and reported the loss promptly.⁹

Both policies exclude commercial cards and unregistered prepaid cards like gift cards. These are voluntary protections from the card networks, not federal requirements, so enforcement runs through your bank’s agreement with the network rather than through a government agency. In practice, these policies often mean your actual loss from unauthorized charges is zero rather than the $50 federal law allows. If your bank tries to hold you liable for unauthorized charges on a Visa or Mastercard debit card, cite the network’s zero-liability policy in addition to your Regulation E rights.

1
eCFR. 12 CFR 1005.6 Liability of Consumer for Unauthorized Transfers
2
Consumer Financial Protection Bureau. Regulation E – 1005.11 Procedures for Resolving Errors
3
eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
4
eCFR. 12 CFR 1005.11 Procedures for Resolving Errors
5
Consumer Financial Protection Bureau. Learn How the Complaint Process Works
6
HelpWithMyBank.gov. Why Won’t the Bank Stop Automatic Withdrawals
7
FDIC. Laws and Regulations EFTA
8
Visa. Visa Zero Liability Policy
9
Mastercard. Mastercard Zero Liability Protection Policy