An unauthorized transaction affidavit is the sworn written statement you give your bank declaring, under penalty of perjury, that specific charges or withdrawals on your account were not authorized by you. It is the document that turns a phone call about fraud into a formal dispute the bank must investigate, and it is usually what triggers your right to have the money credited back to your account. How much you can recover depends on how fast you file it and what kind of account was hit.
Call the Bank Before You Fill Out Anything
The paperwork comes second. The moment you spot a transaction you did not authorize, call your bank’s fraud line, which is printed on the back of your debit card or listed in the mobile app. Ask them to freeze the compromised card or account so no further charges can post while you sort things out.
After that initial phone report, the bank may require you to follow up in writing within ten business days. The written follow-up is typically the affidavit itself. If the bank asks for written confirmation and you do not provide it in time, the institution is not required to issue provisional credit while it investigates.1Consumer Financial Protection Bureau. Regulation E Electronic Fund Transfers – Section 1005.11 File a police report as well, especially for larger losses. A report number strengthens your claim and some banks treat it as near-mandatory above a certain dollar threshold.
What the Affidavit Covers
Banks use the same basic affidavit for several categories of fraud, though the underlying law differs.
Forged checks are one common trigger. When someone forges your signature to withdraw funds, the bank that paid the forged item generally bears the loss under the Uniform Commercial Code, because a check is only “properly payable” if it carries the drawer’s authorized signature. The affidavit is how you establish that the signature was not yours.
Electronic fraud is the other big category: unauthorized ACH transfers, fraudulent debit card charges (particularly online “card-not-present” transactions), and unauthorized bill payments. These fall under the Electronic Fund Transfer Act and Regulation E, which set the liability caps and investigation deadlines described below.2eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
One distinction matters when you fill out the form. A merchant charging the wrong amount or running a duplicate is a billing dispute, not fraud. Banks sometimes use the same affidavit form for both, but be accurate about which situation you have. Describing a merchant error as fraud can come back on you if the bank finds the transaction was legitimate but mishandled.
How Quickly You File Determines What You Lose
For debit cards and other electronic fund transfers, federal law creates a tiered liability system. The less time between when you learn about the fraud and when you tell your bank, the less money you can lose.
- Report within two business days: your maximum liability is $50, or the total unauthorized transfers before you gave notice, whichever is less.3Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- Report after two business days but within 60 days of the statement showing the fraud: your liability can climb to $500 for transfers the bank can show would have been prevented by earlier notice.3Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- Report after 60 days from that statement: you face potentially unlimited liability for unauthorized transfers occurring after the 60-day window closes and before you notify the bank.2eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
Your own carelessness does not change these caps. Even if you wrote your PIN on the back of your debit card, the bank cannot impose greater liability than the tiers above.4Consumer Financial Protection Bureau. Regulation E Electronic Fund Transfers – Section 1005.6 Liability is set by how fast you reported, not by how the thief got in.
What to Put on the Form
Before you start filling in blanks, pull at least two months of statements and list every disputed transaction. For each one you need the exact date, dollar amount, and merchant name as it appears on the statement. Fraudsters who test a stolen card number with a small charge before escalating are counting on you to miss the early transactions.
The form itself will ask for your full legal name, account and routing numbers, and a description of how the fraud occurred. You will usually choose from categories such as forged signature, unauthorized electronic withdrawal, or lost or stolen card. Be specific in the narrative: state whether your physical card was stolen, whether your information was compromised through a phishing email, or whether you have no idea how the thief obtained access. State clearly that you did not authorize the transaction and received no benefit from it. Include the police report number if you filed one.
Precision matters. If you describe the fraud as a stolen card but the bank’s logs show the chip was physically read at a local store on a date you were in town, that inconsistency will slow the claim down at minimum and can lead to denial. Leaving required fields blank causes similar problems.
Notarization
Many banks require the affidavit to be notarized, meaning you sign in front of a notary public who verifies your identity. Not every institution requires it, so ask before making a special trip. If notarization is required, most bank branches offer the service free to account holders.
Submitting It and Keeping Proof
Most banks now accept scanned affidavits uploaded through their secure online portals or apps, which is the fastest method. If you want legal proof of delivery, send the original by certified mail with return receipt requested. Certified mail gives you a mailing receipt, and the return receipt shows the recipient’s signature.5United States Postal Service. Certified Mail – The Basics Whichever route you take, keep a copy of the completed affidavit and screenshots or receipts of the submission. If a dispute later arises about when or whether you filed, that record is your proof.
What Happens After You File
Once the bank has your written notice of the error, Regulation E puts hard deadlines on the investigation. The bank must complete its review and decide whether an error occurred within ten business days. For accounts open less than 30 days, the bank gets 20 business days.1Consumer Financial Protection Bureau. Regulation E Electronic Fund Transfers – Section 1005.11
If the bank cannot finish in that first window, it can extend the investigation, but only if it provisionally credits your account for the disputed amount within those first ten business days. The bank can hold back up to $50 of that credit if it has a reasonable basis to believe an unauthorized transfer occurred. You must be told the amount and date of the provisional credit within two business days, and you get full use of the funds while the investigation runs.1Consumer Financial Protection Bureau. Regulation E Electronic Fund Transfers – Section 1005.11
If the bank finds the transaction was unauthorized, the provisional credit becomes permanent and the bank must correct the error within one business day. If the bank concludes no error occurred, it must notify you in writing, explain its findings, and give you five business days’ notice before pulling the provisional funds back.
If the Bank Denies Your Claim
Start by asking for the bank’s written explanation and the documents it relied on. You have the right to that information. Review it for errors or evidence the bank overlooked, and submit anything new that supports your case.
If the bank will not move, escalate. The Consumer Financial Protection Bureau accepts complaints at consumerfinance.gov/complaint or by phone at (855) 411-2372. The CFPB forwards your complaint to the bank, which generally must respond within 15 days.6Consumer Financial Protection Bureau. Submit a Complaint For FDIC-supervised banks, the FDIC’s Consumer Response Unit investigates complaints and typically responds within 60 days when it contacts the bank directly.7FDIC. Consumer Complaint Process Not every bank is FDIC-supervised; you can identify the correct regulator through the FDIC’s BankFind tool or by checking the back of your card.
Small claims court is another option for amounts under a few thousand dollars. Filing fees are modest and you do not need a lawyer to file or appear.
Business Accounts and Credit Cards Are Different
Two boundaries are worth knowing before you file.
Regulation E only protects “consumer” accounts established primarily for personal, family, or household purposes.8eCFR. Electronic Fund Transfers – Regulation E Business accounts are excluded, so there are no federally mandated liability caps, no required investigation timelines, and no obligation to issue provisional credit on a business account fraud claim. Whatever protection you have depends on your bank agreement.
Credit card disputes run on a separate track under the Fair Credit Billing Act, not Regulation E. Your liability for unauthorized credit card charges is capped at $50 with no escalating tiers, and drops to zero for any use after you report the card lost or stolen.9Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card Your written dispute must reach the card issuer within 60 days after the first statement showing the error.10Federal Trade Commission. Using Credit Cards and Disputing Charges Because credit card charges are the issuer’s money until you pay the bill, you are not out of pocket while the investigation runs.
Filing a False Affidavit Is a Federal Crime
Filing a fraudulent affidavit to claim money you actually spent is a serious offense. Making false statements to a financial institution carries a maximum penalty of 30 years in prison and a $1,000,000 fine.11Office of the Law Revision Counsel. 18 USC 1014 – Loan and Credit Applications Generally A separate bank fraud statute covers schemes to defraud a financial institution through false representations, with the same maximums.12Office of the Law Revision Counsel. 18 USC 1344 – Bank Fraud Banks have transaction analytics, merchant records, security footage, and device geolocation data. If you cannot remember whether a charge is really yours, check before you sign.