Reg E Dispute Flowchart: Deadlines, Investigation, and Liability

The Regulation E dispute process gives you a fixed sequence for challenging an electronic fund transfer you believe is wrong: you notify your bank within 60 days of the statement date, the bank investigates within 10 business days, and you end up with either a permanent correction or a written explanation of why the bank disagreed. If the investigation runs long, the bank must put a provisional credit in your account so you have the money while it keeps working.¹ Every step carries a deadline, and yours matter as much as the bank’s.

The 60-Day Deadline to Notify Your Bank

You have 60 days from the date your bank sends the periodic statement showing the error. The clock starts when the bank transmits the statement, not when you open the envelope or spot the charge.² Missing that window doesn’t necessarily erase all protection, but for unauthorized transfers it can expose you to unlimited losses.

Notice can be oral or written. A phone call, a visit to the branch, a secure message through your online portal, or a letter all count. If you call, the bank can require a written follow-up within 10 business days; skip that and the bank may withhold provisional credit while it investigates.¹ Send written notices through a method that creates a delivery record.

Your notice needs to give the bank enough to identify what you’re disputing: your name, your account number, why you believe an error exists, and the type, date, and amount to the extent you can supply them. The notice is still effective without the account number if the bank can figure out which account you mean. A dispute that’s too vague for the bank to locate the transaction may not start the investigation clock at all.

One point people miss: business days under Regulation E are the days your bank’s offices are open to the public for substantially all functions, which varies by institution.³ Check your bank’s posted hours rather than assuming a standard weekday count.

What Counts as an Error

Regulation E covers more than unauthorized charges. The bank must investigate if you report:

An unauthorized transfer from your account.
An incorrect amount, such as a $150 charge that should have been $15, or a double debit.
A missing transfer, such as a deposit or payment absent from your statement.
A math or bookkeeping mistake tied to an electronic transfer.
An ATM that dispensed less cash than the receipt shows.
A request for documentation to figure out whether an error happened.

That last one matters. You don’t have to be certain something is wrong before filing. Asking your bank for records to sort out a confusing transaction is itself a protected dispute and triggers the same response obligations.¹

Coverage runs to most everyday electronic movement: debit card purchases, ATM withdrawals, direct deposits, ACH bill pay, and transfers set up by phone.⁴ Peer-to-peer payments qualify too. The CFPB has confirmed that a P2P transfer meeting the definition of an electronic fund transfer is covered, and if a scammer moves money out of your account through a P2P service without your permission, that transfer is unauthorized regardless of whether you have a direct relationship with the provider.⁵

Some things sit outside Regulation E: wire transfers through Fedwire and similar bank-to-bank systems, checks processed through the check collection system, cash payments at an electronic terminal, and preauthorized checks the bank draws on your account.⁶ Business accounts are also excluded, even at the same bank with the same debit card. Regulation E only protects accounts held for personal, family, or household purposes.⁵

The Bank’s Investigation Timeline

Once your notice reaches the bank, the timeline is rigid. The bank has 10 business days to investigate and report back. If it needs more time, it can extend the investigation to 45 calendar days, but only if it deposits a provisional credit into your account within those first 10 business days for the full disputed amount plus any interest that would have accrued.¹ You get full use of that money while the investigation continues.⁷

Three situations stretch the maximum window from 45 days to 90 days:

Transfers not initiated within the United States.
Point-of-sale debit card transactions.
Errors on brand-new accounts, meaning within 30 days after the first deposit.

The same provisional-credit requirement carries through the 90-day window.⁸ The point-of-sale category catches people off guard because ordinary debit card purchases at merchants are among the most disputed transactions, and they qualify for the longer investigation.

Correction or Denial

The bank must tell you the results within three business days of finishing its investigation.¹

If the bank confirms an error, it must correct it within one business day of that finding. Any provisional credit becomes permanent. If none was issued because the bank resolved the dispute inside the first 10 business days, it credits your account directly.

If the bank concludes no error occurred, or that the error was different from what you described, it must send you a written explanation and tell you that you can request copies of the documents it relied on. The bank must supply those documents promptly if you ask.⁸ When the bank reverses a provisional credit, it must notify you of the date and amount being debited, and for five business days after that notification it must honor checks and preauthorized payments without charging overdraft fees, at least to the extent those items would have been paid had the credit still been there. That buffer gives you time to move funds or adjust scheduled payments.

Your Liability Depends on How Fast You Report

For unauthorized transfers involving a lost or stolen debit card or other access device, your maximum liability is tied directly to how quickly you notify the bank:

Report within 2 business days of learning about the loss or theft: your liability is capped at $50, or the amount of unauthorized transfers before you notified the bank, whichever is less.
Report after 2 business days but within 60 days of the statement: liability climbs to a maximum of $500, covering unauthorized transfers that happened after the two-day window but before you gave notice, on top of the initial tier.
Report after 60 days: you can be liable for the full amount of any unauthorized transfers occurring after the 60-day period ends, with no cap.

These tiers apply when the transfer involved an accepted access device and the bank gave you a way to identify yourself to the system.² The gap between calling on day one and calling on day three can be $450. Report the moment you notice.

If the Bank Denies Your Dispute or Misses a Deadline

A denial isn’t the end. Start by requesting the documents the bank used in its investigation. The explanation sometimes shows that the bank looked at the wrong transaction, applied the wrong standard, or overlooked evidence you can provide. If you framed the dispute one way and the bank treated it another, pointing that out with documentation can reopen the review.

You can reassert the same error if you withdrew your original claim before the bank finished investigating, provided you’re still within the 60-day window.⁸ Once the bank has completed an investigation and followed the resolution procedures, though, it has no duty to reinvestigate the same claim.

If you think the bank skipped a required step, missed a deadline, failed to issue provisional credit, or never sent the written explanation, file a complaint with the Consumer Financial Protection Bureau online at consumerfinance.gov/complaint or by phone at (855) 411-2372. The CFPB forwards the complaint to the company and generally sees a response within 15 days.⁹

You can also sue. Under the Electronic Fund Transfer Act, a bank that violates the rules is liable for your actual damages plus statutory damages between $100 and $1,000 per individual action, and a successful plaintiff recovers attorney’s fees and costs.¹⁰ The fee-shifting provision is what makes smaller disputes worth litigating: if you win, the bank pays your lawyer.

1
Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors
2
Consumer Financial Protection Bureau. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
3
eCFR. 12 CFR 1005.2 – Definitions
4
National Credit Union Administration. Electronic Fund Transfer Act (Regulation E)
5
Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
6
Consumer Financial Protection Bureau. 12 CFR 1005.3 – Coverage
7
Office of the Law Revision Counsel. 15 USC 1693f – Determination of Error
8
eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
9
Consumer Financial Protection Bureau. Submit a Complaint
10
Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability