A disputed transaction is a formal challenge you file with your bank or card issuer over a charge that is unauthorized, incorrect, or tied to goods or services you never properly received. Federal law gives you the right to raise that challenge and caps how much you can lose, but the protections split sharply along three lines: credit cards get the strongest rules under the Fair Credit Billing Act, debit cards get a weaker set under Regulation E, and peer-to-peer payment apps sit in a gray zone where recovery often depends on the recipient. Deadlines are strict, documentation matters, and the wrong move on any of them can leave you holding the charge.
When You Can Dispute a Charge
Legitimate disputes fall into three groups. The clearest is outright fraud: someone used your card number or account credentials to make a purchase you never authorized. Because the charge was never yours, these are usually the fastest to resolve.
The second is a processing error. A merchant billed you twice, charged the wrong amount, or failed to credit a return you already sent back. Once the bank verifies the mistake in its records, the fix tends to be routine.
The third is the messiest: you authorized the charge, but the transaction went wrong. The product arrived broken, the service was never performed, or what you received didn’t match what you were promised. Banks and card networks generally expect you to try resolving the problem directly with the merchant first. For credit card disputes involving merchant problems, that good-faith attempt is not just courtesy; federal law builds it into the process.
Credit Card Rights Under the Fair Credit Billing Act
Credit card disputes get the strongest federal protection. The Fair Credit Billing Act caps your liability for unauthorized charges at $50, and most major issuers waive even that as a competitive perk. The ceiling applies no matter how large the fraudulent charges are.
To trigger the FCBA’s formal protections, send a written dispute notice to the billing error address printed on your statement. That address is not the same as the payment address. Your notice must arrive within 60 days after the statement containing the error was sent to you, and it needs your name, account number, the disputed amount, and why you believe it’s wrong.
Once the issuer receives your written notice, it has 30 days to acknowledge it in writing. It then has two complete billing cycles, and never more than 90 days, to investigate and either correct the error or explain in writing why it thinks the charge was correct.
During the investigation, the issuer cannot try to collect the disputed amount, report it as delinquent to credit bureaus, or threaten your credit standing over the dispute. If the issuer decides the charge was valid and you still disagree, it can later report the amount as delinquent, but it must also report that the amount is in dispute and tell you which credit agencies it notified.
Claims Against the Issuer for Merchant Problems
The FCBA gives you an additional tool when a credit card purchase goes bad. If the merchant sold you defective goods or failed to deliver, you can assert against your card issuer the same claims you could assert against the merchant. The issuer effectively inherits the merchant’s liability for the failed transaction.
There are conditions. You must have first made a good-faith attempt to resolve the dispute with the merchant. The transaction must exceed $50, and it must have occurred either in your home state or within 100 miles of your billing address. Those geographic and dollar limits are waived for purchases from the card issuer itself, its subsidiaries, or through a mail or internet solicitation the issuer participated in, which covers most online shopping.
Debit Card Rights Under Regulation E
Debit card and ACH disputes are governed by the Electronic Fund Transfer Act and its implementing rule, Regulation E. The protections are real but noticeably weaker than credit cards, and the timeline pressure on you is much higher.
Your liability for unauthorized debit transactions depends on how fast you report:
- Report within 2 business days of learning about the loss or theft, and your liability is capped at $50, or the amount of unauthorized transfers before you notified the bank, whichever is less.
- Report after 2 business days but within 60 days of the statement being sent, and your liability can rise to $500 for transfers the bank can show would have been prevented by earlier notice.
- Report after 60 days, and you face unlimited liability for unauthorized transfers appearing after that window that the bank establishes it could have stopped had you reported sooner.
That unlimited tier is the sharp difference between debit and credit. A stolen credit card number costs you $50 at most. A stolen debit card number you don’t catch for three months could drain your checking account with no obligation on the bank to reimburse you.
Investigation Windows and Provisional Credit
Once you report an error on your debit account, the bank must investigate promptly and reach a determination within 10 business days. If it needs more time, it can extend to 45 days, but only if it provisionally credits your account within those initial 10 business days. That provisional credit must include the full alleged error amount, minus up to $50 if the bank has a reasonable basis to believe the transfer was unauthorized and has met certain disclosure requirements. You get full access to the funds while the investigation continues.
The 45-day investigation window stretches to 90 days in three situations: the transfer originated outside the United States, it was a point-of-sale debit card transaction, or it occurred within 30 days of the first deposit to a new account.
When the investigation ends, the bank must report the result to you within three business days. If it finds no error occurred, it can reverse the provisional credit, but it must explain why and provide the documentation it relied on.
Peer-to-Peer Payment App Disputes
Zelle, Venmo, Cash App, and similar services fall under Regulation E when the transfer moves money to or from a consumer bank account, so the liability tiers and investigation timelines above apply in theory. The practical question is whether the transfer counts as “unauthorized.”
If someone hacks your account or steals your login credentials and sends money without your knowledge, that’s an unauthorized transfer, and the bank must treat it like any other debit fraud. The CFPB has specifically stated that transfers initiated by someone who obtained access to a consumer’s account through fraud qualify as unauthorized under Regulation E.
The harder case is when you sent the money yourself after being tricked by a scammer. If you authorized the transfer, even under false pretenses, most banks have treated it as outside Regulation E’s unauthorized-transfer protections. The CFPB has pushed back in enforcement actions, arguing that when a fraudster obtains a consumer’s access device through deception and initiates the transfer, the transfer is unauthorized regardless of the consumer’s involvement. That legal question is actively contested, and you should not count on your bank to reimburse a payment you initiated to a scammer. Treat P2P payments like cash: once they’re sent, getting the money back depends far more on the recipient’s cooperation than on your legal rights.
Recurring Charges and Cancelled Subscriptions
Charges that keep hitting after you thought you cancelled, or subscriptions you never knowingly agreed to, are a common dispute category. The Restore Online Shoppers’ Confidence Act requires any business using automatic renewal or negative-option billing online to clearly disclose all material terms before collecting your payment information, get your express informed consent before charging you, and provide a simple way to stop recurring charges. When a merchant fails any of those requirements, you have grounds to dispute. Save cancellation confirmations, emails, and chat transcripts; if the merchant made cancellation unreasonably difficult, that evidence strengthens your case with the bank.
How to File the Dispute
Before you call the bank, gather the transaction date, the merchant name as it appears on your statement, the exact dollar amount, and any evidence supporting your claim. For fraud, that may be as simple as confirming you didn’t make the purchase. For a merchant problem, collect order confirmations, tracking numbers, photos of defective items, and records of your attempts to resolve the issue with the seller, including dates, names, and copies of emails or chat logs.
Most banks let you start a dispute by phone, through online banking, or via the mobile app. For credit card billing errors specifically, a written notice sent to the issuer’s designated billing error address is what formally triggers the FCBA’s protections, including the 30-day acknowledgment and two-billing-cycle resolution requirements. If you dispute by phone or online, the bank will still investigate, but follow up in writing to ensure the full statutory protections apply.
For debit card disputes, Regulation E does not require written notice. An oral report starts the clock. Your bank may ask you to confirm it in writing within 10 business days, and if you don’t, the bank can withdraw any provisional credit it issued.
After you file, the bank will usually have you complete a formal dispute form documenting the specifics. Fill it out carefully and keep a copy. The bank then contacts the merchant’s payment processor and initiates the chargeback.
What Happens During and After the Investigation
A chargeback reverses funds from the merchant back to your account. For credit card disputes, the issuer cannot try to collect the disputed amount during the investigation. For debit disputes running past 10 business days, you’ll receive provisional credit while the investigation continues.
The merchant gets a chance to fight back. When notified of the chargeback, the merchant can submit a rebuttal through its payment processor, providing evidence like signed delivery receipts, proof of service, or records showing you agreed to the terms. The bank weighs that evidence against your original claim.
The investigation ends one of two ways. The bank finds in your favor and the credit becomes permanent, or it sides with the merchant and denies the dispute. For debit accounts, a denial reverses the provisional credit, and the funds come back out of your account. The bank must notify you of the outcome and the reasoning within three business days of finishing the investigation.
Credit reporting during the dispute cuts differently by product. The FCBA bars a credit card issuer from reporting the disputed amount as delinquent while the investigation is pending, and from taking collection action on the disputed portion. You still owe any undisputed charges on the same statement, and missing payments on those can hit your credit. Debit disputes don’t directly affect your credit score because checking accounts aren’t reported to credit bureaus the same way, but a reversed provisional credit that pushes your account negative can trigger overdraft fees or bounced checks.
If Your Dispute Is Denied
A denial isn’t necessarily the end. Review the bank’s explanation and the merchant’s evidence. If you have documentation that wasn’t part of your original claim, ask whether you can reopen the case or submit a supplemental response. Some card networks let the issuing bank escalate unresolved disputes into arbitration between the banks, which your issuer can initiate on your behalf if the evidence warrants.
If your bank won’t move, you can file a complaint with the Consumer Financial Protection Bureau. The CFPB forwards your complaint to the financial institution, which generally responds within 15 days. Describe the problem clearly, include key dates and amounts, and attach supporting documents up to 50 pages. Your complaint and the company’s response become part of the CFPB’s public database. A CFPB complaint doesn’t guarantee a different outcome, but it creates regulatory visibility that sometimes prompts a second look.
Filing a Dispute You Shouldn’t
Disputing a charge you actually authorized and received the benefit of is sometimes called “friendly fraud,” and it carries real consequences. Banks track dispute patterns, and a history of questionable chargebacks can lead to account closure. Merchants can contest illegitimate chargebacks, and if the bank sides with the merchant, you’re back where you started with the charge on your account plus potential fees.
In serious cases, filing a false chargeback can be prosecuted as theft, credit card fraud, wire fraud, or bank fraud depending on the circumstances. There’s no dedicated federal statute for chargeback fraud, but existing fraud and theft laws cover the conduct. File only when you genuinely believe the charge is unauthorized, incorrect, or tied to a merchant who failed to deliver what was promised.