You scroll through your checking account on a Tuesday morning and there it is — a charge you do not recognize. Maybe it is $12.99 from a streaming service you never signed up for, or maybe it is $387 from a hotel two states away. Either way, your stomach drops, because that is real money leaving your account, and unlike a credit card charge, it is gone until you fight to get it back. The good news is that federal law is firmly on your side, the process is more straightforward than most people realize, and if you move quickly you can usually recover every cent. The bad news is that most people wait too long, fumble the paperwork, or simply never report the charge at all, and the bank keeps the money by default. Here is how to do it right.
Know the Law That Protects You
The protection that matters here is called Regulation E, and it is enforced by the Consumer Financial Protection Bureau under the Electronic Fund Transfer Act. Regulation E is what forces your bank to investigate unauthorized charges and refund the money when the claim holds up. Your maximum liability depends almost entirely on how fast you report the problem. If you notify your bank within two business days of discovering an unauthorized transaction, the law caps your loss at $50 or the amount stolen, whichever is smaller. Wait longer than two business days but report within 60 days of the statement that shows the charge, and you could be on the hook for up to $500. Sit on it past that 60-day window, and the bank can legally refuse to refund anything that happened after day 60. The CFPB explains this clearly on its consumer page, and the takeaway is simple: speed is everything.
Unauthorized Charge vs. Merchant Dispute — They Are Not the Same
A lot of people get tripped up here, so it is worth slowing down. There are two completely different problems that get lumped together as “disputing a charge,” and your bank handles them differently. An unauthorized charge is one you did not make and did not approve — somebody got your card number, a recurring subscription kept billing after you canceled, or a fraudster ran a transaction. That is pure Regulation E territory and your protections are strong. A merchant dispute is when you did make the purchase but something went wrong — the item never arrived, it was defective, or the service was not what was advertised. With a credit card, federal law (the Fair Credit Billing Act) gives you robust dispute rights. With a debit card, those merchant-dispute rights are weaker and largely depend on your card network’s voluntary chargeback rules through Visa or Mastercard. You can still try, and you often win, but the bank is not legally required to make you whole the way it is for unauthorized charges. This is one of the main reasons financial experts recommend using credit cards for online and large purchases when possible.
Step One: Call Your Bank Immediately
The single most important thing you can do is pick up the phone the moment you spot the charge. Use the customer service number on the back of your card, not a number you Google, because phishing scams thrive on people searching for bank numbers in a panic. When you call, freeze the card if there is any chance the number is compromised, and ask the representative to open a formal dispute on the transaction. Get a case number and write it down. Many banks now let you start a dispute inside the mobile app with a tap, which creates a digital paper trail automatically — that is fine, but follow up with a phone call so a human is aware. If the unauthorized charge is on a recurring subscription, the CFPB has specifically warned companies that they need explicit consumer authorization for recurring auto-debits, and your bank should treat that the same as any other unauthorized debit.
Step Two: Put It in Writing Within Ten Business Days
This is where people lose. A phone call alone is not enough under Regulation E — your bank can require you to follow up with a signed written or electronic statement within 10 business days of your initial notice. If you do not, the bank can extend its investigation timeline and may not be obligated to provisionally credit your account while it digs in. Send a short letter (or fill out the bank’s electronic form) that lists the date, the merchant name, the amount, and a one-sentence statement saying the charge was not authorized. Keep a copy. If the bank gives you the option to upload through the mobile app, do that and screenshot the confirmation. The 10-business-day window matters because if you meet it, the bank generally has to provisionally credit your account within 10 business days while it completes its investigation, and that money is yours to use during the review.
Step Three: Watch the Investigation Clock
Once your dispute is filed, the bank has a specific window to resolve it. For most domestic transactions, the bank gets 10 business days to investigate, extendable to 45 calendar days if it provisionally credits your account. For new accounts (open less than 30 days), POS transactions, or transactions outside the U.S., the bank gets up to 90 calendar days. If the bank decides the charge was unauthorized, the credit becomes permanent and you keep the money. If it decides the charge was legitimate, it has to send you a written explanation and you have the right to request the documents it relied on. Do not just accept a denial — ask for the evidence, and if the explanation does not hold up, you can escalate.
Step Four: Escalate If Your Bank Stalls
Banks are not always cooperative, especially for amounts in the gray zone of a few hundred dollars where it costs them more to investigate than to deny. If your bank stonewalls you, submit a complaint to the CFPB online or call (855) 411-CFPB. The CFPB forwards complaints directly to the bank and tracks the response, and banks take these complaints seriously because they show up in regulatory exams. You can also file a complaint with your state attorney general’s office. In our experience and that of consumer advocates, a CFPB complaint resolves more disputes than any other escalation step short of small claims court.
How to Avoid Needing to Do This in the First Place
The cheapest dispute is the one you never have to file. Turn on real-time transaction alerts in your bank app for every debit card transaction over $1, which means you will see fraud the same minute it happens instead of three weeks later. Review your statements monthly even if your alerts are on, because subscription creep and small recurring debits hide easily. Use a credit card for online and travel purchases when you can, since the consumer protections are stronger and you are not letting a thief reach into your actual checking balance. Keep a small “buffer” balance in your checking — a few hundred dollars beyond your normal float — so a fraudulent charge cannot trigger overdraft fees while you wait for the dispute to clear. And when something does go wrong, do not wait. The 48-hour rule is the difference between losing $50 and losing $500.
The bottom line is that the system is designed to make you whole, but it is not automatic. The bank is not going to call you when something looks off. The protection only kicks in when you act, and it diminishes by the day. Treat your debit card statements like a paycheck — check them, and when something is wrong, file the paperwork the same day. The money is yours. Go get it.
