How to Dispute Unauthorized Debit Card Charges
Educational disclaimer: This article is for general educational purposes only and is not personalized financial, legal, or banking advice. Regulation E liability limits, error-resolution timelines, and bank dispute procedures depend on facts and change. Verify current rules with your bank or credit union disclosures and primary sources such as the CFPB, FTC, FDIC, and NCUA. FitCreeper focuses on U.S. readers unless otherwise noted. Nothing here invents refund outcomes or guarantees reimbursement.
How to Dispute Unauthorized Debit Card Charges
By Ahmad Dogar
FitCreeper Finance · Educational only — not personalized financial advice
How this article was made: Drafted with AI assistance, then checked against primary sources (CFPB Regulation E §§1005.6 and 1005.11; CFPB Ask CFPB unauthorized-transaction money-back guidance; FTC Lost or Stolen Credit, ATM, and Debit Cards; FTC ATM/gas-pump skimming consumer alerts). Liability and dispute timelines are fact-specific—re-check CFPB.gov, FTC.gov, and your account disclosures before you rely on them.
Searching dispute unauthorized debit card charges means you want the error-resolution playbook. CFPB Ask CFPB guidance on getting money back after an unauthorized transaction, together with Regulation E §1005.11, frames what happens after you notify your bank or credit union.
Figure: Disputing unauthorized debit charges
Notify the institution the right way
Tell your bank or credit union the transaction was unauthorized. Provide date, amount, and enough account detail to identify the transfer. Use phone and then written/portal confirmation. Notice timing can affect both liability under §1005.6 and error-resolution rights under §1005.11.
CFPB summaries commonly state you generally should report within 60 days after the statement showing the transfer is sent. Do not aim for day 59—report as soon as you discover the problem.
Figure: How to notify for a dispute
Investigation clocks beginners hear about
CFPB Ask CFPB money-back guidance explains that once notified, the institution generally has ten business days to investigate (20 if the account is very new). It must correct an error within one business day after determining an error occurred, then generally has three business days to report findings. You can request the information used to decide.
If the institution needs more time, it generally must provide provisional (temporary) credit for the disputed amount minus up to $50 while investigating. Outer resolution windows are often summarized as 45 days, or up to 90 days for certain foreign, new-account, or point-of-sale debit situations.
If the institution concludes the transfers were authorized, it must provide written notice before removing provisional credit.
Figure: Investigation timeline basics
What to include in a written dispute
- Your name and account identifiers
- Why you believe the transfer is an error/unauthorized
- Dollar amount and date
- Date you discovered it
- Date/time of any prior phone notice
- Supporting facts (card never lost, travel alibi, etc.)
Living on provisional credit
Provisional credit is temporary. Avoid spending every dollar of a provisional credit as if the investigation were finished. Keep records in case the institution reverses the credit after finding the transfer authorized.
Figure: Understanding provisional credit
Special fact patterns
CFPB Ask CFPB states that if you gave a friend your debit card and they took more than agreed, the bank generally does not have to refund those transfers because you authorized the friend—until you notify that the friend is no longer authorized.
If a telemarketer debited your checking account without agreement, CFPB says contact the institution immediately, say you never authorized the payment, and ask for a reverse. ACH-processed checks can have additional protections; FTC Telemarketing Sales Rule authorization rules may also matter.
Parallel FTC steps
Follow FTC lost-or-stolen guidance for written follow-up. If identity theft is broader than one debit, use IdentityTheft.gov. Report scam patterns at ReportFraud.ftc.gov.
Figure: Parallel FTC and identity steps
Everyday example: three small unauthorized groceries
You spot three $40–$60 grocery debits you did not make. Report all related transfers as a series, request card reissue, ask about provisional credit, and review whether a skimmer could have captured your card at a prior stop.
Myths
- Myth: “I must dispute with the store before the bank.” For unauthorized EFTs, notify the institution promptly.
- Myth: “Provisional credit is final.” It can be reversed with notice if the bank finds no error.
- Myth: “Email to a random teller counts.” Use the official error-notice channel in your disclosure.
Dispute checklist
- Notify via official phone/app immediately
- Send written/portal error notice with facts
- Ask about provisional credit and deadlines
- Replace card; update recurring payments
- Save all bank letters and dates
- Request investigation documents if denied
- Escalate via CFPB complaint only after you understand the bank’s written reason
- Add IdentityTheft.gov if identity misuse appears
If your dispute is denied
Ask for the written explanation and the documents the bank relied on. Compare the reason to Regulation E definitions of unauthorized EFT. If you furnished the card to someone, denial may align with CFPB Ask CFPB friend-card guidance. If facts support unauthorized use and timing was prompt, you may evaluate CFPB complaint options after you have the bank’s written position.
Stay organized: denials that cite late notice should be checked against your discovery date and statement date evidence.
Staying disciplined with primary sources
For electronic fund transfers, prefer CFPB Regulation E pages (§§1005.6 and 1005.11), CFPB Ask CFPB unauthorized-transaction guidance, CFPB EFT FAQs, and FTC Lost or Stolen Credit, ATM, and Debit Cards. Bank blog posts can help with app screenshots but should not override federal timing rules in your disclosure.
When a call-center script conflicts with your written Reg E disclosure, ask for the error-resolution address in writing and follow the disclosure. Save names, times, and reference numbers.
Re-read disclosures after product changes—new debit cards, digital wallets, or joint owners can change how you report and who can authorize transfers.
Alerts and monitoring that buy you time
Instant transaction alerts shrink the gap between fraud and discovery—the exact gap Regulation E liability tiers care about. Set low thresholds for ATM withdrawals and foreign POS. Review alerts the same day; do not silence them because they feel noisy.
Weekly, skim pending and posted debit transactions. Monthly, reconcile against receipts for recurring merchants. If a merchant name looks slightly off (one-letter typos), investigate before the 60-day statement window becomes relevant.
How this topic connects to identity theft literacy
A single unauthorized debit can be isolated card fraud—or the first breadcrumb of broader identity theft. If you also see new credit inquiries, utility accounts, or IRS letters, add IdentityTheft.gov and credit freezes to the same week’s work plan.
FitCreeper’s live guides on reading bank statements, online banking safety, debit vs credit, and unauthorized ACH disputes complement Regulation E literacy with operational habits.
Re-checking sources after a dispute with primary sources
For electronic fund transfers, prefer CFPB Regulation E pages (§§1005.6 and 1005.11), CFPB Ask CFPB unauthorized-transaction guidance, CFPB EFT FAQs, and FTC Lost or Stolen Credit, ATM, and Debit Cards. Bank blog posts can help with app screenshots but should not override federal timing rules in your disclosure.
When a call-center script conflicts with your written Reg E disclosure, ask for the error-resolution address in writing and follow the disclosure. Save names, times, and reference numbers.
Re-read disclosures after product changes—new debit cards, digital wallets, or joint owners can change how you report and who can authorize transfers.
More alert hygiene after fraud
Instant transaction alerts shrink the gap between fraud and discovery—the exact gap Regulation E liability tiers care about. Set low thresholds for ATM withdrawals and foreign POS. Review alerts the same day; do not silence them because they feel noisy.
Weekly, skim pending and posted debit transactions. Monthly, reconcile against receipts for recurring merchants. If a merchant name looks slightly off (one-letter typos), investigate before the 60-day statement window becomes relevant.
After-action review with identity-theft tools
A single unauthorized debit can be isolated card fraud—or the first breadcrumb of broader identity theft. If you also see new credit inquiries, utility accounts, or IRS letters, add IdentityTheft.gov and credit freezes to the same week’s work plan.
FitCreeper’s live guides on reading bank statements, online banking safety, debit vs credit, and unauthorized ACH disputes complement Regulation E literacy with operational habits.
Practice drill
Download or request your Reg E error-resolution disclosure. Draft a one-page unauthorized-EFT notice template with blanks for date, amount, merchant, and discovery date. Store it with your banking records.
If you have an old denied dispute letter, compare its reasons to CFPB unauthorized definitions—learning from past paperwork sharpens future notices.
Merchant conversations vs bank disputes
You can ask a merchant what a charge is for, but do not delay bank notice while waiting on a store manager. Unauthorized EFT clocks care about notice to the financial institution. Parallel conversations are fine; sequential delay is not.
Stronger written notice habits
Lead with “I am notifying you of an error / unauthorized electronic fund transfer under my account’s Regulation E procedures.” List each transaction date, amount, and merchant name exactly as shown. State that you did not authorize the transfers and received no benefit from them. Include the date/time of your prior phone notice.
Avoid speculation about named suspects unless you have facts. Avoid admitting you “might have” authorized something if you did not. Keep tone factual. Send to the error-resolution address in your disclosure and keep proof of delivery or portal confirmation.
If multiple small charges look related, list them as a series so investigators see the pattern. Ask the institution to confirm receipt and to state whether provisional credit will be applied.
After provisional credit posts
Update your budget so you do not depend on temporary funds. If the bank later reverses provisional credit, you want cash-flow room. Keep shopping receipts for the week of the dispute in case you need to prove where you actually were.
Related Guides
- How to Dispute Unauthorized ACH Debits
- How to Read a Bank Statement for Beginners
- What Is a Checking Account? Beginner Guide
- P2P Payment Scams: How to Spot and Avoid
Bottom Line
Dispute unauthorized debit charges with prompt official notice, a clear written error description, awareness of investigation and provisional-credit clocks, and careful records—anchored to CFPB Regulation E and Ask CFPB guidance.
FAQ
How long does my bank have to investigate?
CFPB Ask CFPB guidance commonly describes about ten business days to investigate after notice (longer for some new accounts), with provisional credit if more time is needed, and longer outer limits in some cases.
What is provisional credit?
Temporary credit while the institution investigates. It can be removed with written notice if the institution finds the transfer was authorized.
What if I let a friend use my card?
CFPB Ask CFPB says the institution generally does not have to refund transfers your friend made with authority you gave—until you notify that the friend is no longer authorized.
Do I have to dispute within 60 days?
For many unauthorized EFTs appearing on a statement, timely notice within 60 days after the statement is sent is a critical consumer protection window—report sooner whenever possible.
Can I get the documents the bank used?
CFPB summaries note you can request information the institution used to decide; it should send materials promptly.
What if the bank says the charge was authorized?
Read the written explanation carefully, compare facts to unauthorized-EFT definitions, and consider next steps only after you have the written reason.
Should I also file a police report?
It can help documentation for theft/skimming cases, but it does not replace notice to your financial institution.
Where is the legal error-resolution section?
Regulation E §1005.11 on consumerfinance.gov.
Figure: Unauthorized debit dispute myths
Figure: Unauthorized debit dispute letter template