Report an unauthorized transaction immediately — liability rises the longer you wait. Report within 2 business days: liability capped at $50. Within 60 days of your statement: up to $500. After 60 days: potentially unlimited. Steps: (1) verify it's really unauthorized (check for forgotten subscriptions first); (2) call your bank right away; (3) freeze or cancel the card; (4) file a formal written dispute; (5) monitor your account during the investigation (up to 10 business days). Debit cards (EFTA) have weaker legal protections than credit cards (FCBA) — consider using credit for online/unfamiliar purchases.
The Liability Clock: Why Speed Matters
How fast you report changes your liability
These tiers come from the federal Electronic Fund Transfer Act (EFTA), which governs debit card and bank account transactions. Because the liability is tied to when you report — not just when the fraud happened — the single most protective thing you can do is contact your bank the moment something looks wrong, rather than waiting to see if more charges appear.
Debit Card vs. Credit Card Disputes
Debit card / bank account
Governed by the EFTA. Tiered liability ($50 → $500 → unlimited based on reporting speed). Money is pulled directly from your account immediately, which can cause real cash-flow problems while a dispute is investigated.
Credit card
Governed by the Fair Credit Billing Act (FCBA). Liability capped at $50 regardless of timing, and most major issuers voluntarily offer zero-liability policies. A disputed charge isn't required to be paid during investigation — it never touches your available cash.
Why this matters practically: Many financial experts recommend using a credit card rather than a debit card for online purchases and unfamiliar merchants specifically because of this stronger, faster protection — a fraudulent debit charge can leave you short on cash for days while it's investigated; a disputed credit card charge doesn't.
How to Dispute: Step by Step
Verify the charge is actually unauthorized
Before assuming fraud, check for forgotten subscriptions, a purchase by a family member or authorized user, or an unfamiliar merchant billing name (many businesses bill under a name different from their storefront). This saves time and avoids an unnecessary card freeze.
Contact your bank immediately
Call the number on the back of your card or use your banking app the moment you notice the charge. Liability protections are directly tied to how quickly you act.
Freeze or cancel the affected card
Freeze if you're unsure of the cause and want to pause activity while you investigate. Cancel and replace if you're confident the card was compromised (stolen, hacked, or skimmed).
File a formal written dispute
Follow up your call with a written dispute — include your account number, the transaction date, and exactly when you noticed and reported it. This creates the paper trail that protects you if anything is contested later.
Monitor your account during the investigation
Keep checking for additional suspicious activity and report anything new right away. Banks generally must complete an initial investigation within 10 business days (up to 45 in some cases), and must provisionally credit your account if it takes longer than that.
What Happens After You Report
Your bank investigates, often asking you to complete a written statement describing what happened. If the investigation confirms the charge was unauthorized, any provisional credit becomes permanent — you keep your money. If the bank decides the charge was actually valid (a forgotten subscription, a purchase by someone with account access), the credit is reversed and you're responsible for it. If you disagree with the outcome, you can request the documentation behind their decision and escalate to the CFPB if needed.
Protecting Your Account Going Forward
Habits that reduce risk and speed up detection
- Turn on transaction alerts — get notified the moment a charge posts
- Check activity weekly, not just when the monthly statement arrives
- Use unique passwords + two-factor authentication for online banking
- Use a credit card for online/unfamiliar purchases instead of debit
- Watch for small "test" charges — fraudsters sometimes confirm a stolen number works with a tiny transaction before a bigger one
Watch out for fake "bank security" calls. Scammers sometimes call pretending to be your bank's fraud department, referencing a made-up unauthorized charge to get you to "verify" your card number, PIN, or one-time codes. Your real bank will never ask for your full card number or PIN over the phone. If in doubt, hang up and call the number on the back of your card directly.
The bottom line: An unauthorized bank transaction is stressful, but the law is genuinely on your side — as long as you move fast. Verify it's really fraud, call your bank immediately, freeze or cancel the card, put your dispute in writing, and keep watching your account while it's investigated. The single biggest factor in how well this turns out is speed: report within 2 days and your exposure is capped at $50; wait past 60 days and that protection disappears. When in doubt, don't wait to see what happens next — call your bank today.
Frequently Asked Questions
How long do I have to dispute an unauthorized bank transaction?
Federal law generally gives you 60 days from the date your statement containing the transaction was sent, though your bank's account agreement may add its own procedures. But your protections shrink the longer you wait: report within 2 business days of discovering it, and liability is capped at $50 regardless of the amount taken. Report between 2 and 60 days after the statement, and liability can rise to as much as $500. Wait longer than 60 days, and you risk unlimited liability for transactions after that point, since legal protections no longer apply. Since these tiers are based on when you report, not just when the fraud happened, the most protective action is contacting your bank the moment you notice something wrong, rather than waiting to see if more unauthorized charges appear.
What is the difference between a debit card and credit card dispute?
They're governed by different federal laws with meaningfully different protections. Credit card disputes fall under the Fair Credit Billing Act (FCBA), capping liability at $50 regardless of when you report, and most major issuers voluntarily offer zero-liability policies that eliminate even that. Debit card and bank account disputes fall under the Electronic Fund Transfer Act (EFTA), using the tiered schedule ($50 within 2 days, up to $500 within 60 days, potentially unlimited after). Practically, a fraudulent debit charge pulls money directly from your checking account immediately, which can cause cash-flow problems while investigated, whereas a disputed credit card charge isn't required to be paid during investigation, never touching your available cash. Many experts recommend credit cards over debit cards for online or unfamiliar purchases specifically for this stronger, faster protection.
What happens after I report an unauthorized transaction?
Your bank investigates, generally required to complete it within 10 business days for most disputes (up to 45 days in some cases, like new accounts), and must provisionally credit your account if it takes longer than 10 days. You may need to complete a written statement describing the activity, and should keep monitoring your account for additional suspicious transactions. If the investigation confirms the charge was unauthorized, the credit becomes permanent. If the bank determines it was actually valid (a forgotten subscription, an authorized user's purchase), the provisional credit is reversed and you're responsible. If you disagree with the outcome, you can request the documentation behind the decision and escalate a complaint to the CFPB if necessary.
How can I protect my account from future unauthorized transactions?
Set up transaction alerts so you're notified the moment a charge posts, rather than discovering it days later. Check account activity regularly — at least weekly — rather than waiting for the monthly statement, since faster detection means lower liability and less damage. Use unique, strong passwords and two-factor authentication for online banking, since compromised credentials are a common cause of fraud. Be cautious entering debit card info online given its weaker legal protections, and consider a credit card for online or unfamiliar purchases instead. Finally, watch for small, easy-to-miss test charges — fraudsters sometimes run a tiny transaction to confirm a stolen card number works before attempting larger purchases.
Sources & References
- U.S. News & World Report — How Do Banks Handle Unauthorized Transactions: $0 liability if reported before use, $50 cap within 2 days, 60-day window, 10-day investigation
- SoFi — How to Get Your Money Back From Unauthorized Transactions: dispute filing process, freeze vs cancel decision, prevention alerts
- ExplainCharges — How to Dispute an Unauthorized Transaction: FCBA $50 cap explanation, formal dispute documentation requirements
- Consumer Financial Protection Bureau — Consumer Financial Protection Bureau: file complaints about unresolved bank disputes and fraud investigations
- Regions Bank — Dispute a Transaction: standard bank dispute filing channels and required documentation
- Financial Consumer Agency of Canada — Resolving an Unauthorized Transaction: investigation obligations and reporting timeline principles (referenced for comparative process)