Is a Debit Card Protected Like a Credit Card?

A debit card is not protected like a credit card. Both carry federal fraud protections, but a credit card caps your personal liability for unauthorized charges at $50 (and often at zero), while a debit card uses a sliding scale tied to how fast you report the problem — with no cap at all if you wait too long. The gap widens further when the dispute is about a bad product or a subscription that won’t cancel: credit cards come with a federal right to withhold payment and push back on the merchant through your issuer; debit cards do not.

The Federal Protection Gap

Two different laws govern the two cards. Credit cards fall under the Truth in Lending Act, which caps your liability for unauthorized use at $50.¹ If only your card number is stolen and not the physical card, you owe nothing, because the issuer cannot show it verified the person using the account.² The burden is on the issuer to prove either that the charge was authorized or that all the statutory conditions for the $50 cap were met. Most issuers waive the $50 to stay competitive, so credit card fraud rarely costs the cardholder anything.

Debit cards fall under the Electronic Fund Transfer Act and Regulation E. The $50 protection you may have heard about applies only if you report the loss or theft within two business days of learning about it. Miss that window and your ceiling jumps to $500. Miss it by long enough, and there is no ceiling.³

Why Losing Cash Hurts More Than Losing Credit

The liability cap is only half the story. A credit card fraud takes money from a line of credit the bank extended you — money you have not paid yet. During the dispute, you owe nothing on the charge and no interest accrues on it.⁴ Your checking balance stays whole.

Debit card fraud pulls cash out of your checking account the moment the transaction clears. Rent, automatic bill payments, and daily spending all compete with a suddenly smaller balance. Even when the bank eventually refunds you, the days or weeks in between can trigger bounced payments and overdraft fees the refund does not cover. For a household living paycheck to paycheck, the temporary loss of access matters more than the theoretical liability cap.

How Fast You Report Decides What You Owe on a Debit Card

Regulation E ties your liability to the calendar, and the deadlines are strict:

Report within two business days of learning about a lost or stolen card: your liability is capped at $50 or the amount of unauthorized transfers that occurred before you notified the bank, whichever is less.³
Report after two business days but before 60 days from the statement date: your liability can rise to $500 for transfers the bank can show would not have happened if you had reported sooner.
Report more than 60 days after the statement showing the first unauthorized transfer: you can lose the full amount of any transfers made after that 60-day window closed, with no cap. That can drain your checking account and any linked overdraft line of credit.⁵

When your card was never physically lost — for example, when a skimmed number is used online — the two-business-day rule does not apply, but the 60-day statement deadline still does. Report within 60 days of the statement showing the fraud, and you owe nothing for the fraud itself. If extenuating circumstances such as hospitalization or extended travel kept you from reporting on time, the bank must extend the deadlines to a reasonable period.³

Disputing a Bad Purchase, Not Just a Stolen Card

Fraud is not the only reason to dispute a charge. Sometimes the transaction was authorized, but the product never arrived, arrived damaged, or a canceled subscription keeps billing you. The gap between the two card types is at its widest here.

Credit Cards: Two Federal Tools

Credit cardholders have two distinct rights. The first is the billing error procedure, which covers being charged the wrong amount, being billed for something never delivered, or being billed for something you returned. While the issuer investigates, you can withhold payment on the disputed portion and any related interest.⁴

The second is the right to assert against your card issuer the same claims you could raise against the merchant — for instance, that the product was defective. Three conditions apply: the original transaction must exceed $50, you must have made a good-faith attempt to resolve the problem with the merchant first, and the purchase must have occurred in your home state or within 100 miles of your billing address.⁶ The dollar and geographic limits do not apply when the merchant is the card issuer or is affiliated with it. The geographic requirement does mean this right rarely helps with distant online sellers or overseas purchases.

Debit Cards: No Federal Right to Withhold Payment

Debit cardholders have no equivalent federal right. When a merchant sends a faulty product or keeps charging after you cancel a subscription, your options are the merchant’s own return policy, the payment network’s chargeback process, or state consumer protection law. The FTC’s guidance for unwanted subscription charges is to file a chargeback dispute with your card issuer immediately and follow up with a written dispute letter to the billing errors address on your statement.⁷ The chargeback is a network policy, not a federal right, so its terms depend on Visa’s or Mastercard’s rules rather than on statute.

How the Bank’s Investigation Differs

Investigation timelines are set by regulation, not left to the bank.

For a credit card dispute, the issuer suspends the disputed amount from your bill during the investigation. You owe nothing on that portion, and no interest accrues. If the issuer decides the charge was unauthorized, it must remove the charge along with any finance charges or fees tied to it.⁸ If it decides the charge was valid, it must explain the finding in writing and tell you what you owe.

For a debit card dispute, the bank has 10 business days to investigate. If it cannot finish in that time, it must provisionally credit your account for the disputed amount — restoring your access to the funds — and then has up to 45 days total to complete the review.⁹ Point-of-sale debit transactions and international transfers stretch the completion deadline to 90 days. If the bank ultimately concludes no fraud occurred, it can revoke the provisional credit, but it must notify you in writing of the amount, the date, and its findings. As with credit cards, the burden is on the bank to prove the transaction was authorized.

Where Network Zero-Liability Policies Narrow the Gap

Visa and Mastercard both offer zero-liability policies that go beyond what federal law requires, promising cardholders will not be held responsible for unauthorized transactions on cards running through their networks, regardless of whether the card is credit or debit.¹⁰¹¹ For most everyday fraud, these policies close the federal gap between credit and debit.

But these are contractual promises, not statutes. Coverage can be denied for gross negligence, such as writing your PIN on the card. Delayed reporting can reduce or eliminate coverage. Account standing can factor in. Visa’s policy also excludes certain commercial cards and anonymous prepaid card transactions. The terms can change, so the actual coverage on your card is whatever the current cardholder agreement says.

Situations Where Neither Card Gives You Much Protection

Some accounts sit outside the standard consumer protections entirely.

Prepaid cards depend on registration. Once the issuer verifies your identity, the same Regulation E liability tiers as a standard debit card apply. An unregistered prepaid card gets none of those limits — if it is stolen and drained, you have no federal right to a refund.⁹ Gift cards, typically unregistered, function like cash: gone means gone.

Business accounts also lose most protections. Regulation E applies only to accounts established primarily for personal, family, or household purposes, so a business debit card usually falls outside the tiered liability limits. Business credit cards keep the $50 unauthorized-use cap, because that provision applies to all credit cards, but the billing error and merchant dispute rights generally do not extend to business credit cards.¹² The card agreement is often all the protection a business user has.

Sharing your card matters too. Federal law defines unauthorized use as use by someone who lacks actual, implied, or apparent authority and from which you receive no benefit.² If you handed your card to someone and they overspent, they likely had at least apparent authority, and the liability caps will not protect you. The same logic applies to a debit card and PIN you shared. Adding someone as a formal authorized user, with issuer-set spending controls, is safer than sharing your own card.

What to Do the Moment You Spot a Bad Charge

Speed matters for both cards, and it matters more for a debit card because every day of delay can move you into a higher liability tier.

Call the number on the back of the card and report the charge. Ask the issuer to freeze or cancel the card and send a replacement. For a debit card, this phone call starts the clock that keeps your liability at $50 or less.¹³
Follow up in writing. Regulation E lets the bank require written confirmation of a debit card dispute within 10 business days of your verbal report.³
If your personal information was compromised, file a report at IdentityTheft.gov. The site generates an official Identity Theft Report that banks and credit bureaus will accept when you dispute fraudulent accounts or charges.¹⁴
Keep watching your statements. New fraudulent transactions appearing later restart the 60-day clock for those specific charges.

Keep a record of every call, letter, and email: date, time, and the name of anyone you spoke with. If the bank later argues you missed a deadline, that record is your evidence.

1
Office of the Law Revision Counsel. 15 U.S.C. 1643 – Liability of Holder of Credit Card
2
Consumer Financial Protection Bureau. 12 CFR 1026.12 – Special Credit Card Provisions
3
eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
4
Consumer Financial Protection Bureau. 12 CFR 1026.13 – Billing Error Resolution
5
GovInfo. 15 U.S.C. 1693g – Consumer Liability
6
Office of the Law Revision Counsel. 15 U.S.C. 1666i – Assertion by Cardholder Against Card Issuer
7
Federal Trade Commission. Getting In and Out of Free Trials, Auto-Renewals, and Negative Option Subscriptions
8
Federal Trade Commission. Using Credit Cards and Disputing Charges
9
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
10
Visa. Visa’s Zero Liability Policy
11
Mastercard. Mastercard Zero Liability Protection for Unauthorized Transactions
12
Consumer Financial Protection Bureau. 12 CFR 1026.3 – Exempt Transactions, Official Interpretations
13
Federal Trade Commission. What To Do if You Were Scammed
14
IdentityTheft.gov. What To Do Right Away