A disputed transaction is a formal challenge you file with your bank or card issuer over a charge that is unauthorized, incorrect, or tied to goods or services you never received. Federal law gives you the right to raise these challenges and caps how much you can lose, but the protections, deadlines, and paperwork differ sharply depending on whether the charge hit a credit card, a debit card, or a peer-to-peer payment app. Get the details right and the money usually comes back. Get them wrong, and you can be stuck with the full amount.
When You Have Grounds to Dispute
Disputes generally fall into three categories, and knowing which one you’re in shapes what evidence you need and how the bank will handle it.
The first is outright fraud. Someone stole your card number or account credentials and made charges you never authorized. These are the cleanest disputes because the charge was never yours.
The second is a processing error. A merchant charged you twice, posted the wrong amount, or failed to credit a return. The fix is usually quick once the bank confirms the error against its records.
The third is the most contested: you authorized the charge, but the transaction went wrong. The product arrived broken, the service was never performed, or what you received didn’t match the description. For these, most banks and card networks expect you to try resolving the problem directly with the merchant first. For credit card disputes involving merchant problems, federal law actually builds that good-faith effort into the process.
Credit Card Disputes and Your Rights Under the FCBA
Credit card disputes carry the strongest federal protection. The Fair Credit Billing Act caps your liability for unauthorized charges at $50, and most major issuers waive even that. The ceiling applies no matter how large the fraudulent charges are.
To trigger the FCBA’s formal protections, send a written dispute notice to the address your card issuer has designated for billing errors. That address is printed on your statement, and it is not the same as the payment address. Your notice must arrive within 60 days after the statement containing the error was sent to you. Include your name, account number, the amount you believe is wrong, and why you think it’s an error.
Once the issuer receives the notice, it must acknowledge it in writing within 30 days. It then has two complete billing cycles, but never more than 90 days, to investigate and either correct the error or explain in writing why it believes the charge was correct.
While the investigation is open, the issuer cannot try to collect the disputed amount, report it as delinquent, or threaten your credit standing because of the dispute. If the investigation ends against you and you still disagree, the issuer can report the amount as delinquent, but it must also report that the amount is in dispute and tell you which credit bureaus it contacted.
Claims Against the Card Issuer for Merchant Failures
The FCBA gives you an extra tool when a credit card purchase goes wrong. If the merchant sold you defective goods or failed to deliver, you can assert the same claims against your card issuer that you could assert against the merchant. In effect, the card issuer inherits the merchant’s liability.
There are conditions. You must first have made a good-faith attempt to resolve the dispute with the merchant. The transaction must exceed $50, and it must have occurred either in your home state or within 100 miles of your billing address. Those geographic and dollar limits are waived for purchases made from the card issuer itself, its subsidiaries, or through a mail or internet solicitation the issuer participated in, which covers most online shopping.
Debit Card Disputes and Your Rights Under Regulation E
Debit card and ACH disputes are governed by the Electronic Fund Transfer Act and its implementing rule, Regulation E. The protections are real but thinner than what credit cards offer, and the pressure on you to act quickly is much higher.
Your liability for unauthorized debit transactions depends entirely on how fast you report:
- Within 2 business days of learning about the loss or theft, your liability is capped at $50 or the amount of unauthorized transfers before you notified the bank, whichever is less.
- After 2 business days but within 60 days of the statement being sent, your liability can rise to $500, covering unauthorized transfers the bank can show would have been prevented by earlier notice.
- After 60 days, you face unlimited liability for unauthorized transfers appearing after that window that the bank establishes it could have stopped if you’d reported sooner.
That unlimited tier is the sharp difference between debit and credit. A stolen credit card number costs you at most $50. A stolen debit card number you don’t notice for three months could drain your checking account with no obligation for the bank to reimburse you.
Investigation Timelines and Provisional Credit
When you report an error on your debit account, the bank must investigate promptly and reach a determination within 10 business days. If it needs more time, it can extend to 45 days, but only if it provisionally credits your account within those initial 10 business days. That provisional credit must include the full alleged error amount, minus up to $50 if the bank has a reasonable basis to believe the transfer was unauthorized and has met certain disclosure requirements. You get full access to those funds while the investigation continues.
The 45-day window stretches to 90 days for transfers that originated outside the United States, point-of-sale debit card transactions, or transfers that occurred within 30 days of the first deposit to a new account.
Once the investigation is complete, the bank must report the results to you within three business days. If it finds no error, it can reverse the provisional credit, but it must explain why and give you the documentation it relied on.
Disputes on Zelle, Venmo, and Cash App
Payment apps fall under Regulation E when the transfer moves money to or from a consumer bank account. That means the same liability tiers and investigation timelines apply in theory. In practice, everything turns on whether the transfer was “unauthorized.”
If someone hacks your account or steals your login credentials and sends money without your knowledge, that’s an unauthorized transfer, and the bank must treat it like any other debit fraud. The CFPB has specifically stated that transfers initiated by a person who obtained access to a consumer’s account through fraud qualify as unauthorized under Regulation E.
The harder situation is when you voluntarily sent money yourself but were tricked into doing so. If you authorized the transfer, even under false pretenses, most banks have treated it as outside Regulation E’s unauthorized-transfer protections. The CFPB has pushed back in enforcement actions, arguing that when a fraudster obtains a consumer’s access device through deception and initiates the transfer, it should count as unauthorized regardless of the consumer’s involvement. The legal question remains actively contested. Don’t assume your bank will reimburse a payment you initiated to a scammer. Treat these payments like cash: once they go out, recovery depends far more on the recipient’s cooperation than on your legal rights.
Subscription and Auto-Renewal Charges
Recurring charges that continued after you thought you cancelled, or subscriptions you never knowingly agreed to, are among the most common reasons people dispute. Federal law addresses this through the Restore Online Shoppers’ Confidence Act, which requires any business using automatic renewal or negative-option billing online to clearly disclose all material terms before collecting your payment information, get your express informed consent before charging you, and provide a simple way to stop recurring charges.
When a merchant fails any of those requirements, you have solid grounds. The strongest subscription disputes involve charges that continued after a documented cancellation attempt, free trials that converted to paid plans without clear disclosure, or cancellation processes so convoluted they effectively prevented you from stopping the charges. Save screenshots of cancellation confirmations, emails, and chat transcripts. If the merchant made cancellation unreasonably difficult, that evidence strengthens your case with the bank.
How to File a Dispute
Before you call the bank, gather the transaction date, the merchant name as it appears on your statement, the exact dollar amount, and any evidence supporting your claim. For fraud, that might be as simple as confirming you didn’t make the purchase. For a merchant dispute, collect order confirmations, tracking numbers, photos of defective items, and records of your attempts to resolve the issue with the seller, including dates, names, and copies of emails or chat logs.
Most banks let you initiate a dispute by phone, through online banking, or in a mobile app. For credit card billing errors, a written notice sent to the issuer’s designated billing error address is what formally triggers the FCBA’s protections, including the 30-day acknowledgment and the two-billing-cycle resolution deadline. If you dispute by phone or online, the bank will still investigate, but follow up in writing to lock in the full statutory protections.
Regulation E doesn’t require written notice for debit card disputes. An oral report starts the clock. Your bank may ask you to confirm the oral report in writing within 10 business days, and if you don’t, the bank can withdraw any provisional credit it issued.
After you file, the bank will typically have you complete a formal dispute form documenting the specifics of your claim. Fill it out carefully and keep a copy. The bank then contacts the merchant’s payment processor and initiates the chargeback.
What Happens After You File
A chargeback reverses funds from the merchant back to your account. For debit disputes running past 10 business days, you’ll see a provisional credit while the investigation continues. For credit card disputes, the issuer cannot attempt to collect the disputed amount during the investigation period.
The merchant gets a chance to fight back. When notified of the chargeback, it can submit a rebuttal through its payment processor, providing evidence like signed delivery receipts, proof of service, or records showing you agreed to the terms. The bank reviews that evidence alongside your original claim.
The investigation ends in one of two ways. Either the bank finds in your favor and the credit becomes permanent, or it sides with the merchant and denies the dispute. For debit accounts, a denial means the provisional credit gets reversed and the funds come back out of your account, which can trigger overdraft fees or bounced checks if the balance goes negative. The bank must notify you of the outcome and its reasoning within three business days of completing the investigation.
Your credit score is not directly affected by a debit dispute, since checking accounts aren’t reported to credit bureaus the same way. For a credit card dispute, the FCBA bars the issuer from reporting the disputed amount as delinquent while the investigation is pending. You still owe any undisputed charges on the same statement, so keep paying those on time.
If the Bank Denies Your Dispute
A denial isn’t always final. Start by reviewing the bank’s explanation and the merchant’s evidence. If you have documentation that wasn’t part of your original claim, ask the bank whether you can reopen the case or submit a supplemental response. Some card networks allow the issuing bank to escalate unresolved disputes to the network’s own arbitration, where a final binding decision is made between the banks.
If your bank won’t move, you can file a complaint with the Consumer Financial Protection Bureau. The CFPB forwards the complaint to the financial institution, which generally responds within 15 days. Describe the problem clearly, include key dates and amounts, and attach supporting documents up to 50 pages. The complaint and the company’s response become part of the CFPB’s public database. A complaint doesn’t guarantee a different outcome, but it creates regulatory visibility that sometimes prompts a second look.
For smaller amounts, small claims court is an option when the merchant clearly failed to deliver. You’d be suing the merchant directly rather than challenging the bank’s decision.
A Warning About Bad-Faith Disputes
Filing a dispute for a charge you actually authorized and received the benefit of is sometimes called “friendly fraud,” and it carries real consequences. Banks track dispute patterns, and a history of questionable chargebacks can result in account closure. Merchants can contest illegitimate chargebacks, and if the bank sides with the merchant, you’re back to the original charge plus potential fees. In serious cases, filing a false chargeback can be prosecuted as theft, credit card fraud, wire fraud, or bank fraud depending on the circumstances. Only file when you genuinely believe the charge is unauthorized, incorrect, or tied to a merchant who failed to deliver what was promised.