Who Is a Card Issuer and What Are Your Rights?

A card issuer is the bank or credit union whose name appears on your credit, debit, or prepaid card, and it’s the institution that actually lends you the money or holds your funds behind the scenes. The issuer sets your interest rate, credit limit, and fees, decides whether to approve you in the first place, and carries the financial risk when a payment goes bad. It’s also the entity federal law holds responsible for your consumer protections, from billing disputes to fraud liability. Knowing who your issuer is matters because your rights, and how quickly you need to act to keep them, depend on it.

What Your Card Issuer Does

Every time you use your card, the issuer guarantees payment to the merchant’s bank. The merchant doesn’t wait for you to pay your credit card bill. The issuer covers the transaction and then collects from you later under the terms of your cardholder agreement. That guarantee is what makes card payments work at all.

Beyond funding transactions, the issuer runs the account. It approves the application, sets your credit limit or spending allowance, calculates interest on any balance you carry, sends your monthly statements, and processes payments. If your credit profile changes, it can raise or lower your limit. Before it opens the account at all, federal law requires the issuer to verify your identity through a Customer Identification Program under Section 326 of the USA PATRIOT Act.1FinCEN.gov. Interagency Interpretive Guidance on Customer Identification Program Requirements Under Section 326 of the USA PATRIOT Act

Your Issuer Is Not Visa or Mastercard

This is the point people get wrong most often. Visa and Mastercard are payment networks, not issuers. They provide the technology that routes a transaction between your issuer and the merchant’s bank, set the operating rules, and handle settlement. They don’t lend you a dollar and they don’t hold any of your deposits. Any qualified bank can issue cards on their networks, which is why you’ll see Visa or Mastercard logos on cards from thousands of different banks.

American Express and Discover historically worked differently, acting as both the network and the issuer on cards branded in their own names. That means when you charge something on an Amex card issued directly by American Express, the same company authorizes the purchase, funds it, sends the statement, and collects the payment. Both companies have also begun issuing through third-party banks in certain markets, so the line isn’t as sharp as it once was.

Why does the distinction matter? Because when you have a problem with a charge, the network isn’t who you call. Your issuer is. And when you compare protections between two cards, the network logo tells you far less than the name of the bank on the back.

When the Brand on the Card Isn’t the Issuer

Fintech companies like Chime and Current put their names on debit and credit cards, but most of them are not the actual issuer. Because they don’t hold a bank charter, they partner with a chartered bank that acts as the legal issuer and the regulated entity. The fintech runs the app, the branding, and customer support. The partner bank holds the license, the deposits, and the regulatory obligations. If you need to know your true issuer, check the fine print on the back of the card or in the cardholder agreement. It matters for FDIC coverage and for who is actually on the hook for your protections.

Retail cards split into two similar categories. A private-label store card works only at that specific retailer and is issued either by the retailer’s finance subsidiary or by a third-party specialist. A co-branded card carries both a store’s name and a payment network logo and is usually issued by a major bank on the retailer’s behalf. The rewards may look like the store’s program, but your account relationship is with the bank.

How Your Rights Change by Card Type

The protections your issuer must give you depend on whether the card is credit, debit, or prepaid. The differences are large enough to matter, especially for fraud.

Credit Cards

Federal law caps your liability for unauthorized credit card charges at $50. In practice you’ll almost never pay even that, because Visa and Mastercard require their issuers to enforce zero-liability policies as a condition of the network license. Visa’s policy requires the issuer to replace stolen funds within five business days of notification.2Visa. Visa Zero Liability Policy Mastercard’s works similarly as long as you used reasonable care and reported the loss promptly.3Mastercard. Zero Liability Protection Policy

Debit Cards

Debit cards fall under the Electronic Fund Transfer Act, and the statutory protections are much weaker. Your exposure depends on how fast you report the loss:

  • Report within 2 business days of learning about the loss: liability is capped at $50, or the amount of unauthorized transfers before notification, whichever is less.
  • Report after 2 business days but within 60 days of the statement: liability jumps to $500.
  • Report after 60 days from the statement: you face unlimited liability for unauthorized transfers that occur after the 60-day window.

These tiers come from 15 U.S.C. ยง 1693g.4Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability Many banks voluntarily extend zero-liability protection to debit cards through their network agreements, but that’s a business policy, not a legal guarantee, and it can be withdrawn or limited.5Consumer Financial Protection Bureau. Comment for 1005.6 – Liability of Consumer for Unauthorized Transfers Report any unauthorized debit transaction immediately. Each day of delay costs you.

Prepaid Cards

Prepaid cards technically fall under Regulation E, the same framework as debit cards, but with a catch. If the issuer hasn’t completed identity verification for your prepaid account, it isn’t required to honor the liability limits or the error-resolution procedures at all.6Consumer Financial Protection Bureau. 1005.18 – Requirements for Financial Institutions Offering Prepaid Accounts An unregistered prepaid card bought off a rack has far weaker protection than a registered one. If you load real money onto a prepaid card, register it.

How to Dispute a Charge With Your Issuer

When a charge on your credit card statement is wrong, the Fair Credit Billing Act sets out a structured process, and your issuer can’t ignore your complaint or punish you for raising it.7Federal Trade Commission. Fair Credit Billing Act

The clock starts when the issuer sends your statement. You have 60 days from that date to send a written billing error notice to the address your issuer designates for disputes, which is not the same as the payment address. Once the issuer receives your notice, it has 30 days to acknowledge it in writing. It then has two full billing cycles, but no more than 90 days, to investigate and either correct the error or explain why it believes the charge is right.8Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors

While the investigation is open, the issuer cannot try to collect the disputed amount, charge interest on it, or report it to the credit bureaus as delinquent. You can withhold payment on the disputed portion, though you still need to pay the rest of your bill on time. These protections apply to credit cards. Debit card disputes go through a separate process under Regulation E, with different timelines and weaker interim protections.

What Happens if Your Issuer Fails

Bank failures are uncommon but they do happen, and the outcome depends on which direction the money runs.

If you have a deposit account with the issuing bank, such as a checking or savings account linked to your debit card, the FDIC insures those deposits up to $250,000 per depositor, per ownership category.9FDIC.gov. Understanding Deposit Insurance Prepaid card balances held at an FDIC-insured bank may also qualify if the account is structured correctly. Investments the bank sold you, like stocks or mutual funds, are not covered.

If you owe the failed bank money on a credit card, that debt doesn’t vanish. The FDIC typically arranges for a healthy bank to acquire the failed institution’s loan portfolio, and your account transfers to that new bank, generally under the same terms. Your interest rate and payment schedule shouldn’t change mid-cycle. Watch for correspondence from the acquiring bank confirming your account details, and make sure any payment you send goes to the new address.