Will a Bank Refund an Unauthorized Transaction?

In most cases, a bank will refund an unauthorized transaction, but whether you get all of your money back, some of it, or none of it depends on the type of account, how quickly you reported the problem, and whether the transaction meets the legal definition of “unauthorized.” Credit cards give you the strongest protection, debit cards impose tight reporting deadlines, and prepaid cards, business accounts, and wire transfers sit largely outside the federal refund rules.

Debit Card Refunds Depend on How Fast You Report

The Electronic Fund Transfer Act and Regulation E set the liability rules for unauthorized debit card charges and other electronic transfers from a consumer bank account.¹ The refund you can recover is tied directly to when you notify the bank.

Report within two business days of learning about the loss or theft, and your liability caps at $50 or the amount of unauthorized transfers that went through before you called, whichever is less. Everything above that is the bank’s problem, not yours.¹

Report after two business days but within 60 days of the statement showing the fraud, and your exposure jumps to as much as $500. That higher cap only applies to unauthorized transfers that happened after the two-day window closed, and only if the bank can show those charges would not have gone through if you had reported sooner.¹

Miss the 60-day window, and the protections end. You face unlimited liability for unauthorized transfers that occurred after that window closed, and the bank is not required to reimburse those losses.²

There is one important carve-out. If your account or card number was stolen but the physical card was never lost, you generally have zero liability for the resulting unauthorized transfers, as long as you report within 60 days of the statement. The $50 and $500 tiers only apply when an actual access device was lost or stolen.³

Credit Card Refunds Are More Forgiving

Credit cards operate under the Truth in Lending Act and Regulation Z, and the rules favor the cardholder. Your maximum liability for unauthorized charges is $50, no matter how much the thief spent or how long it took you to notice.⁴ Many issuers voluntarily waive even that.

Credit card disputes follow a different process from debit disputes. The Fair Credit Billing Act gives you 60 days after the first bill showing the error to send a written dispute to the card issuer’s billing inquiry address, which is usually different from the payment address.⁵ A phone call is not enough. Send the letter by certified mail with a return receipt so you have proof it arrived on time.⁶

Once the issuer receives your notice, it has 30 days to acknowledge and up to two billing cycles (never more than 90 days) to resolve the dispute. During the investigation, the issuer cannot try to collect the disputed amount or report it as delinquent. Credit card issuers are not required to grant a provisional credit while investigating, though many do.⁷

When a Charge Isn’t Actually “Unauthorized”

Banks draw a sharp line between transactions someone made without your permission and transactions you initiated but now regret. That distinction is what decides whether you get a refund at all.

If you were tricked into sending money through a person-to-person payment app, the bank treats the transfer as authorized because you pressed the buttons. Since mid-2023, the Zelle network has required participating banks to reimburse a narrow category of imposter scams, but coverage outside that specific carve-out is limited. Other payment apps may offer even less.

Claims are also commonly denied in these situations:

You gave someone your PIN, login, or a one-time passcode. Sharing access removes the “unauthorized” element.
A family member or household guest used your card without asking. Banks generally classify these as authorized unless you had already told the bank to cut that person off.
You are unhappy with a purchase you did approve. That is a merchant dispute, not fraud, and goes through a separate process.

One counter-exception: if someone physically forces you to make a transfer under duress, Regulation E treats it as unauthorized even though you technically initiated it.¹

How the Investigation and Refund Timing Work

For a debit card or other electronic transfer dispute, notice can be oral or written. A phone call triggers the bank’s duty to investigate, but the bank can require written confirmation within 10 business days. Skip that step when the bank asks for it, and the bank is not required to grant you a provisional credit while it investigates.⁸ Following up in writing is the safer move.

The bank has 10 business days to investigate and reach a decision. If it needs more time, it can extend the investigation to 45 days, but only by placing a provisional credit for the full disputed amount (plus any lost interest) into your account within those first 10 business days. You get full use of that money during the investigation.⁹

The window stretches to 90 days rather than 45 in three situations: the transfer came from outside the United States, the transfer was a point-of-sale transaction, or the transfer happened within 30 days of the first deposit to a new account. The provisional credit still has to appear within 10 business days.¹

If the bank confirms the transaction was unauthorized, the provisional credit becomes permanent and the bank must correct the error within one business day of the decision.⁸ If the bank rules against you, it will reverse the provisional credit and send a written explanation describing the evidence it relied on and telling you how to request the underlying investigation documents.¹⁰

Fees and Interest Get Refunded Too

A refund is not limited to the stolen amount. When the bank confirms an unauthorized electronic transfer, it must also credit any interest you lost and refund any fees it charged as a result of the fraud.¹¹ If an unauthorized withdrawal triggered overdraft charges or made a legitimate payment bounce, those fees should come back too. Fees that would have hit your account anyway are not covered.

On the credit card side, the issuer must credit any finance charges that accrued on the disputed amount.¹¹ If unauthorized charges pushed you into interest or a late fee, list those in your dispute.

Prepaid Cards, Business Accounts, and Wire Transfers Are Different

Not every account gets the same treatment, and three categories in particular sit outside the standard consumer protections.

Prepaid Cards

Prepaid debit cards are covered by Regulation E, but only after you register the card and complete the issuer’s identity verification. Before registration, the bank is not required to follow the federal liability limits or error resolution procedures.¹² If you keep any real balance on a prepaid card, registering it is the difference between having protection and not.

Business Accounts

Business bank accounts do not get the federal consumer protections. The Electronic Fund Transfer Act applies only to consumer accounts, and federal law does not cap liability for unauthorized transactions on business debit cards.¹³ Business account holders rely on their deposit agreement, state law, and UCC Article 4A for any recovery rights.¹⁴

Wire Transfers

Most wire transfers through systems like Fedwire are carved out of Regulation E and governed instead by UCC Article 4A, which places more responsibility on the sender and offers fewer automatic protections.¹ If an unauthorized wire leaves your account, call the bank immediately. Recovery depends on whether the funds can be intercepted before withdrawal at the other end.

If the Bank Refuses to Refund You

A denial is not the end of the process. Start by asking the bank for the documents it used to reach its decision. The written explanation the bank sends you must tell you how to request those materials, and the bank has to provide them promptly.¹⁰ If the reasoning rests on wrong facts or a thin investigation, that is grounds to escalate.

You can file a complaint with the Consumer Financial Protection Bureau online or by phone at (855) 411-2372. The CFPB forwards the complaint to the bank, which generally must respond within 15 days, with up to 60 days for a final response in some cases.¹⁵ If the bank is a Federal Reserve member, Federal Reserve Consumer Help offers a parallel process and typically notifies you of results within 60 days.¹⁶

If the bank failed to follow the investigation timelines, skipped a required provisional credit, or otherwise violated the Electronic Fund Transfer Act, you can sue. A successful case can recover your actual losses plus statutory damages of $100 to $1,000, along with attorney’s fees and court costs.¹⁷ Banks are also liable for damages caused by failing to properly execute or stop an electronic fund transfer when instructed.¹⁸ Small claims court handles individual disputes at modest filing costs that vary by jurisdiction.

1
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
2
GovInfo. 15 USC 1693g – Consumer Liability
3
Consumer Financial Protection Bureau. Liability of Consumer for Unauthorized Transfers
4
eCFR. 12 CFR Part 226 – Truth in Lending (Regulation Z)
5
Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors
6
Federal Trade Commission. Using Credit Cards and Disputing Charges
7
Consumer Financial Protection Bureau. Billing Error Resolution – 1026.13
8
Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
9
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)15 USC 1693f – Error Resolution
10
eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors
11
eCFR. 12 CFR Part 205 – Electronic Fund Transfers (Regulation E)
12
Consumer Financial Protection Bureau. Requirements for Financial Institutions Offering Prepaid Accounts – 1005.18
13
FDIC.gov. Your Business, Your Deposits
14
LII / Legal Information Institute. UCC – Article 4A – Funds Transfer
15
Consumer Financial Protection Bureau. Learn How the Complaint Process Works
16
Federal Reserve Consumer Help. Federal Reserve Consumer Complaint Process
17
Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability
18
Office of the Law Revision Counsel. 15 USC 1693h – Liability of Financial Institutions