How much you can lose: report fast
| When you notify the bank (Regulation E) | Your maximum liability |
|---|---|
| Within 2 business days of learning the card was lost or stolen | the lesser of $50 or the unauthorized transfers before notice |
| After 2 business days | up to $500 |
| More than 60 days after a statement showing the unauthorized transfer | unlimited for transfers after the 60 days that timely notice would have prevented |
The deadlines are extended to a reasonable period for extenuating circumstances such as extended travel or hospitalization. The dollar figures are the regulation's caps.
What counts as an error
Regulation E's list includes an unauthorized electronic fund transfer, an incorrect transfer to or from your account, an omitted transfer, a bookkeeping mistake by the bank, and receiving the wrong amount of cash from an ATM. Card purchases, ATM withdrawals and other electronic transfers are covered.
The process and the bank's deadlines
| Step | Deadline | Example, notice received November 9, 2026 |
|---|---|---|
| Your notice | no later than 60 days after the statement showing the error | sent November 9, 2026 |
| Written confirmation, if the bank asks | within 10 business days of an oral notice | by about November 23, 2026 |
| Bank investigates and decides | 10 business days (20 for a new account) | by about November 23, 2026 |
| Or: provisional credit, longer investigation | credit within 10 business days; up to 45 days (90 for point-of-sale, out-of-state or new-account transfers) | decision by December 24, 2026, or February 7, 2027 for a point-of-sale purchase |
| Bank reports results | within 3 business days after finishing | a few days after the decision |
Business-day dates are approximate here; the business days calculator counts them exactly, with holidays removed.
What to do
- Lost or stolen card: call the bank at once; the 2-business-day window decides between $50 and $500.
- Wrong charge: notify the bank within 60 days of the statement, by phone and in writing.
- Keep records: date and time of the call, the name of the person, a copy of the letter.
- Watch for the provisional credit if the investigation runs past 10 business days.
- If it was fraud, follow the FTC's steps in identity theft recovery steps.
Credit cards follow different rules, in how to dispute a credit card charge; overdraft fees triggered by a fraudulent charge are covered in overdraft fees explained. This guide follows Regulation E as published by the CFPB.
Frequently asked questions
How do I dispute a debit card charge?
Notify your bank of the error. Under Regulation E, the notice must reach the institution no later than 60 days after it sent the periodic statement showing the error. The bank may ask for written confirmation within 10 business days of an oral notice. It then has 10 business days to investigate and decide, or up to 45 days if it provisionally credits your account within those 10 business days.
How much can I lose if my debit card is stolen?
Regulation E caps your liability at the lesser of $50 or the unauthorized transfers before notice if you tell the bank within 2 business days of learning of the loss or theft. After 2 business days the cap is $500. For unauthorized transfers that appear on a statement, you must report within 60 days of the statement; after that, the official commentary says you face unlimited liability for transfers made after the 60 days that timely notice would have prevented.
Is a debit card dispute different from a credit card dispute?
Yes. Debit cards fall under Regulation E, with the 2-business-day, $50 and $500 liability steps and the 10-business-day investigation; credit cards fall under Regulation Z, with a $50 cap on unauthorized use and a different timeline. With a debit card the money has already left your account, which is why the provisional credit matters.
How long does the bank have to investigate?
10 business days to determine whether an error occurred, or 20 for a transfer within 30 days after the account's first deposit. If it cannot finish, it may take up to 45 days, or 90 days for point-of-sale debit card transactions, transfers not initiated within a state, and new accounts, if it provisionally credits the account within 10 business days. It must report results within 3 business days after finishing.
What if I was traveling or in the hospital?
Regulation E requires the institution to extend the notice deadlines to a reasonable period if extenuating circumstances, such as extended travel or hospitalization, delayed your notice.
Sources
- Regulation E, 12 CFR 1005.6, Liability of consumer for unauthorized transfers (the lesser of $50 or transfers before notice within 2 business days; up to $500 after 2 business days; report statement transfers within 60 days; unlimited liability for later transfers that timely notice would have prevented, per the commentary; extension for extenuating circumstances)
- Regulation E, 12 CFR 1005.11, Procedures for resolving errors (what counts as an error; notice within 60 days of the statement; written confirmation within 10 business days of an oral notice; 10 business days to investigate, 20 for new accounts; up to 45 days, or 90 for point-of-sale, out-of-state and new-account transfers, with provisional credit within 10 business days; results within 3 business days)
General information based on the sources above, not tax, legal or financial advice.