Debit card disputes run on a different law than credit card disputes — and the differences matter. Regulation E, which implements the Electronic Fund Transfer Act (15 USC §1693f), governs unauthorized transfers and errors on debit cards, ATM transactions, and other electronic fund transfers. It gives you a 60-day window from your statement date to report an error, and — unlike credit card law — it can force your bank to give you provisional credit while it investigates.
Because a debit dispute pulls from money that's already yours, the stakes of delay are higher than with credit cards. Here's how Regulation E works, what your bank must do, and why reporting fast directly limits what you can lose.
Regulation E is the Federal Reserve's implementation of the Electronic Fund Transfer Act. It covers electronic transfers into and out of consumer accounts: debit card purchases, ATM withdrawals, direct deposits, and ACH transfers, among others. When something goes wrong with one of these transfers — an unauthorized charge, a missing deposit, a wrong amount — Regulation E's error resolution rules kick in.
One important boundary: Regulation E covers unauthorized transfers and processing errors. If you authorized a payment and later regret it, or you're in a contract dispute with a merchant over quality, that's generally a different process (often the card network's dispute rules) rather than a Reg E error claim.
You must report the error to your bank within 60 days after the statement showing the error was sent. Your report can be oral or written — unlike the credit card law, Regulation E doesn't require the initial notice to be in writing. That said, your bank may require written confirmation within 10 business days of an oral notice, and putting it in writing from the start is always safer.
Include your name, account number, the dollar amount, and why you believe there's an error. Note the date you noticed it — the investigation clock starts when the bank receives your notice.
This is the part that makes speed critical. Under Regulation E, your liability for unauthorized transfers generally follows a tiered schedule:
With a credit card, federal law caps your fraud liability at $50 regardless (and most issuers waive even that). With debit, every day of delay can cost you — which is why checking statements promptly is the single best habit for debit users.
Once you report an error, Regulation E puts your bank on a strict timetable:
If the bank concludes no error occurred, it must explain its findings in writing — and if it reverses a provisional credit, it must notify you of the date and amount before debiting it back.
This is Regulation E's standout consumer protection: if the investigation runs past 10 business days, the bank generally must put the disputed money back in your account provisionally. You get use of the funds while the bank finishes its work. One caveat: if the bank asked you for written confirmation of an oral report and you didn't provide it within 10 business days, it may decline the provisional credit — another reason to put everything in writing immediately.
The practical differences come down to whose money is missing and which law applies:
None of this means debit cards are unsafe — it means the response has to be faster. Report unauthorized debit activity the day you spot it.
Debit clocks run faster — and your liability grows with delay. Check exactly how much time you have left.
Generally 60 days after the statement showing the error was sent. Report sooner — your liability for unauthorized transfers is capped at $50 if you report within 2 business days of learning of the loss, but can rise to $500 after that, and potentially become unlimited after 60 days.
Your bank is generally not required to investigate or cover unauthorized transfers that occurred after the 60-day window. Still report it — banks sometimes help as a courtesy, and the card network's dispute rules may offer a separate path — but expect the outcome to be uncertain.
If the bank can't finish investigating within 10 business days (20 for new accounts), Regulation E generally requires it to provisionally credit your account while it finishes — with up to 45 days total, or 90 days for new accounts, point-of-sale, or foreign transactions.
Many bank-to-bank electronic transfers generally fall under the Electronic Fund Transfer Act's umbrella, but app-specific terms vary widely. Authorized payments you were tricked into sending (scams) are a particularly gray area — report them immediately, but know the outcome is less certain than for a classic unauthorized charge.
Yes. If the investigation concludes no error occurred, the bank can reverse the provisional credit — but under Regulation E it must notify you of the date and amount before debiting it back, and explain its findings in writing.
