Anyone who has spotted a duplicate restaurant charge or a debit for a subscription they canceled knows the sinking feeling of money leaving their account without permission. Federal law sets a hard deadline for acting on that discovery: 60 days from the date the bank sends the first periodic statement reflecting the error. Miss that window, and the bank has no obligation to investigate or return the funds. The rule, rooted in the Electronic Fund Transfer Act and its implementing regulation, puts the burden squarely on consumers to review their statements and speak up fast.
How the 60-day clock actually starts and why it catches people off guard
The deadline does not begin on the date of the transaction itself. It begins when the financial institution mails or electronically delivers the statement that first shows the disputed charge. That distinction matters because a wrong or doubled debit that posts on the last day of a billing cycle may not appear on a statement for weeks. The model disclosure language banks are required to use spells it out plainly: “We must hear from you no later than 60 days after we sent the FIRST statement on which the problem or error appeared,” according to Regulation E Appendix A.
That phrasing creates a gap between when a charge hits and when the formal clock starts ticking. Consumers who rely only on a monthly paper statement may not open the envelope for days or weeks after it arrives. By contrast, banks that push real-time transaction alerts to a customer’s phone effectively compress the lag between a suspicious debit posting and the customer noticing it. The practical result is that same-day push notifications give account holders more of the 60-day period to act, while statement-only customers burn through part of the window before they even know a problem exists.
The rule also applies regardless of how obvious the error is. A small test charge from an unfamiliar merchant and a large, clearly fraudulent withdrawal both trigger the same countdown once they appear on a periodic statement. Consumers who assume that a bank will automatically reverse glaringly unauthorized debits can be surprised to learn that, after 60 days, the institution’s legal duties change dramatically. The law effectively rewards vigilance and penalizes delay, even when the underlying fraud is clear-cut.
Regulation E’s error-resolution framework and the cost of delay
The statutory authority behind this process is Section 1693f of the Electronic Fund Transfer Act, which requires financial institutions to investigate and resolve alleged electronic fund transfer errors once they receive timely notice. Under that statute and its regulatory counterpart, 12 CFR Section 1005.11, a bank that gets a valid notice within the 60-day period must generally complete its investigation within defined time limits and, in many cases, provisionally recredit the disputed amount while the review is underway.
The Consumer Financial Protection Bureau’s error-resolution rule lays out these steps in detail. After a consumer alerts the institution to an error, the bank must conduct a reasonable investigation, report the results, and correct any confirmed mistake promptly. If more time is needed, the bank can extend the investigation period only if it first provides a provisional credit, restoring access to the disputed funds while it finishes its review. These protections exist only when the consumer’s notice arrives within the statutory 60-day window.
Once that window closes, the consumer’s position weakens sharply. Under the liability rules in 12 CFR Section 1005.6, missing the deadline exposes the account holder to responsibility for unauthorized transfers that occur after the period expires. The bank is no longer required to follow Regulation E’s error-resolution procedures at all if notice arrives late, according to the CFPB’s regulatory text. That means a consumer who spots a pattern of fraudulent debits but waits too long could be on the hook for every charge that posted after the deadline passed, even if the earliest charge would have been fully covered.
The timing rules also affect disputes over recurring debits, such as gym memberships or subscription services that a consumer believes they canceled. If the merchant continues to pull funds and the consumer does not challenge the charges within 60 days of the first problematic statement, the bank may treat later debits as authorized or outside the scope of its mandatory investigation duties. In practice, that can leave consumers to negotiate directly with merchants or pursue other remedies, rather than relying on the bank to reverse the transfers.
FDIC bank examiners evaluate whether institutions comply with these timing rules during consumer compliance examinations, reinforcing that the 60-day framework is not optional for banks either. The obligation runs both ways: consumers must notify promptly, and banks must investigate and respond within prescribed timelines once they receive that notice. For account holders, the takeaway is simple but critical: monitor accounts regularly, open statements as soon as they arrive, and report any suspicious or mistaken electronic transfer in writing well before the 60-day mark. Acting quickly preserves the strongest legal protections and maximizes the chances of getting unauthorized funds restored.
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
