An unauthorized charge is not just a nuisance to sort out whenever there is time — it is a countdown. Federal law gives account holders real power to reverse a fraudulent or mistaken transaction, but that power fades on a deadline measured from the statement, not from the day the fraud is discovered. Miss the window and a bank can lawfully leave the loss on the customer, which is why the habit of reading each statement matters most for retirees who bank by paper and may not spot a strange line item for weeks.
The 60-Day Clock on a Credit-Card Billing Error
For a credit card, the protection comes from the Fair Credit Billing Act, and the trigger is the statement. The Consumer Financial Protection Bureau explains that a cardholder must send the card company a written billing-error notice within 60 days after the first statement showing the disputed charge to preserve the formal billing-error dispute rights. Within that window the issuer must acknowledge the dispute, investigate, and cannot demand payment on the contested amount while it does. A phone call to the number on the back of the card is a sensible first step, but only the written notice locks in the legal protections, so the call should never replace the letter.
Free retirement updates: Enrollment and claim windows come and go, and missing one can cost real money. The free Retirement Shield newsletter keeps readers ahead of the deadlines that matter. Sign up free for the Retirement Shield newsletter.
Debit Cards Follow a Different, Faster Rulebook
Money pulled from a checking or debit account is governed not by the credit-card law but by the Electronic Fund Transfer Act and Regulation E, and its deadlines are stricter because the cash is already gone. The rule sets three tiers of liability for an unauthorized electronic transfer. Report a lost or stolen card or an unauthorized transfer within two business days of learning about it, and the most a customer can be on the hook for is $50. Wait longer than two business days but report within 60 days of the statement that shows the transfer, and exposure can rise to $500. Let 60 days pass after that statement, and the law allows a bank to hold the customer responsible for everything drained after the window closed, with no cap at all.
The bureau lays out these steps for anyone who spots missing money in a bank account, and the escalation from $50 to unlimited is the reason speed matters far more with a debit card than with a credit card. A thief who empties a checking account is spending funds a retiree needs this month, whereas a fraudulent credit-card charge is the bank’s money until the dispute is settled.
Why the Statement Date Starts the Clock
Both timelines run from when the charge appears on a statement, not from the purchase date and not from the day the customer happens to notice. That detail quietly favors people who open every statement promptly and works against those who let paper pile up or never log in to an online account. A charge that posts in one cycle and is buried in a stack of unopened mail can burn through most of the protective window before anyone reads it. Setting a fixed day each month to reconcile every account against receipts turns the deadline from a trap into a routine, and low-balance or transaction alerts by text or email can surface a bogus charge within hours instead of weeks.
The formal liability limits in the rule on consumer liability for unauthorized transfers also make clear that a bank cannot punish a customer with greater liability simply for being careless with a card or a PIN — the tiers are the tiers. What the customer controls is the calendar, and reporting early is the single most valuable thing an account holder can do.
Putting the Dispute in Writing
A dispute holds up best when it is documented. After the first phone report, a short written notice — by secure message, the issuer’s dispute form, or a mailed letter to the billing-inquiries address, not the payment address — should name the transaction, the date, the amount, and the reason it is unauthorized. Keeping a copy, along with the date it was sent, creates a paper trail if the bank later claims the notice arrived late. It also helps to note the name of anyone spoken to on the phone and the date of the call, since a dispute can stretch across weeks and several representatives. For an unauthorized debit, notifying the bank the same day it is discovered protects the $50 ceiling and removes any argument about the two-business-day count. Banks are generally required to investigate and, in many cases, to provisionally recredit a disputed amount while they look into it, so a prompt report can put the money back within days rather than months. The deadlines are firm, but they are also generous to anyone who simply checks the statement and speaks up quickly.
This article was researched and drafted with the assistance of AI and reviewed by The Financial Wire editorial team.
More Financial Reading
- Bank statements: how long to keep them and when to toss them
- The ideal retirement withdrawal rate so your savings actually last
Warren Cohen is a finance writer based in Phoenix, Arizona, covering personal finance topics including credit, banking, and beginner investing. He earned his degree in business administration from Arizona State University and began his career working in consumer finance, where he gained direct experience with lending and credit systems. He now writes for personal finance websites and fintech platforms, focusing on clear, practical content that helps readers make informed financial decisions.
