Regulation E: Your 60-Day Window to Dispute a Debit Card Charge

Quick answer

If you spot an unauthorized debit charge, report it to your bank immediately — your liability under Regulation E depends almost entirely on how fast you act. Report within 2 business days and you're capped at $50. Wait past 60 days from your statement date, and the bank has no legal obligation to limit what you lose.

The sliding liability scale

Regulation E, which implements the federal Electronic Fund Transfer Act, sets three distinct tiers of consumer liability for unauthorized debit card and ATM transactions, based entirely on how quickly you report the problem:

This is a genuinely different structure from what most people assume, because credit card fraud protection doesn't work this way at all — the timing simply doesn't matter as much for a credit card.

Why debit and credit protections aren't the same

Credit cards are governed by a different law (the Truth in Lending Act, via Regulation Z), which caps consumer liability for unauthorized charges at a flat $50 regardless of how long you wait to report — and in practice, virtually every major credit card issuer waives that $50 entirely as a customer-goodwill policy. Debit cards, governed by Regulation E, don't have that same flat, time-independent cap. The sliding scale above is real and it's the actual rule, not just a worst-case theoretical.

What the bank must do once you report

Once you report an error, the bank generally has 10 business days to investigate (extendable to 45 days in more complex cases, or up to 90 for certain new-account or foreign-transaction situations), and for cases that will take longer than 10 days, the bank is generally required to provisionally credit your account for the disputed amount while it investigates — a real protection, though one that still leaves you without confirmed use of those funds during the fastest 10-day window in a lot of cases.

How to actually file a dispute

1. Call your bank immediately — phone contact is what starts your protection clock in most cases; don't wait for a written form.
2. Follow up in writing if your bank requires it (many do, to formalize the dispute) — check your account agreement or ask the representative directly.
3. Review your account activity regularly, not just at your monthly statement — the 60-day window for the more favorable liability tiers is measured from your statement date, and checking your app weekly (or setting transaction alerts) catches problems faster than waiting for a bill.
4. Keep records of when you reported it and to whom — the exact date matters for which liability tier applies.

What Regulation E doesn't fully cover

Regulation E protects against genuinely unauthorized transactions — someone accessing your account without your permission. It's murkier, and banks have historically been more resistant, when you were tricked into authorizing a transfer yourself, which is the pattern behind most Zelle and P2P payment scams. See our Zelle scam and bank refund guide for that specific, narrower situation, since the rules and bank practices differ meaningfully from straightforward unauthorized-transaction fraud.

Sources

• Consumer Financial Protection Bureau — Electronic Fund Transfers (Regulation E)
• Federal Reserve — Regulation E consumer protections
• SwitchWize methodology

What to do next