Debit Card Chargeback Rights Under Regulation E
What Is It?
Most people know that credit cards come with strong dispute rights. Far fewer know that debit cards have their own federal dispute protections under the Electronic Fund Transfer Act (EFTA) and its implementing rule, Regulation E. If someone makes an unauthorized charge to your debit card — or if you never received what you paid for — you have the right to dispute it and get your money back.
The protections are weaker than credit card rules and the timelines are tighter, but they are real and enforceable.
How It Works
- Identify the disputed transaction. Unauthorized charges (fraud, theft, errors) are the clearest case. Disputes over goods not received or not as described are covered under card network rules (Visa/Mastercard) rather than Regulation E directly, but most banks process them the same way.
- Report as fast as possible. Your liability depends entirely on how quickly you report:
- Within 2 business days: Maximum liability is $50.
- Within 60 days of the statement date: Maximum liability is $500.
- After 60 days: You could be responsible for the full amount.
- Notify your bank in writing. Call first to freeze the card, then follow up in writing. Include: your name and account number, a description of the transaction, why you believe it is unauthorized, and the date you discovered it.
- The bank investigates. The bank has 10 business days to investigate (or 5 business days if you’re a new customer) and must provisionally credit your account within that window if it can’t complete the investigation. The full investigation period is 45 days (or 90 days for point-of-sale or foreign transactions).
- Resolution. If the bank finds in your favor, the credit becomes permanent. If not, they must explain why and reverse any provisional credit — but you have the right to request all documents they used in their investigation.
What Most People Don’t Know
- The 2-day rule is about discovery, not the transaction date. The clock starts when you first notice the unauthorized charge, not when it occurred. Check your statements regularly — gaps in monitoring can increase your liability.
- Your bank’s zero-liability policy often goes further. Visa and Mastercard both offer voluntary “zero liability” policies that eliminate consumer liability for unauthorized charges entirely. This is better than what the law requires, but it’s a policy — not a statutory right.
- Provisional credit is mandatory. If the bank can’t resolve your dispute within 10 business days, it must credit your account temporarily while the investigation continues. Many banks skip this — if yours does, cite 12 CFR § 1005.11(c).
- Debit is riskier than credit for disputes. With credit cards, the money stays with you during a dispute. With debit, the money is already gone from your account — the investigation happens after the fact.
Who Benefits Most?
Anyone whose debit card has been used fraudulently or who paid for goods or services via debit that were not delivered. This is especially important for people who primarily use debit cards for everyday spending.
Legal Basis
- Electronic Fund Transfer Act (EFTA) — 15 U.S.C. § 1693 et seq. Establishes consumer rights for electronic transfers including debit card transactions.
- Regulation E (12 CFR Part 1005) — The CFPB’s implementing regulation, specifically § 1005.6 (liability limits) and § 1005.11 (error resolution procedures).
- 15 U.S.C. § 1693g — Caps consumer liability for unauthorized electronic fund transfers depending on reporting timing.
Frequently Asked Questions
How is disputing a debit card charge different from disputing a credit card charge?
The key difference is timing and risk. With a credit card, the money stays in your pocket during the dispute. With a debit card, the money is already gone from your bank account — you’re recovering it after the fact. Debit card protections under Regulation E are also time-sensitive: your liability increases significantly if you wait more than 2 business days to report unauthorized charges, unlike credit card disputes which give you 60 days from the statement date.
What is the 2-business-day rule under Regulation E, and when exactly does the clock start?
The 2-business-day clock starts when you first discover the unauthorized charge, not when the transaction occurred. If you report within 2 business days of discovering it, your maximum liability is $50. Between 2–60 days, liability rises to $500. After 60 days from the statement date, you could owe the full amount. Check your statements frequently to avoid inadvertently extending your liability window.
Is my bank required to give me a provisional credit while it investigates my dispute?
Yes. If your bank cannot complete the investigation within 10 business days, it must provisionally credit your account for the disputed amount while the investigation continues. If your bank skips this step, cite 12 CFR § 1005.11(c) and escalate the complaint — this is a legal requirement, not a courtesy.
Can I dispute a debit charge for goods I never received, or only for unauthorized transactions?
Regulation E technically covers unauthorized transfers, but most banks also process disputes for goods not received or not as described under Visa or Mastercard’s network rules. File the dispute the same way regardless — identify it as “goods/services not received” or “item significantly not as described” and your bank will apply the appropriate framework.
What happens if my bank denies my Regulation E dispute?
If denied, your bank must provide the reason in writing and you have the right to request copies of all documents they used in the investigation. You can submit additional evidence and request reconsideration, file a complaint with the CFPB, or consult a consumer protection attorney — EFTA violations can support private lawsuits with actual damages and attorney’s fees.