How Regulation E's Error Resolution Process Works for Disputed Debit Card Transactions

If you spot a debit card charge you never made, federal law gives you a clear process and the bank firm deadlines to follow. Regulation E's error resolution rules cover unauthorized electronic fund transfers, including debit card purchases, and spell out exactly how fast your bank has to investigate and, in many cases, give you your money back while it works.

What counts as an "error" under Regulation E

Regulation E defines "error" broadly, and an unauthorized electronic fund transfer is one of the specific problems the rule covers, alongside things like an incorrect transfer amount or a computational mistake. This matters because the moment your dispute fits that definition, your bank's investigation clock and your own protections against liability start running under the same regulation. You do not have to prove fraud yourself or chase down the merchant first — the bank must begin investigating promptly once you give notice, whether you call or write in. CFPB guidance specifically flags that a bank cannot require you to contact the merchant or file a police report before it starts investigating your claim.

The 60-day window to report an error

To trigger the bank's error-resolution duties, your notice has to be timely — received no later than 60 days after the bank sent the periodic statement on which the disputed transaction first appeared. That 60-day clock runs from when the statement was sent, not from when you actually opened or read it, so it's worth checking your statement dates closely if you're near the edge of the window. Your notice also needs to let the bank identify your name and account number and explain why you believe there's an error. If you report the problem by phone, the bank can ask you to confirm it in writing within 10 business days, but only if it tells you about that requirement and gives you the address to send it to at the time of your call. Importantly, the bank still has to start investigating right away on your oral notice — it cannot wait for your written confirmation before acting.

The bank's investigation timeline

Once your notice of error is timely and complete, the bank has to investigate promptly and generally determine whether an error occurred within 10 business days of receiving your notice, and that investigation must be reasonable, including a reasonable review of the bank's own records. After finishing that investigation, the bank must report its results to you within three business days, and if it confirms an error happened, it must correct it within one business day of that determination. If you reported the error orally, the bank may require you to confirm it in writing within 10 business days, but it must tell you about that requirement and where to send the confirmation when you make the oral report.

When the deadlines stretch longer

Not every dispute follows the standard 10- and 45-day schedule. For three specific categories — point-of-sale debit card transactions, transfers not initiated within a state, and errors involving transfers that occurred within 30 days after the first deposit to the account — the full resolution period stretches to 90 days instead of 45, and for the new-account category specifically, the investigation deadline before provisional credit is required extends to 20 business days instead of 10. If your unauthorized debit card purchase falls into one of those categories, don't be alarmed if the bank's letter mentions a longer resolution timeline than the standard 45 days; it may simply be applying this extension rather than mishandling your case.

Worked example: tracking a $320 unauthorized charge

Say you call your bank on Monday, October 5, 2026, to report a $320 debit card purchase you never made, and that call counts as Day 0 of your notice of error. Counting 10 business days forward from that Monday, Monday-through-Friday only and assuming no federal holidays fall in the window, your bank's standard deadline to finish its investigation and either confirm the error or issue provisional credit falls on Monday, October 19, 2026, though if the bank is closed for a holiday like Columbus Day during that window, the deadline would instead fall a business day later. If the bank told you during that call that it needed written confirmation, you'd have 10 business days from October 5 to send that in, and the bank still has to start investigating right away rather than waiting for your letter. If the bank can't wrap up by its 10-business-day deadline and instead uses the extended 45-day process, it must give you provisional credit for the $320 and tell you the amount and date of that credit within two business days of crediting your account, with full use of the funds while the investigation continues. Once the bank finishes investigating, it has three business days to tell you the outcome, and if it confirms the charge was unauthorized, one more business day to correct your account.

• notice date ordinal: 739894
• calendar days to add: 14
• Formula: notice date ordinal + calendar days to add
• Result: 739908

Business-day countdown for a Monday notice of error.

How your own liability is limited

Separate from the investigation timeline, Regulation E also limits what you can be on the hook for if your card or account access was used without your permission. If an unauthorized transfer shows up on a statement and you don't report it within 60 days of that statement being sent, you can face unlimited liability for later unauthorized transfers, but only for the portion of losses the bank can show timely notice would have prevented.

Standard versus extended investigation timelines

	Standard timeline	Extended timeline
Investigation deadline	10 business days from notice of error	20 business days from notice of error, but only for errors on new accounts within 30 days after the first deposit; the extension period also covers point-of-sale debit card transactions and foreign-initiated transfers for the longer 90-day total resolution period
Total resolution period if credit extended	Not separately confirmed here	90 days instead of 45 days for new accounts within 30 days after the first deposit, point-of-sale debit card transactions, or transfers not initiated within a state
Report of results	Within 3 business days after the investigation is completed	Same 3-business-day rule applies once the extended investigation is completed
Provisional credit during investigation	Not required under the standard timeline alone	If the bank uses the extended period, it must provisionally credit the disputed amount, tell the consumer the amount and date within 2 business days of crediting, and give full use of those funds while the investigation continues

Standard versus extended Regulation E timelines for unauthorized debit card transactions.

What to do when you spot a disputed debit card charge

1. Call or write your bank as soon as you notice the unauthorized charge, since your notice must reach the bank within 60 days after it sent the statement showing that transaction.
2. If you report by phone, ask whether the bank requires written confirmation, and get the deadline and mailing address on that call, since the bank must tell you this information when you give oral notice.
3. Note the date of your notice, since the bank must determine whether an error occurred within 10 business days of that date under the standard timeline.
4. If the bank uses the extended investigation period, watch for a notice of provisional credit, which the bank must tell you about within two business days of crediting your account, including full use of those funds.
5. Once the bank finishes its investigation, expect a report of results within three business days, and if an error is confirmed, a correction to your account within one business day after that.

Key takeaways

• An unauthorized debit card transaction is explicitly covered as an "error" under Regulation E, which means the law's investigation deadlines and your liability protections both apply.
• Your notice of error must reach the bank within 60 days after it sent the statement showing the disputed transaction, or the bank's duty to investigate under this process doesn't kick in.
• The bank generally has 10 business days to investigate and decide, three more business days to tell you the result, and one business day to fix any confirmed error.
• For point-of-sale debit transactions, transfers not initiated within a state, and transfers occurring within 30 days after the first deposit to the account, the total resolution period stretches to 90 days instead of the standard 45, and the investigation deadline extends to 20 business days specifically for the new-account category, meaning errors involving transfers within 30 days after the first deposit.
• If your bank gave you the required initial disclosures and your card qualified as an accepted access device, reporting a lost or stolen card within two business days caps your liability at the lesser of $50 or the amount taken before you reported it, while waiting past 60 days after a statement can expose you to liability for later unauthorized transfers that the bank proves would not have happened had you reported on time.

What happens if the bank can't finish its investigation in 10 business days?

The bank can take up to 45 days total, but only if it provisionally credits your account for the disputed amount, tells you the amount and date of that credit within two business days, and lets you fully use those funds while it keeps investigating.

Does the 10-day deadline ever change?

Yes, but only for three specific categories of transactions: errors on accounts within 30 days after the first deposit, point-of-sale debit card transactions, and transfers not initiated within a state. For new accounts, the investigation deadline extends to 20 business days, and for all three categories the total resolution period extends to 90 days instead of 45.

Sources

• www.consumerfinance.gov
• www.consumerfinance.gov
• www.consumerfinance.gov