You open your statement and see a charge you never made. Or a deposit that vanished. Your stomach drops. Take a breath, because the rules give you some real footing, and the first move is simple: tell your bank.

This guide covers the federal timelines, who pays what, and how to document your case. It also says plainly where the sources stop and the unknowns begin.

Close-up of hands placing a warm mug on a wooden table beside a notebook in soft morning light, suggesting a steady daily routine.
Keep notes on every call and message when you dispute a charge. Dates and names matter later.

Start with the clock

Time is the biggest factor in how much you may lose. Once you notify your bank or credit union of an unauthorized transaction, it generally has ten business days to investigate, according to the Consumer Financial Protection Bureau. If it decides an error occurred, it must correct it within one business day. It then has three business days to report its findings to you.

Your own deadlines come first. Report an unauthorized item within 60 days of the statement being sent. After that, you could be liable for later transactions made before you report. The statute itself allows these windows to be extended in extenuating circumstances, such as extended travel or a hospital stay.

Report within two business days and a lost debit card can cost you the lesser of $50 or the unauthorized amount.

That $50 cap is the best case. Wait longer than two business days and you can be responsible for up to $500 in unauthorized transactions. A Texas legal aid page, Texas Law Help, lays out the same tiers. It notes that waiting past 60 days after the statement can mean owing more than that.

Know how the money moved

Protections depend on how the payment was made. Electronic fund transfers can carry extra federal protection. That category includes ATM transactions, debit card purchases, some online bill payments, and automatic payments pulled from your account.

Paper checks are different. Problems with them are generally governed by state law, unless the check was processed as an electronic transfer such as an ACH payment. The CFPB explains this in its answer on an unauthorized check. The sources do not describe state rules in any detail, so if a forged check is your problem, check your state's rules or ask a legal aid office.

So ask yourself two things before you call. Was this an electronic transfer or a check? And when was the statement showing it sent? Your answers shape what you say to the bank.

Make the report and keep a paper trail

Contact your bank or credit union as fast as you can and say you never authorized the payment. If a telemarketer pulled money from your checking account, ask the bank to reverse the debit. The CFPB's page on telemarketer withdrawals adds a warning. Under the FTC Telemarketing Sales Rule, a seller generally needs written or tape-recorded oral authorization, unless you paid by credit or debit card.

  1. Call the bank or use its mobile app, and say plainly that the transaction was unauthorized.
  2. Follow up in writing or by email. Include your account number, the date and time you noticed the problem, and when you first reported it.
  3. Write down every contact: who you spoke to, the date, and what they said.
  4. Read your deposit account agreement for bank-specific policies.

Not every error is fraud. The OCC's banking errors page says a bank may temporarily freeze funds from a deposit credited by mistake, but only up to the amount of that deposit. It may also remove funds credited in error without asking you. A deposit receipt may not be conclusive proof of a deposit, so give the bank details and a copy. If a check was altered, expect a request for an affidavit.

When to file a complaint

Try to resolve the issue with your bank first. If that stalls, a regulator may help, but only the right one. The OCC's Customer Assistance Group handles national banks and federal savings associations. Other institutions answer to the CFPB, FDIC, Federal Reserve Board, NCUA, or CSBS, depending on the type. If you are unsure, check your recent statements for the bank's name and charter details.

The OCC's complaint page asks for specifics. Have these ready:

  • Your full name and address as they appear on bank records
  • A phone number and email
  • The bank's name and address, and your account type
  • The names of staff you contacted
  • Whether the bank has responded

The online form limits your explanation to 4,000 characters, so keep it tight. Lead with dates and dollar amounts.

What the sources do not answer

Several questions remain open here. The sources do not say what happens if the bank finds no error and disagrees with you. They do not explain what documents a bank typically needs, or how a dispute might touch your credit reports or scores. They also do not cover credit card disputes, which follow different rules than bank accounts and debit cards. For filing steps with the CFPB, FDIC, Federal Reserve, NCUA, or CSBS, go to that agency's own site.

If your bank turns you down, keep your records and ask it to explain its decision in writing. Then contact the agency that regulates it. Do not wait on any of it. The 60-day and two-business-day windows are the parts you control.

Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.