You open your banking app and the balance is lower than it should be. Your first move matters. When you call, how you describe the loss and how well you track each contact can shape which federal protections apply to you. Start a written record right away, before the details blur.

A handwritten notebook with dated entries and a pencil on a sunlit kitchen table, beside a cup of tea and a folded statement.
A dated log of calls, names, and amounts is one simple way to keep track of a bank dispute.

Start by identifying what kind of loss you have

First, work out how the money left. Federal protections for unauthorized transfers generally apply to electronic fund transfers. That includes ATM withdrawals, debit card purchases, some online bill payments, and automatic payments pulled from your account. The Consumer Financial Protection Bureau explains the basics on its electronic fund transfer resources page.

Next, note the type of account. The Electronic Fund Transfer Act and Regulation E cover consumer checking, savings, and prepaid accounts. They also reach person-to-person and mobile payments that meet the definition of an electronic fund transfer. The sources I reviewed do not explain how liability works for credit cards or for checks, so check with your card issuer or bank, or look at the CFPB and FTC sites, if your loss involved one of those.

Then pin down what happened. The CFPB defines an unauthorized transaction as a charge or withdrawal you did not make or allow. In FAQs issued June 4, 2021, the agency also addressed transfers started with account access information that a third party tricked a consumer into sharing. If someone fooled you into handing over a code or password, say so plainly and ask the bank how that affects your case.

Notify your bank or credit union and track the deadlines

Call the number on the back of your card or on your statement. Say something simple: "I am reporting an unauthorized transaction on my account. Please open an error investigation." Then write down the date, the time, the representative's name, and any reference number.

Once you notify the bank, it generally has ten business days to investigate. If it finds an error, it must correct it within one business day. It then has three business days to report its findings to you. Mark those dates on a calendar and check them against your log.

Your own liability depends on timing:

  • Report a lost or stolen debit card within two business days of discovering the loss, and your liability is capped at the lesser of the unauthorized amount or $50.
  • Report after two business days, and you could be responsible for up to $500 in unauthorized transactions.
  • Notify the bank within 60 days of the statement that shows the unauthorized withdrawal. Waiting longer can expose you to the full amount of later transactions made after the 60 days and before you notify the bank.

You may hear that you need a police report or must contact the merchant first. Under the CFPB FAQs, a financial institution generally cannot require a police report or other documentation as a condition of starting an error investigation. It also cannot require you to contact a merchant first. If a representative says otherwise, politely ask them to note the request and start the investigation anyway.

Use the complaint process and the credit reporting dispute path

If the bank misses a deadline or brushes you off, you can file a complaint with the CFPB. The agency asks that you try to resolve the problem with the company first. It says it sends more than 100,000 complaints a week to companies, and that most respond within 15 days. You can start at the CFPB complaint page.

Fraud can also leave bad marks on your credit report. For credit report errors, the CFPB says the law requires you to dispute the information first directly with the consumer reporting agency, under 15 U.S.C. 1681i(a). Keep a copy of each letter and any mailing receipt. If the agency does not handle the dispute properly, you can then bring that problem to the CFPB.

Keep your records together in one folder, paper or digital. The sources I reviewed do not spell out exactly which records to save or what a dispute letter should say. A sensible set includes the statements showing the charges, any alerts from your bank, and your call log. Nothing in the sources says what to do if the bank denies your claim, or how state law might help, so look to the regulators' sites for that.

Report to the FTC and law enforcement, and recognize scam red flags

The Federal Trade Commission publishes advice on what to do if you were scammed, including how to report fraud. Start there. The sources I reviewed do not detail how to file a police report or what to bring, and the FTC memo to law enforcement was not readable in the material I had. If you want to involve local police, call their non-emergency line and ask what they need.

Be careful in the weeks after a loss. Scammers sometimes come back with a second pitch. The CFPB warns that criminals impersonate the agency itself, and lists imposter scams, phishing, and spoofing among common fraud types on its fraud and scams page. The FTC adds two more red flags:

  • A caller who says you missed jury duty and threatens arrest.
  • Someone posing as a charity or sweepstakes official.

If someone contacts you about an open dispute, hang up. Call the number printed on your card, or go to the official agency site by typing the address yourself. Rules and timelines can change, so confirm current details with the FTC and CFPB before you act.

Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.