How much am I liable for if my debit card was used without permission
Use the free tool — Bank Fee Refund
First, make sure it's really unauthorized
Before you call the bank, check two things: is this a subscription you forgot about, and does the merchant name on your statement look different from where you actually shopped? Many "unrecognized" charges turn out to be one of those. If you're sure you never made the charge and never gave anyone permission, it's an unauthorized transaction.
The two clocks that decide how much you owe
Under Regulation E, two different deadlines matter, and they lead to different outcomes:
- 60 days from the date of the statement showing the error — this is your deadline to notify the bank of an unauthorized debit, a duplicate charge, or a wrong amount. Miss this window and you may lose protection. (CFPB, Regulation E, 12 C.F.R. 1005.11)
- 2 business days from when you learn a debit card is lost, stolen, or used without permission — report it within this window and your liability is capped at $50. (CFPB — lost or stolen debit card)
The material behind this guide doesn't spell out what happens if you report later than 2 business days — ask your bank directly, and check the CFPB page above before you assume any amount.
What the bank must do once you report it
Report the unauthorized charge in writing — a letter or a secure message, not just a phone call — and keep a copy. Once you notify the bank, it generally must investigate within 10 business days. If your money isn't back by then, ask what the bank's process is; the source material doesn't give further detail beyond the 10-business-day investigation window. (CFPB, Regulation E)
If the bank isn't responding or you disagree with the outcome, you can file a complaint with the CFPB. The bank usually has to give you a written response, typically within 15 days. (CFPB — submit a complaint)
If someone else — like a caregiver — also has access to your account
If a family member or caregiver has your debit card or account access, ask your bank about setting up a trusted contact and turning on account alerts, so you see charges as they happen. This is worth mentioning when you call, especially if you're not sure who made a charge.
Reduce the chance of it happening again
If it was fraud, ask the bank for a new card number — don't keep using the old one. Separately, banks can only charge overdraft fees on one-time debit card and ATM purchases if you opted in; you can opt out, so the card is simply declined instead of overdrawing. This doesn't affect checks or autopays. (CFPB — overdraft opt-in) If you're thinking about switching banks, Bank On lists certified low-fee, no-overdraft checking accounts near you.
What to do next
Paste the charge — the amount, the date, the merchant name as it appears on your statement — into the free tool. It reads your own numbers and tells you whether the $50 cap and the 60-day window still apply to you, gives you the words to say to the bank, and the letter to send if you need to put the dispute in writing.
This is not legal or financial advice. A fee waiver is the bank's courtesy, not a right; a Regulation E dispute is a right with real deadlines. Confirm the deadlines and your specific situation with the CFPB pages linked above before relying on them.
The full version — $4.99
Dispute kit · One statement: Reg E letter, waiver message, CFPB complaint text, no-more-fees checklist
Use the free toolBank Fee Refund explains bank fees and Regulation E in plain language; it can be wrong, and it is not legal or financial advice. Fee waivers are at the bank's discretion. Deadlines are from federal regulation as published by the CFPB — confirm before relying on them. Nothing you paste is stored.