Banks must refund most unauthorized transactions, but the timeline and your responsibility depend on when you report it

Yes, your bank will refund an unauthorized transaction in most cases — but speed matters. Federal law requires banks to refund transactions you didn't authorize, with one major catch: you have to report the fraud within a specific window. Report within two business days and your liability is capped at $50. Wait longer and you could lose up to $500. Wait more than 60 days and you may not recover anything at all.

The refund itself usually takes 10 business days once your bank opens a dispute, though some banks move faster. During that time, the money stays frozen — not in your account, not in the fraudster's hands. Your bank investigates by checking transaction details, security logs, and whether your card or account information was compromised. If they find the transaction was genuinely unauthorized, they credit your account and close the case.

Key Takeaways

  • Report unauthorized transactions to your bank within two business days to keep your liability at $50 or less.
  • Your bank has up to 10 business days to refund the money once you file a dispute, though many complete it faster.
  • If you wait more than 60 days to report, your bank may deny the refund entirely.
  • Debit card fraud has stricter timelines than credit card fraud, so act when ready if your debit card was compromised.
  • Your bank will ask for specific details: the transaction date, amount, merchant name, and how you believe the fraud occurred.

How to report the unauthorized transaction to your bank

Call your bank's fraud line when ready — do not wait for a statement or email. Most banks have a dedicated fraud number on the back of your card or on their website. Tell them the transaction date, the amount, the merchant name, and whether you recognize the merchant at all. Be clear: "I did not authorize this transaction."

Your bank will freeze the transaction and may cancel your card on the spot. They will ask whether you've lost your card, whether your account was hacked, or whether someone had access to your card information. Answer honestly — this helps them determine whether other accounts or cards are at risk. Ask the bank to send you a written dispute form, even if they say they can file it over the phone. Having documentation protects you if the bank later claims they never received your report.

If you bank online, you can also file a dispute through your account dashboard, but follow up with a phone call the same day. Online disputes create a record, but a phone call with a timestamp is harder for a bank to lose or mishandle.

The difference between debit card and credit card fraud

Debit card fraud is riskier because the money leaves your account when ready. Federal law (Regulation E) gives you only two business days to report debit card fraud before your liability jumps from $50 to $500. After 60 days, you lose all protection and the bank owes you nothing.

Credit card fraud is slower to hurt you because the charge doesn't pull money from your account right away. Federal law (the Fair Credit Billing Act) gives you 60 days to report credit card fraud, and your liability is capped at $50 no matter when you report it — as long as you report before the statement closes. This is why many people prefer credit cards for everyday purchases: the fraud protection window is wider and your liability is lower.

If you use a prepaid card or a money transfer service like PayPal or Venmo, the rules are different again. These services have their own dispute processes and timelines, which are usually shorter and stricter than bank rules. Check your service's terms for the exact window.

What happens during the bank's investigation

Once you report the fraud, your bank opens a dispute case and assigns it a reference number. Write this number down. The bank then contacts the merchant or the merchant's bank to ask whether the transaction was legitimate. They review security logs to see whether your PIN was used, whether the card was physically present, or whether the transaction came from an unusual location.

This investigation usually takes 10 business days, though banks can extend it to 45 days if they need more time. During this period, the money is held in limbo. You won't see it in your account, but the fraudster doesn't have it either. If the bank finds that the transaction was unauthorized, they credit your account and close the case. If they find that you authorized it or that you were negligent (for example, you left your card lying around), they may deny the refund.

Banks rarely deny refunds for genuine fraud, but they do deny them when they find evidence that you shared your PIN, left your card unattended, or made the transaction yourself. If your bank denies your dispute, you have the right to appeal — ask them in writing for the reason and request a supervisor review.

What to do if your bank denies the refund

If your bank refuses to refund the transaction, ask for the denial in writing and the specific reason. Banks must provide this. Common reasons include: the transaction matched your spending pattern, you entered your PIN correctly, or the merchant has proof of delivery or service.

If you believe the denial is wrong, file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov. The CFPB can pressure your bank to reconsider and will investigate whether the bank followed federal law. This process takes weeks, but it works — banks take CFPB complaints seriously.

You can also file a complaint with your state's banking regulator or attorney general's office. If the fraud involved identity theft, file a report with the Federal Trade Commission at identitytheft.gov. This creates an official record and may help you if the fraudster strikes again or if the fraud is part of a larger scheme.

Steps to take while waiting for the refund

Do not close the account or destroy any records. Your bank may need to contact you with questions during the investigation, and you may need to provide additional documentation. Keep the dispute reference number, the date you reported it, and the name of the bank employee you spoke with.

If the unauthorized transaction was a sign of a larger breach — for example, multiple fraudulent charges or charges from different merchants — tell your bank when ready. Ask them to monitor your account for 90 days and to alert you to any unusual activity. Some banks offer free credit monitoring after fraud; ask whether yours does.

Check your credit report at annualcreditreport.com to see whether the fraudster opened new accounts in your name. If they did, you have a bigger problem than a single unauthorized transaction, and you'll need to file an identity theft report with the FTC.

How to reduce the risk of unauthorized transactions

Enable transaction alerts on your bank account so you're notified of every charge over a certain amount. Set the threshold low — even $1 — so you catch fraud when ready. Most banks offer this for free through their app or website.

Use a credit card instead of a debit card for online purchases and at merchants you don't know well. Credit cards have stronger fraud protection and don't pull money from your checking account. If fraud happens, you have 60 days to report it and your liability is capped at $50.

Never share your PIN, CVV, or full card number via email, text, or phone — not even if someone claims to be from your bank. Your bank will never ask for this information. If you receive a call or email asking for it, hang up or delete it and call your bank directly using the number on your card.

Frequently Asked Questions

How long does it take to get my money back after I report fraud?

Your bank has up to 10 business days to refund the money once you file a dispute. Many banks refund within 3 to 5 business days. During this time, the transaction is frozen and you won't see the money in your account. If the bank needs more time to investigate, they can extend the timeline to 45 days, but they must tell you this in writing.

What if I reported the fraud late — more than 60 days after the transaction?

Your bank may refuse to refund you. Federal law does not require banks to refund unauthorized transactions reported after 60 days. However, some banks have internal policies that are more generous. Call your bank and explain the situation — they may make an exception, especially if you have a good account history or if the delay was due to circumstances beyond your control.

Can I dispute a transaction if I authorized it but the merchant didn't deliver what I paid for?

No — that's a different type of dispute called a "billing error" or "merchandise dispute," not fraud. You can still dispute it, but the process is different and the bank's timeline is longer. Contact your bank to file a billing dispute rather than a fraud dispute. You'll need to show that you made a good-faith effort to resolve it with the merchant first.

What if the fraudster used my debit card in person at a store?

Report it to your bank when ready. If your physical card was used, your bank will cancel it and send you a new one. The investigation will focus on whether the card was stolen or whether someone cloned it. You have two business days to report debit card fraud before your liability increases, so call right away.

Will the fraudster be arrested if my bank refunds me?

Probably not. Your bank's refund is a civil matter between you and the bank. Criminal prosecution depends on whether law enforcement investigates and whether they can identify and locate the fraudster. File a police report if you want a record, but don't expect an arrest. Focus on getting your money back and protecting your account from future fraud.