Banks must refund unauthorized transactions, but the timeline depends on how quickly you report it
If someone used your debit card, credit card, or bank account without permission, your bank is required by federal law to refund the money. The speed of that refund depends almost entirely on when you notice and report the fraud. Report it within two business days and your bank must refund you within one business day. Report it after 60 days and you may not get your money back at all.
The clock starts the moment you discover the unauthorized charge, not when it actually happened. A fraudster might have used your card weeks ago, but if you report it today, today is what counts for the timeline.
Key Takeaways
- Report unauthorized charges to your bank within two business days to get the fastest refund—usually one business day after you report it.
- If you report between three and 60 days after the charge appears, your bank has up to 10 business days to refund you, but you may lose some protection.
- After 60 days, your bank has no legal obligation to refund you at all, though some banks may still do so.
- Credit cards offer stronger fraud protection than debit cards—your liability is capped at $50 even if you report late, while debit card losses can be much larger.
- Your bank will likely freeze or close the compromised account while investigating, so have a backup payment method ready.
Report within two business days for the fastest refund
If you call your bank or report the fraud online within two business days of spotting the unauthorized charge, the bank must refund you within one business day. This is the fastest possible timeline and the one that gives you the most protection.
Two business days means two actual working days—not calendar days. If you discover fraud on a Friday evening, you have until the end of business on Monday to report it and still may have access to for the one-business-day refund window. If you report it Tuesday morning, the clock resets and you get your money back by Wednesday.
Most banks let you report fraud 24/7 through their website, mobile app, or phone line. You do not need to visit a branch in person, though you can if you prefer. Have your card number and the specific transactions ready when you call.
Report between three and 60 days for a longer refund window
If you report the fraud between three and 60 days after the charge appears on your statement, your bank has up to 10 business days to investigate and refund you. This is slower than the two-day window, but you are still protected.
The catch is that your liability increases. If you report within two days, you are liable for $0 (on credit cards) or up to $50 (on debit cards). If you report between three and 60 days, you may be liable for up to $500 of the fraudulent charges on a debit card, depending on your bank's policy. Credit cards cap your liability at $50 no matter when you report.
The 60-day clock starts from when the unauthorized transaction first appears on your statement or account, not from when it was charged. Check your statements regularly—many people do not notice fraud for weeks or months.
After 60 days, your bank may refuse to refund you
If you do not report the fraud within 60 days of the charge appearing on your statement, your bank has no legal obligation to refund you. At this point, the money is considered yours to have lost, and the bank can deny your claim entirely.
Some banks will still refund you as a courtesy after 60 days, especially if you have been a customer for years or if the fraud was extensive. But they are not required to, and many will not. This is why checking your statements weekly—or setting up account alerts—matters so much.
The 60-day rule applies to both debit and credit cards, though credit cards offer stronger protections in the window before 60 days. If you are a victim of identity theft and fraudsters opened accounts in your name, different rules apply; contact the Federal Trade Commission at IdentityTheft.gov for guidance on that situation.
Debit cards take longer to refund than credit cards
Debit card fraud refunds follow the same timeline as credit cards—one business day if you report within two days, up to 10 business days if you report between three and 60 days. But debit cards expose you to more risk during the investigation.
When you report debit card fraud, your bank freezes the card and the disputed amount while they investigate. That money sits in limbo for the entire investigation period. If you need that money to pay rent or buy groceries, you cannot access it. With a credit card, you simply dispute the charge and keep using the card; the credit card company fronts the money while they investigate.
Debit card fraud also carries higher liability. If you report within two days, you lose nothing. If you report between three and 60 days, you may owe up to $500. Credit cards cap your liability at $50 no matter when you report. For this reason, using a credit card for everyday purchases offers better fraud protection than a debit card.
What happens during the investigation period
Once you report the fraud, your bank opens an investigation. During this time, the bank contacts the merchant or the other bank involved in the transaction and asks for documentation. They review your account activity, check for patterns, and determine whether the charge was truly unauthorized.
Your bank will likely send you a temporary refund within one to three business days while the investigation continues. This temporary refund lets you access the money immediately, even though the investigation may take longer. Once the investigation closes, the refund becomes permanent.
If the investigation finds that you authorized the transaction—for example, you dispute a charge from a subscription service you forgot you signed up for—the bank will reverse the temporary refund and you will owe the money back. This is rare if you genuinely did not authorize the charge, but it can happen if there is ambiguity about whether you knew about the transaction.
Protect yourself by monitoring accounts and setting up alerts
The fastest refund starts with catching fraud early. Check your bank and credit card statements at least weekly, or set up transaction alerts through your bank's app or website. Most banks let you choose alerts for any transaction over a certain amount, or for all transactions.
If you spot a charge you do not recognize, report it immediately. Do not wait to see if it happens again or if you can figure out what it is. The sooner you report, the sooner you get your money back and the more protection you have.
If your card is lost or stolen, report it to your bank before any fraudulent charges appear. Reporting a lost card before fraud occurs gives you zero liability. After fraud appears, your liability depends on how quickly you report it.
Frequently Asked Questions
Do I have to dispute the charge in writing, or can I call my bank?
You can report fraud by phone, online, or in person—writing is not required. Most banks prefer you call or use their app because it creates an immediate record. If you do call, ask the bank to send you written confirmation of your report and keep that confirmation in case you need to prove you reported it within the required timeframe.
What if my bank says the charge was authorized and refuses to refund me?
You have the right to dispute the bank's decision. Ask the bank for a written explanation of why they denied your claim, then file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov. The CFPB can pressure the bank to reconsider, and banks often reverse denials when a complaint is filed.
Will I get my money back if the fraud happened on a weekend?
Weekends do not count toward the two-business-day or 10-business-day timelines. If you report fraud on Saturday, the clock starts Monday morning. Your bank must still meet the deadline, but the weekend does not count against you.
Can my bank charge me a fee to investigate fraud?
No. Federal law prohibits banks from charging you a fee to investigate unauthorized transactions. If your bank charges you for a fraud investigation, that is illegal—report it to the CFPB.
What if the fraudster used my information to open a new account in my name?
That is identity theft, not just unauthorized transaction fraud, and it follows different rules. Contact the Federal Trade Commission at IdentityTheft.gov, place a fraud alert with the credit bureaus, and file a police report. Your bank will still refund unauthorized charges on accounts you did not open, but the identity theft process is separate and more complex.