What happens when you report a fraudulent charge
When you report an unauthorized transaction to your bank, the bank opens a dispute case and assigns it to an investigator. That investigator does not immediately refund you—they first gather evidence to determine whether the charge was actually fraudulent or whether you authorized it and forgot. The bank has up to 10 business days to acknowledge your dispute and up to 45 calendar days to complete the investigation, though many resolve faster.
During this time, your bank may provisionally credit your account while they investigate, meaning you get the money back temporarily. But if they later determine you authorized the transaction or cannot prove fraud, they will take that money back. You are not protected from loss until the investigation concludes in your favor.
Key Takeaways
- Banks have 45 calendar days to investigate an unauthorized transaction, and they may provisionally credit your account within 10 business days while they work.
- Investigators pull transaction logs, device information, and IP addresses to determine whether the charge matches your normal spending patterns or came from an unfamiliar location.
- You must report the fraud within 60 days of receiving your statement, or your liability protection may be reduced or eliminated.
- If the bank finds you authorized the transaction—even if you do not remember it—they will reverse any provisional credit and you remain liable for the charge.
- Merchants also investigate on their end; if they can prove delivery or that you used the account, the bank may side with them over you.
The evidence banks examine first
Investigators start by pulling your transaction history and comparing the disputed charge to your normal spending. They look at the merchant category, the dollar amount, the time of day, and the frequency. If you normally spend $50 at grocery stores on weekday mornings and suddenly there is a $2,000 charge at a jewelry store at 3 a.m., that stands out as inconsistent.
They also examine the device and location data attached to the transaction. If the charge came from an IP address in another country but you were home when it posted, that is a red flag. If it came from a device your bank has never seen before, they note that. They cross-reference the merchant's location with where you typically shop. A charge from a gas station in your town looks different from one in a city you have never visited.
The bank pulls your account security history: whether your password was changed recently, whether you set up new payment methods, whether there were multiple failed login attempts before the charge, and whether you reported your card lost or stolen. If someone gained access to your account, there is usually a trail of account changes or access attempts that precedes the fraudulent transaction.
How merchants respond to chargebacks
When you dispute a transaction, the bank notifies the merchant and gives them a window—usually 7 to 10 days—to respond with evidence that the transaction was legitimate. The merchant can submit proof of delivery, a signature, a tracking number, IP address logs showing the account was accessed from your home, or records showing you used the card in person.
For online purchases, merchants often have strong evidence: they can show the shipping address matched your account, the order confirmation was sent to your email, and the package was delivered and signed for. For digital goods or services, they can show you logged into your account and downloaded the product. If the merchant provides this evidence, the bank often sides with them, and your provisional credit is reversed.
Some merchants fight every chargeback automatically, even weak ones. Others settle quickly if the amount is small. The merchant's response time and the quality of their evidence heavily influence the outcome. A merchant who responds with nothing but a tracking number showing delivery to your address is harder to dispute than one who provides nothing at all.
What disqualifies you from fraud protection
You lose protection if you authorized the transaction, even if you regret it or do not remember it. If you gave your card number to a website, clicked "buy," and the charge appeared, that is authorization. Fraud protection does not cover buyer's remorse, changed minds, or transactions you forgot you made.
You also lose protection if you fail to report the fraud within 60 days of receiving your statement. If your statement shows the charge on January 15 and you report it on March 20, you have missed the window. Some banks may still investigate, but your liability protection is gone, and you could be held responsible for the full amount.
If you shared your card details—your number, expiration date, or CVV—with someone and they used it, that is not fraud; that is authorization. The bank will ask whether you gave the merchant permission to charge you, and if you did, the dispute fails. Shared credentials are treated as shared access, not unauthorized use.
Negligence can also reduce your protection. If you wrote your PIN on the card, left your card unattended, or ignored suspicious account activity for weeks before reporting it, the bank may argue you contributed to the loss. This is rare, but it can happen.
The timeline from report to resolution
Day 1 to 3: You report the unauthorized transaction. The bank opens a dispute case and assigns a case number. You receive written confirmation of the dispute, usually by email or mail.
Day 3 to 10: The bank notifies the merchant and requests their response. Many banks provisionally credit your account during this window, though they are not required to. If they do credit you, the money appears in your account but is marked as provisional.
Day 10 to 30: The merchant responds with evidence or does not respond. The bank reviews what the merchant submitted. If the merchant provides strong proof of authorization, the investigation may end here.
Day 30 to 45: The bank makes a final information. They notify you and the merchant in writing. If you won, the provisional credit becomes permanent and the merchant is charged back. If you lost, any provisional credit is reversed and the charge remains on your account.
After day 45: The investigation is closed. You can appeal if new evidence surfaces, but the bank is no longer required to investigate further. Some banks allow one appeal; others do not.
How to strengthen your dispute
Document everything you remember about the transaction: the date, the amount, the merchant name, and why you believe it was unauthorized. If your card was lost or stolen, provide the date you discovered it missing and the date you reported it to the bank. If your account was compromised, describe what you noticed: unfamiliar charges, password changes you did not make, or login attempts from unknown locations.
Gather any supporting evidence: emails from the merchant, screenshots of your account showing the charge, records of your location at the time of the transaction, or statements showing you were out of the country. If you have a police report for identity theft or a stolen card, include that. If you can show you were in a different city or country when the charge posted, that helps.
Be specific in your dispute statement. Do not just say "I did not make this charge." Explain: "I did not authorize this merchant. My card was in my wallet at home. I have never shopped at this store. The charge posted at 2 a.m. when I was asleep." Specific details make the investigator's job easier and show you are paying attention to your account.
If the merchant is a subscription service you signed up for but forgot about, say so clearly. The bank will likely deny your dispute because you authorized the initial charge, but being honest about it prevents the bank from thinking you are lying about other details.
What happens if the bank sides against you
If the investigation concludes that you authorized the transaction or that the merchant has sufficient proof you did, the bank will not refund you. Any provisional credit is reversed, and the charge remains on your account. You are liable for the full amount.
You can ask the bank to review the decision if you have new evidence—for example, if you later discover your card was cloned and used at multiple merchants, or if the merchant admits they made an error. But the bank is not required to reopen a closed case. Most do not unless the new evidence is substantial.
If you believe the bank made an error, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) or your state's banking regulator. These agencies can force the bank to review the case, but they cannot overturn the decision themselves. They can only determine whether the bank followed the law.
Frequently Asked Questions
Do I have to pay the disputed charge while the bank investigates?
No. If the bank provisionally credits your account, you do not owe the charge during the investigation. If they do not provisionally credit you, you still do not have to pay it—the charge is frozen while they investigate. However, if the investigation concludes against you, you become liable for the full amount plus any interest or fees that accrued.
Can the bank investigate a transaction that is more than 60 days old?
They can, but you lose your fraud protection. If you report a charge from 90 days ago, the bank may still look into it, but you could be held liable even if fraud is found. Always report within 60 days of receiving your statement to keep your protection intact.
What if the merchant never responds to the chargeback?
If the merchant does not respond within the time window, the bank usually sides with you and issues a permanent credit. However, some merchants respond late, and the bank may still accept their evidence. The outcome depends on the bank's policies and how late the response is.
Can I dispute a charge if I used my debit card in person?
Yes, but it is harder to win. If you swiped your card at a store or ATM, the merchant or bank can argue you authorized it by entering your PIN or signing. You would need to prove the card was stolen or cloned, not just that you regret the purchase. Debit card fraud is treated differently than credit card fraud and offers less protection.
How long does a provisional credit stay on my account?
It stays until the investigation closes, which can be up to 45 days. If you win, it becomes permanent. If you lose, it is reversed and the charge reappears. Do not spend provisional credit as if it is yours—treat it as temporary money that may need to be returned.