Disputing a Card Charge: The Federal Clocks for Credit vs. Debit, Followed Day by Day
One bad charge, two legal machines. A day-by-day walk through the federal dispute clocks for credit cards and debit cards — the 60-day window, the 30-day and 10-business-day answers, and the categories each law leaves out.
Not legal advice. A plain-English explainer of how this process generally works, written by a researcher who isn't a lawyer. Full disclaimer

On this page8 sections
Most people think of a "chargeback" as one thing: you call the bank, the bank takes the money back. In federal law it's at least three different things, run by two different statutes, on clocks that don't match — and which one you're in depends mostly on a choice you made at checkout, when you picked which card to tap.
A credit card dispute runs under the Fair Credit Billing Act and its regulation, Regulation Z. A debit card dispute runs under the Electronic Fund Transfer Act and Regulation E. This piece follows the same bad charge through both, day by day, then sorts out the charges neither law was built for. It explains how the process works in general; it doesn't evaluate anyone's particular dispute.
Three words first
A billing error is the credit-card law's term for a charge that's wrong in one of a defined list of ways. An error (no "billing") is the debit-card law's term, with its own, shorter list. A chargeback is not a legal term at all — it's the card network's mechanism for pulling money back from the merchant's bank, run under Visa, Mastercard and other network rules that are private contracts. The federal laws govern what your bank or card issuer owes you. The network rules govern what your issuer can recover from the merchant.
The example charge
Picture a $640 order — a winter coat and boots — paid online. The package never arrives. Your statement showing the charge was sent on Day 0. Here's what federal law requires in each lane.
Lane one: the credit card, day by day
Day 0 to Day 60 — the notice. Under 12 CFR 1026.13, a billing error notice is a written notice that must be received by the creditor "no later than 60 days after the creditor transmitted the first periodic statement that reflects the alleged billing error." Three details inside that sentence do most of the work. It's measured from when the statement was sent, not from when you noticed. It's measured to when the letter is received, not mailed. And it has to arrive at the address the issuer discloses for billing errors, which is often different from the payment address — the FTC's guidance on disputing credit card charges repeats that warning, and the FTC publishes a sample dispute letter. A phone call or an app button may well start the issuer's own process, but the federal protections are written around the written notice.
Non-delivery qualifies on its own terms. The regulation's list of billing errors includes property or services "not accepted by the consumer or the consumer's designee, or not delivered to the consumer or the consumer's designee as agreed." So does a charge you didn't make, a payment or refund that wasn't credited, a math error, and a charge you simply want documentation for.
Day 60 to Day 90 — the acknowledgment. The issuer must acknowledge your notice in writing within 30 days of receiving it, unless it resolves the dispute first.
The long middle — the freeze. This is where credit is structurally kinder. While the dispute is open, you "need not pay (and the creditor may not try to collect)" the disputed amount and related charges. The issuer may not "make or threaten to make an adverse report" about your credit standing over it, and may not close or restrict the account because of it. If you're enrolled in the issuer's own autopay plan, it can't deduct the disputed amount when your notice arrives at least three business days before the scheduled payment. Everything undisputed on the bill stays due as usual.
By two billing cycles, never past 90 days — the answer. The issuer must either correct the error and credit your account, or explain in writing why it believes there was no error — and send the documentary evidence if you ask for it.
If the answer is no. You're told what you owe and when. The issuer can't call it delinquent until the greater of your normal grace period or 10 days has passed. If you dispute again in writing within that time, the issuer may still report the amount as delinquent, but only if it also reports that the amount is in dispute and tells you who it reported to.
There's a quiet enforcement lever in the statute itself. Under 15 U.S.C. 1666(e), a creditor that fails to follow these procedures forfeits the right to collect the disputed amount and finance charges — capped at $50.
Lane two: the debit card, day by day
Day 0 to Day 60 — the notice. Regulation E, at 12 CFR 1005.11, also gives you 60 days after the institution sends the statement showing the problem. Unlike the credit lane, an oral notice counts. The bank may require written confirmation within 10 business days of your call — and if it asks and doesn't get it, it doesn't have to give you provisional credit, though CFPB commentary says it must start investigating promptly on the oral notice rather than waiting for the letter.
Ten business days — the first answer. The bank must investigate and decide within 10 business days of your notice. It can take longer — up to 45 days — only if it provisionally credits the disputed amount back into your account within those first 10 business days, so you have use of the money while it finishes. For debit card purchases at the point of sale, for transfers begun outside the United States, and for new accounts, those windows stretch: 20 business days instead of 10 for new accounts, and 90 days instead of 45.
If the answer is no. The bank must explain its findings in writing and tell you that you can ask for the documents it relied on. If it reverses a provisional credit, it has to tell you, and for five business days afterward it must honor checks and similar items you wrote against that money, without overdraft fees for them.
That's the debit lane's central difference, and it's physical rather than legal: in a credit dispute the money never left; in a debit dispute it's already gone from the account you pay rent from.
The gap nobody mentions: debit's list is shorter
Regulation E's list of "errors" covers unauthorized transfers, incorrect transfers, omissions from a statement, the bank's own bookkeeping mistakes, receiving the wrong amount from an ATM, and requests for documentation. It does not include goods that never arrived or weren't what was promised.
The third machine: claims and defenses
Credit cards carry one more right that debit cards lack entirely. Under 12 CFR 1026.12(c), if a merchant won't resolve a dispute about the purchase itself — the coat arrived and fell apart — you can assert your claims and defenses against the card issuer and withhold payment, up to the amount of credit still outstanding for that transaction.
It comes with limits written in 1974 for a world of department stores: you must first make a good-faith attempt to resolve it with the merchant, the transaction must exceed $50, and it must have occurred in your state or within 100 miles of your billing address. The limits drop away when the merchant is the card issuer, is controlled by it, or reached you through the issuer's own mail solicitation.
| Question | Credit card | Debit card |
|---|---|---|
| Federal law | Fair Credit Billing Act, Regulation Z | Electronic Fund Transfer Act, Regulation E |
| Window to notify | 60 days from the statement's transmittal | 60 days from the statement's sending |
| Form of notice | Written, to the billing-error address | Oral or written; bank may require writing within 10 business days |
| Item never delivered | A listed billing error | Not a listed error; network and bank policy only |
| Money during the dispute | Never left; disputed amount can be withheld | Already gone; provisional credit if the bank takes over 10 business days |
| Deadline for the answer | Two billing cycles, 90 days at most | 10 business days, or 45 (90 in some cases) with provisional credit |
| Stranger used your card | Liability capped at $50 | $50, $500 or unlimited, depending on how fast you report |
| Quality complaint | Claims and defenses right, with $50 and 100-mile limits | No federal equivalent |
Sources: the official pages cited in this article.
When the charge isn't yours at all
Fraud runs on a separate rulebook in each lane. For a credit card, Regulation Z caps your liability for unauthorized use at the lesser of $50 or the amount charged before you notify the issuer. For debit, 12 CFR 1005.6 builds a staircase when a card or PIN is lost or stolen: at most $50 if you notify the bank within two business days of learning of the loss; up to $500 if you wait longer; and unlimited liability for transfers that happen more than 60 days after a statement showing unauthorized activity was sent, if you haven't reported by then. The rule allows notice "in person, by telephone, or in writing," and requires the deadlines to be extended for extenuating circumstances such as extended travel or a hospital stay.
Two more points temper that staircase. The regulation doesn't let a bank raise your liability because you were careless — writing your PIN on the card is the classic example. And both card networks' voluntary "zero liability" policies and state law can only make the result better for you, never worse: Regulation E says a state law or account agreement imposing less liability controls.
When the machinery stalls
Two neighboring topics are worth separating from all of this. A charge that keeps recurring after you canceled a subscription is a billing-error dispute of its own, covered in the piece on cancellation rights. And a purchase you simply regret isn't an error of any kind — the limits of return rights are set out in the explainer on what US law actually guarantees on returns.
The shape to remember: the credit lane pauses a bill; the debit lane sets a deadline for returning money already gone. Both run from the statement date, not the day you noticed.


