Regulation E, the federal rule that governs debit card and other electronic transfers, puts a stopwatch on banks. Once a customer reports a disputed charge, the bank has 10 business days to determine whether an error occurred. It can stretch to 45 days only if it provisionally credits the disputed amount back into the account within those first 10 business days, and the period grows to as many as 90 days for point-of-sale purchases.

Two clocks, and only one belongs to the bank

The customer’s clock and the bank’s clock are separate. Under 12 CFR 1005.11, written by the Consumer Financial Protection Bureau, a customer reports an error within 60 days after the institution sends the periodic statement on which the problem first appears. The bank’s investigation clock then runs from the moment it receives the notice, not from the date of the purchase and not from the statement date.

The 10-day deadline counts business days, while the 45 and 90 days run from receipt of the notice. A dispute reported on a Monday and a dispute reported on a Friday before a holiday weekend therefore reach their 10-business-day mark on different calendar dates, so the calendar date has to be counted rather than guessed.

The question for anyone with a charge they do not recognize is what to do first, and by when. The answer is to report it to the bank promptly, in a way that creates a record, and to count the 60 days from the date the statement was sent. The rule also lets an institution require written confirmation within 10 business days of an oral notice, so a phone call alone may not be enough.

A disputed debit charge often turns out to be a scam rather than a billing slip, and the first hour matters. The Senior Fraud Defense & First-Hour Recovery Kit includes the first-hour recovery plan for people who have just found a fraudulent charge.

See the first-hour plan for a debit card dispute →

What provisional credit does and does not settle

When a bank cannot finish within 10 business days, the regulation lets it keep investigating for up to 45 days from receipt of the notice, provided it provisionally credits the account for the alleged error within those 10 business days. It must tell the customer within two business days after the provisional credit, and if it then finds an error, it must correct it within one business day. The results must be reported within three business days after the investigation ends.

The 45 days is not the ceiling in every case. The same section extends the investigation to 90 days when the transfer was a point-of-sale debit transaction, was not initiated within a state, or happened within 30 days of the first deposit into the account. A card swiped at a store counter is a point-of-sale transaction, so many everyday disputes sit on the longer clock.

How fast the report is made sets how much is at risk

A separate rule, 12 CFR 1005.6, ties a customer’s exposure on unauthorized transfers to reporting speed. It has three tiers:

• Within two business days: liability does not exceed the lesser of $50 or the amount of unauthorized transfers before notice.
• After two business days: liability does not exceed the lesser of $500, plus later transfers the institution can show timely notice would have prevented.
• After the 60-day statement window: a consumer who does not report an unauthorized transfer that appears on a statement within 60 days of its transmittal risks liability for transfers after that window.

The decision clock and the liability tiers do different jobs. One tells the bank how long it has to rule; the other tells a customer how much is exposed while waiting.

Why the provisional credit matters to a household budget

For a household living close to the margin, the practical difference between a bank that credits the money back in 10 business days and one that simply investigates is whether rent clears in the meantime. Under 1005.11, the extended 45 or 90 days is available only because of that credit. A bank that neither decides nor credits within 10 business days has not used the extension the regulation gives it.

Putting a disputed debit charge on the record

The route that costs nothing is the bank’s own dispute process, backed by the rule text at eCFR. Start by contacting the bank, then follow up in writing and keep the date of the report, the name of whoever took it and any reference number, since each date feeds one of the clocks above.

Gather the statement showing the charge, the date that statement was sent, the amount and merchant name, and a note of whether the card was used in person. Then mark the calendar for 10 business days after the bank received the notice, and again for 45 and 90 days, and ask in writing whether a provisional credit has been posted.

For keeping those dates straight, The Senior Fraud Defense & First-Hour Recovery Kit includes a fraud evidence and report log and the family code word, in a 9-page kit.

Click here to get The Senior Fraud Defense & First-Hour Recovery Kit →

This piece was drafted with AI assistance; the figures and dates were checked against 12 CFR 1005.11 and 12 CFR 1005.6 on eCFR, linked above.