Your Rights After an Unauthorized Card Charge

Unauthorized Charges Basics

An unauthorized card charge is a payment you did not authorize, did not receive, and cannot explain as a legitimate purchase. It can come from card theft, account takeover, merchant fraud, or a payment that was authorized for one amount and later changed. In the U.S., the Fair Credit Billing Act (FCBA) limits consumer liability for unauthorized credit card charges to $50 if you report the loss before the bank notifies you of the fraud; if you report after, liability can be higher. For debit cards, the Electronic Fund Transfer Act (EFTA) generally caps unauthorized losses at $50 if you report within 2 business days, and up to $500 if you report after that window, with potentially unlimited losses after 60 days for statements sent to you.

Start with the payment details on your statement: merchant name, transaction date, posted date, amount, and any reference number. Many banks show whether the charge is pending or posted; pending transactions can disappear if the merchant never completes the sale, but you should still act quickly. A practical example: a charge labeled “ONLINE*XYZ” for $79.12 appears on a Tuesday, then posts on Friday; the dispute process usually depends on the posted transaction, not the pending one. If you use a wallet app, check whether the charge is tied to a specific device or tokenized payment method, because that can change what evidence your bank requests.

Two measurable facts help you plan. First, the FCBA dispute window for credit card billing errors is typically 60 days after the first statement containing the error is mailed or delivered. Second, for debit card unauthorized transactions, the EFTA reporting timing is tied to 2 business days and 60 days after the statement is sent; those deadlines can be shorter than people expect, which is why delays matter.

As a side observation, I often see disputes stall because people submit screenshots without the statement page showing the first appearance date. Banks and card networks usually need that “first statement” timing to apply the correct rules.

Common Failure Points

People often treat an unauthorized charge like a simple customer service complaint, then wait for a refund request to “process.” That approach fails because disputes rely on specific categories (unauthorized, goods not received, billing error) and deadlines tied to the first statement date. Another frequent mistake is disputing the charge without freezing the account or changing credentials; if the same merchant or fraudster is still active, new transactions can keep arriving while your dispute is pending.

Unauthorized charges also interact with how card payments settle. A card transaction typically moves through authorization (a “hold” or approval) and then settlement (final posting). If you dispute a posted transaction, the bank may request evidence from the merchant and may temporarily reverse provisional amounts, but the final outcome depends on the payment type and the documentation trail. Some merchants use recurring billing or “delayed capture,” which can look unauthorized even when it is legitimate; the bank still needs you to explain why you did not authorize it.

Biologically, unauthorized charges do not directly affect your body, but the stress response can. Financial uncertainty can raise perceived threat and trigger sleep disruption, which then worsens decision-making and increases the chance of missing deadlines. That is why you should treat the dispute as a time-sensitive task, not a vague “try to get it back” project.

Supporting technologies matter because they shape what your bank can verify. Chip-and-PIN, tokenization in mobile wallets, 3D Secure authentication, and device fingerprinting influence whether a transaction appears “authenticated” to the bank. A fraudster can still succeed without the cardholder’s consent, but if the bank sees strong authentication signals, it may ask for more documentation. A mild frustration point: many dispute forms ask for “proof of non-receipt” even when the real issue is “I never authorized this merchant,” and you have to translate your facts into their categories.

Steps To Dispute A Charge

Act Within The Deadline

Check the first statement date that shows the charge, then start your dispute within the required window. For credit cards in the U.S., the FCBA billing error process generally requires notice within 60 days of the statement containing the error. For debit cards, the EFTA timing is tied to reporting within 2 business days and later within 60 days after the statement is sent. If you discover the charge on a Tuesday but the statement was delivered earlier, your clock may already be running.

In practice, set a reminder for the “first appearance” date and count calendar days carefully. If your bank’s dispute portal shows a submission timestamp, save it. I once saw a case where a person submitted a dispute on day 61 because they counted from the day they noticed the charge, not from the statement date; the bank treated it as late.

Freeze Access And Change Credentials

Before you dispute, stop further damage by locking the card or account and changing passwords tied to the payment method. If the unauthorized charge came from an online account, update the email password and any reused passwords, then enable multi-factor authentication. If you used a mobile wallet, remove the card from the wallet and re-add it after the bank issues a replacement card.

This works because disputes do not prevent new transactions automatically; fraudsters can continue charging until you cut off authorization paths. A realistic outcome target: within 1 business day, you should have the card locked and the account credentials changed, which reduces the chance of additional unauthorized posts.

Gather Evidence With Dates

Collect the statement page, transaction ID, merchant descriptor, and any communications you received. If you have no relationship with the merchant, write a short timeline: when you noticed the charge, whether you recognize the merchant, and whether you received any goods or services. If you recognize the merchant but not the amount, note the expected plan, order, or subscription terms.

Evidence can be simple but must be specific. For example, a screenshot of your account showing no orders for that date range, plus the statement page showing the first appearance date, often helps. If the bank asks for “proof,” use what you have: purchase history, delivery confirmations you did not receive, or a record of cancellation.

Choose The Correct Dispute Category

Dispute categories change what the bank asks for and how it routes the case. “Unauthorized” disputes focus on consent and account access; “goods not received” focuses on delivery and merchant fulfillment; “billing error” focuses on incorrect amounts or credits. Pick the category that matches your facts, then describe the mismatch in plain language.

In practice, a short statement like “I did not authorize this merchant and I did not receive any goods or services” is clearer than a long story. If you select the wrong category, the bank may request evidence that does not fit your situation, which can slow resolution.

Contact The Bank In Writing Too

Use the bank’s dispute channel, then follow up with a written message through the bank’s secure messaging or by mail if the portal does not confirm key details. Keep copies of what you submit and note the case or reference number. For credit cards under FCBA, written notice can matter because the law ties the billing error process to timely notice.

A practical number: aim to have your dispute filed within 24 hours of discovery, then your written follow-up within 2–3 business days. That schedule reduces the chance that you miss the statement-based deadline while you wait for the bank to acknowledge the claim.

Track Temporary Credits And Outcomes

Banks sometimes place a temporary credit while investigating, then reverse it if the merchant provides documentation. Track the status in your dispute portal and watch for changes in the available credit or account balance. If the bank denies the dispute, ask for the reason in writing and request the evidence the merchant submitted, where permitted by policy.

In practice, you may need to respond to additional questions within a short window. If you miss that response window, the bank may close the case. A mild aside: some denial letters list “insufficient documentation” without specifying what was missing, so you may need to ask for a clearer checklist.

Report Identity Theft When Needed

If you suspect account takeover or identity theft beyond one charge, file a report with the relevant authorities and consider a fraud alert or credit freeze. In the U.S., identity theft reporting often starts with the Federal Trade Commission (FTC) identity theft report, which can support later disputes. If the fraud involves a specific online account, report it to the service provider as well.

This matters because repeated fraud can indicate a broader compromise. A realistic outcome target: within 1 week, you should have a record of reports and a clear list of accounts affected, which helps when banks ask for a broader fraud narrative.

Case Examples

Example 1: Merchant You Never Used

Jordan notices a posted charge for $142.36 on a credit card statement dated August 1. The merchant descriptor is unfamiliar, and Jordan has no orders, deliveries, or subscriptions tied to that name. Jordan locks the card the same day, files an “unauthorized” dispute through the bank portal, and uploads the statement page showing the first appearance date plus a short timeline. The bank requests confirmation that Jordan did not authorize the merchant and asks whether any account passwords were changed recently; Jordan answers and updates the email password and enables multi-factor authentication. The bank temporarily credits the amount while investigating and later resolves the dispute in Jordan’s favor after the merchant fails to provide proof of authorization.

Example 2: Charge Looks Like A Subscription

Sam sees a debit card charge for $9.99 labeled as a recurring service on a statement first delivered on March 10. Sam canceled a free trial months earlier and has no access to the service. Sam disputes as “unauthorized” because the account shows no active subscription, then also checks the email for cancellation confirmation and screenshots of the account status. The bank asks for evidence of cancellation and the timeline of access; Sam provides the cancellation date and the last login date from the service account. The bank denies the first attempt due to “insufficient proof,” then Sam submits additional documentation and the dispute is reopened. The second decision reverses the denial after the bank verifies the cancellation record.

Chargeback Vs Dispute Checklist

If you are comparing outcomes, treat “dispute” and “chargeback” as related processes rather than separate products. The bank runs the process, and the card network rules govern the exchange of evidence between bank and merchant; your role is to provide accurate facts and meet timing requirements.

Common Mistakes To Avoid

Submitting a dispute without the statement page that shows the first appearance date can slow or derail the case. Another mistake is describing the charge as “fraud” without stating what you did not authorize, which leaves the bank to guess the category. People also forget to lock the card or remove the payment method from online accounts, then see additional charges and assume the first dispute covers them.

Some consumers wait for a merchant refund request to complete before disputing. That delay can cost time if the dispute window is statement-based. A mild frustration pattern: merchants sometimes respond with generic “we processed your refund” messages that do not match the posted transaction, and banks may treat those messages as insufficient proof.

Finally, avoid sharing sensitive information in unsecured channels. If you email screenshots, remove full account numbers and include only what the bank requests. A side observation from reviewing dispute forms: many banks accept partial redaction, but they still need the transaction ID and the statement date.

FAQ

How Fast Must I Report An Unauthorized Charge?

For U.S. credit cards, the FCBA billing error process generally requires notice within 60 days of the statement containing the error. For debit cards, the EFTA timing uses 2 business days and 60 days after the statement is sent, so act quickly after you see the first statement.

What If The Charge Is Pending?

Pending transactions may disappear if the merchant never completes the sale, but you should still document the charge and contact your bank. Disputes usually target posted transactions, so ask the bank whether to dispute the pending item or wait for posting.

Will I Get My Money Back Immediately?

Some banks issue a temporary credit while investigating, but timing varies by bank and card network rules. If the merchant provides documentation, the bank may reverse the credit, so monitor your account balance and dispute status.

What Evidence Helps Most For Unauthorized Claims?

Use the statement page showing the first appearance date, the transaction ID, and a short timeline of what you did and did not authorize. If relevant, include account screenshots showing no orders or no active subscription, plus cancellation records.

What If The Bank Denies The Dispute?

Request the reason for denial in writing and ask what evidence would change the outcome. If you have additional documentation, submit a reconsideration or appeal within the bank’s stated timeframe, and keep copies of every submission.

Author's Insight

Unauthorized charge disputes succeed when the consumer’s facts match the bank’s dispute category and the timing rules tied to the first statement date. The most practical preparation is not a dramatic story; it is a clean timeline, transaction identifiers, and evidence that shows non-authorization or non-receipt. I also see fewer delays when people lock the card and change credentials before filing, because it reduces new transactions that complicate the case. If a bank requests “proof,” the best response is usually the most specific documentation you have, even when it feels mundane.

Key Takeaways

• Use the statement’s first appearance date to track deadlines for credit card (often 60 days under FCBA) and debit card reporting windows under EFTA.
• Lock the card and change credentials quickly to stop additional unauthorized charges while the dispute is pending.
• Choose the dispute category that matches your facts, then submit a short timeline plus the statement page and transaction ID.
• Monitor dispute status and respond to follow-up requests within the bank’s time limits.
• If denied, request the denial reason and submit additional documentation for reconsideration when you have it.