Finding money gone from your debit card account is a sickening feeling, and if it just happened to you, take a breath. What you do in the next few hours matters more than anything else, because there is a clear order of steps that protects whatever rights you still have. This walks you through exactly what to do, what the law actually entitles you to, and an honest read on whether the money is likely to come back.
First, figure out which kind of loss you are dealing with
Before you call anyone, take thirty seconds to identify what happened, because your rights hinge entirely on this one distinction. The protections are very different depending on whether the transaction was unauthorized or whether you were tricked into sending the money yourself.
If your card or card number was stolen, skimmed, or your account information was taken (including through fraud or robbery) and money then moved without any action from you, that is an "unauthorized electronic fund transfer." It carries strong legal protection under the law. Importantly, even if you were deceived into revealing your credentials, transfers initiated using account access obtained through fraud or robbery still count as unauthorized.
If instead you were tricked into sending the money yourself (wiring funds to a "safe account," paying a fake company, or sending through a payment app), that is an authorized payment. It has far weaker protection, and that money is frequently not recoverable. You should still act fast, but it is important to know which situation you are in so you have realistic expectations.
Call your bank right now and stop the bleeding
The single most important action is to contact your bank or credit union immediately. Speed matters both for capping your liability and for any chance of clawing money back. Do this before you do anything else on this list.
- 1.Call the toll-free number on the back of your card, or use your bank's app or online portal, to report the unauthorized transaction.
- 2.Ask the bank to cancel and replace the card so no further charges can hit it.
- 3.If money was sent to a scammer through an authorized transfer, still call right away and ask them to try to reverse or recall it, while understanding that this may not succeed.
- 4.Write down who you spoke with, the date and time, and any reference or case number they give you.
Report within two business days to keep your liability at fifty dollars
For unauthorized transfers, the timing of your report directly determines how much of the loss you could be on the hook for. This is set by the Electronic Fund Transfer Act and its implementing rule, Regulation E.
- Report within 2 business days of learning of the loss or theft, and your liability is capped at the lesser of $50 or the amount of the unauthorized transfers.
- Report after 2 business days but within 60 days of the statement showing the charge, and your cap can rise to $500.
- Fail to report within 60 days of the statement, and your liability for transfers after that window can become unlimited.
In plain terms, the faster you call, the less you can be held responsible for. There is real money riding on doing this today rather than next week.
Put your dispute in writing and keep proof
A phone call gets the ball rolling, but you should always follow it up in writing. A written record protects you if there is any disagreement later about what you reported and when.
- 1.Send the bank a dispute letter that describes the unauthorized transaction.
- 2.Send it within 60 calendar days of the statement that showed the charge.
- 3.Send it by certified mail with a return receipt so you have proof the bank received it. The FTC publishes a sample dispute letter you can follow.
- 4.Keep a copy of the letter and every confirmation, statement, and message related to the fraud.
What the bank is required to do, and by when
Once you have reported an unauthorized transaction, Regulation E sets out a specific error-resolution timeline your bank must follow. Knowing these deadlines helps you hold them to it.
- The bank generally has 10 business days to investigate (20 business days if your account is less than 30 days old).
- It must report its findings to you within 3 business days of completing the investigation.
- If it needs more time, it must generally issue a provisional credit for the disputed amount (minus up to $50) while it keeps investigating.
- It must resolve the dispute within 45 days, extended to up to 90 days for transactions made in a foreign country, on an account open less than 30 days, or for debit card point-of-sale purchases.
An honest look at whether the money comes back
This is the part that matters most, so here it is straight. Whether you recover your money depends almost entirely on that unauthorized-versus-authorized distinction, and the difference is stark.
If the loss was unauthorized (your card or account info was used without you moving the money), you have strong, time-sensitive protection. The bank must investigate and refund the amounts it verifies as unauthorized, and your out-of-pocket liability is capped under the tiers above when you report quickly. There is no automatic guarantee, since the bank still investigates the claim, but reporting promptly puts the law firmly on your side.
If you authorized and sent the money yourself, be prepared for a harder reality. These payments are generally outside Regulation E protection, and they are often not recoverable. The FTC states it plainly, that if you are scammed into moving your money out of your account, you will not be protected and you probably will not get that money back. For an authorized domestic bank or wire transfer, the only meaningful recovery path is reporting fast enough that the receiving bank may be able to freeze the funds before the scammer withdraws them, and even that is not guaranteed. That window is short, which is why immediate action is the whole game. None of this is meant to crush your hope, only to be honest so you focus your energy where it can actually help.
Report it through official channels even if recovery looks unlikely
Report the fraud regardless of how the recovery odds look. Reporting aids investigations, can support your bank claim, and in some cases helps authorities freeze fraudulently transferred funds. Keep written records of every report you file.
- 1.File with the FTC at reportfraud.ftc.gov using the "Report Now" button. Your report feeds the FTC's Consumer Sentinel database, which is shared with over 2,000 law enforcers. You can file anonymously.
- 2.File with the FBI's Internet Crime Complaint Center at ic3.gov, using the complaint form at complaint.ic3.gov. Anyone may file, including on behalf of another person. Rapid reporting can in some cases support freezing of fraudulently transferred funds, so do this as soon as you discover the loss. Save or print your complaint, because it is the only copy you get.
- 3.If your bank or credit union fails to resolve an unauthorized-transaction dispute properly, submit a complaint to the CFPB at consumerfinance.gov/complaint or call (855) 411-CFPB (2372). The CFPB forwards your complaint to the company, which generally responds within 15 days, with a final response within 60 days in some cases.
- 4.If a scammer obtained your Social Security number or other personal information, go to identitytheft.gov for an FTC recovery plan and steps to monitor your credit.
Watch out for the second scam aimed at people who just lost money
This warning could save you from losing even more, so read it closely. If anyone contacts you promising to recover your lost funds in exchange for an upfront fee, it is almost always a second scam. Often it is the very same criminals working from "recovery" or "refund" lists of people they already victimized, betting that you are desperate enough to pay again.
Follow three rules without exception. Never pay a fee to get your money back. Never share new account or wallet access with anyone offering to "help." And report any such offer to the FTC at reportfraud.ftc.gov. Legitimate banks and government agencies do not charge you a fee to return money that was stolen from you.
Lock things down so you are not targeted again
After the immediate steps, a little hardening goes a long way toward keeping this from repeating. Fraudsters often come back to accounts they have already breached.
- 1.Confirm your old card is canceled and activate the replacement as soon as it arrives.
- 2.If your provider offers transaction email or text alerts, turn them on so you catch any further unauthorized activity fast.
- 3.Monitor your account closely for the next several weeks and dispute anything unfamiliar right away.
- 4.If any personal information was exposed, change exposed passwords and use the recovery plan at identitytheft.gov to watch your credit.
A short note on staying ahead of it next time
You did not cause this, and no amount of caution makes anyone immune, but a few habits lower your odds of a repeat. Keep transaction alerts on permanently so you see charges as they happen rather than at statement time. Review your statements within the 60-day window that protects your dispute rights, and never share card numbers, account credentials, or codes with anyone who contacts you out of the blue, since legitimate institutions will not ask for them that way.
Frequently asked questions
How fast do I really need to report debit card fraud?
As fast as possible. For unauthorized transfers, reporting within 2 business days of learning of the loss caps your liability at the lesser of $50 or the amount taken. After 2 business days it can rise to $500, and after 60 days from your statement it can become unlimited. For money you sent yourself, fast reporting is the only real chance the receiving bank can try to freeze the funds before they are withdrawn.
Will I get my money back if I sent it to a scammer myself?
Often not. Payments you were deceived into authorizing and sending yourself are generally outside Regulation E protection. The FTC says plainly that if you are scammed into moving your money out of your account, you probably will not get it back. Report it immediately anyway, because speed gives the receiving bank the only chance to attempt to freeze the funds.
What if the charge was unauthorized but my bank refuses to refund it?
Submit a complaint to the CFPB at consumerfinance.gov/complaint or call (855) 411-CFPB (2372). The CFPB forwards your complaint to the company, which generally responds within 15 days, with a final response within 60 days in some cases. Keep your written dispute letter and all records to support your claim.
Someone offered to recover my lost funds for a fee. Is that legitimate?
Almost certainly not. Anyone promising to recover your money for an upfront fee is almost always running a second scam, frequently the same criminals working from lists of prior victims. Never pay a fee to get money back, never grant new account or wallet access, and report the offer to the FTC at reportfraud.ftc.gov.
Should I bother reporting if I doubt I will recover anything?
Yes. Reporting aids investigations and can support your bank claim, and in some cases helps authorities freeze transferred funds. File with the FTC at reportfraud.ftc.gov and the FBI at ic3.gov, save your IC3 complaint since it is the only copy you get, and keep written records of everything.
