How to Dispute a Credit Card Charge in 2026: The 60-Day Clock and the Letter Almost Nobody Sends

Two Clocks Start the Moment a Bad Charge Appears. Only One of Them Is Yours.

You are scrolling your statement and something is wrong. A charge you never made. A store that billed you twice. A package that never came. It is one of the most common bad moments in American financial life — and here is the strange, hopeful fact buried inside it.

You are not imagining the trend, either. Americans reported $15.9 billion in fraud losses in 2025, across roughly three million reports — a record, and about 25% worse than the year before. Imposter scams alone, where someone pretends to be your bank or a government office, accounted for $3.5 billion of it.[15, 16]

In the Federal Trade Commission's 2024 fraud data — the most recent year the FTC has broken out by payment method — the credit card was the payment method people named most often in fraud reports: 108,881 of them. It beat payment apps, debit cards, wire transfers, everything. And yet the reported losses on those credit card reports came to $275 million, while bank transfers, named in fewer than half as many reports, cost people $2.089 billion. That is 7.6 times more money lost, from less than half as many complaints.[13, 14]

Read that again, because it is the whole point of this guide. Credit cards get hit the most and lose the least. Not because criminals are gentler with them. Because when a bad charge lands on a credit card, federal law gives you a way to push it back off — and a lot of people actually get their money back. The FTC's own summary says it plainly: credit cards were "most frequently identified as the payment method" in fraud reports.[13]

But the shield does not open by itself. And here is where most people lose: two different clocks start ticking, and only one of them belongs to you.

Clock one is the law, and it is yours. Under Regulation Z, section 1026.13 — the rulebook behind the Fair Credit Billing Act — you have 60 days to tell your card issuer, in writing, that a charge is wrong. Miss it and your legal right evaporates. Sixty days is not a lot.[1, 3]

Clock two is 120 days, and it is not yours. Look up "chargeback time limit" and you will find that number everywhere. It is real — the current Visa Core Rules (April 2026 edition) and the Mastercard Chargeback Guide both give roughly 120 calendar days. But that window belongs to your bank, and it is the deadline for the bank to shove the charge back at the merchant's bank. It is a private contract between companies. It is not a right you can enforce.[31, 32]

So when someone tells you "relax, you have 120 days," they are describing the bank's calendar, not yours. Your card company may well help you after day 60 — many do — but at that point you are asking for a favor, not exercising a right. The difference shows up the moment they say no.

Why a Credit Card Beats a Debit Card Every Single Time

The two cards look identical. Same plastic, same logo, same tap. Legally, they live on opposite sides of a wall.

A credit card runs on Regulation Z. When a stranger charges $900 to your card, that $900 is the bank's money, not yours. Nothing has left your checking account. You are arguing about a bill you have not paid yet — and while you argue, the law says you do not have to pay it.[1]

A debit card runs on Regulation E. When a stranger charges $900 to your debit card, the $900 is already gone. Your rent money is gone. You are not withholding payment; you are begging for a refund. And your liability climbs with the calendar: 12 CFR 1005.6 caps you at $50 if you report within two business days, $500 if you take longer than that, and — if you let a statement go by unreported for 60 days — unlimited for what happens after.[10]

That is the whole argument. Pay strangers with credit, never with debit. Online orders, hotel deposits, a seller you found on social media, a contractor you have never met — credit card, every time. If you want the full story of how the debit and payment-app side works, we wrote that one separately: Zelle, Venmo and Cash App scams.

The data backs this up in an uncomfortable way. In 2025, roughly three out of ten people who reported losing money to a scam said it started on social media, and shopping scams were the most reported kind — more than four in ten of those victims said they had ordered something they saw in a social media ad. That is exactly the situation where the payment method you picked decides whether this ends in a refund or a lesson.[17]

One warning before you go further. This shield protects you from bad charges. It does not protect you from your own balance. The average credit card in America charged 20.94% in the Federal Reserve's May 2026 reading, and 22.15% for accounts actually carrying a balance. Winning a dispute and then revolving the rest of the bill is not a win.[21, 22, 23]

Seven Things the Law Calls a Billing Error (One of Them Is a Secret Weapon)

The whole machine only starts if what happened to you fits the legal definition of a "billing error." Good news: the definition in section 1026.13(a) is much wider than people expect. There are seven kinds.[1]

Here they are in plain English. One: a charge you did not make and did not authorize. Two: a charge the statement does not describe properly — you cannot tell what it was, when, or where. Three: goods or services you never accepted, or that were never delivered as agreed. Four: a payment or a refund you made that the card company failed to credit. Five: a straight math or accounting mistake by the issuer.[1]

Six — and this is the one nobody uses. A charge for which you simply request more clarification, including documentary evidence. Read that again. You do not have to accuse anyone of anything. You do not have to be sure it is fraud. If you look at a line on your statement and genuinely cannot tell what it is, "please show me the paperwork on this charge" is itself a billing error under the law. And once you file it, the entire protection machine switches on — the payment hold, the ban on late reports, all of it.[1, 2]

Seven: the issuer failed to send your statement to an address you gave them in writing at least 20 days before the cycle ended.[1]

Notice what is not on this list: "the thing I bought is disappointing." A sweater you regret is not a billing error. But a sweater that never arrived, or that arrived as a completely different item, is squarely inside number three. And if you are past 60 days on a defective product, there is a second, separate law waiting for you — we get to it in a few minutes.

The 60-Day Clock Does Not Start When You Are Charged

Almost every article on the internet says you have "60 days from the charge." That is wrong, and the mistake works against you.

The regulation is precise. Your notice must reach the issuer "no later than 60 days after the creditor transmitted the first periodic statement that reflects the alleged billing error." The clock starts on the day the statement went out — not the day you swiped.[1, 3]

That is good news, and it can buy you weeks. Say the charge hits on March 2 and your statement cycle closes on March 25. The statement goes out around March 26. Your 60 days run from then, not from March 2. In practice you often have closer to 80 days from the transaction — but you can never count on it, because it depends on where in the cycle the charge landed.[1]

Two edge cases from the official interpretations, both in your favor. If the issuer never sent a statement, the 60 days run from when it should have been sent — and once they finally do send it, you get a fresh 60 days on anything it shows. And if you have arranged for statements to be held at the bank, "transmitted" means the day they were first made available to you.[2]

The practical lesson is boring and it will save you money: open the statement. Not the app balance — the actual statement, every month, line by line. The 60-day clock is the only clock the law gives you, and it starts whether or not you looked.

The Law Wants a Letter. The App Button Is Not the Same Thing.

This is the part that surprises people most, and it is the difference between a right and a favor.

Regulation Z says: "A billing error notice is a written notice from a consumer." Written. Not a phone call. The official interpretation adds one narrow escape hatch: an electronic submission counts as "written" only if the issuer has stated, in the billing-rights notice it is required to give you, that it accepts disputes electronically and has told you exactly how.[1, 2]

So what is the "Dispute this charge" button in your banking app? Often it is genuinely that electronic channel — many big issuers do stipulate it, and the button is fine. But sometimes it is just customer service: the bank being nice to you, running a network chargeback on your behalf, with no statutory clock and no statutory duties attached. You cannot tell the two apart by looking at the button.[2]

So do both. Use the app if it is fast — then send the letter anyway. A stamp costs less than a dollar. It is the cheapest legal insurance in American consumer finance.

And send it to the right place. This trips up almost everyone. The letter must go to the billing inquiries address printed on your statement — not the address you mail your payment to. They are usually different, and the issuer is allowed to refuse a dispute that arrived in the payment envelope. Look for the words "Billing Inquiries," "Billing Rights," or "Customer Inquiries."[1]

The letter itself is short. The law asks for only three things: your name and account number; the fact that you believe there is an error and why; and the type, date, and amount of the error. That is it. Four sentences will do. Add copies — never originals — of anything useful: the order confirmation, the tracking page that says "delivered" when it was not, the emails to the seller. Send it so you can prove it arrived, and keep a copy of everything.[1, 7]

What the Card Company Must Do Next, and What It Cannot Do to You

Once your written notice lands, the issuer is on a schedule it does not control. It must acknowledge your letter within 30 days. And it must finish the whole investigation within two complete billing cycles — and never more than 90 days.[1, 7]

While that is running, four things are forbidden, and they are worth knowing by heart.

One: you do not have to pay the disputed amount. Not the charge, not the interest on it. Two: they cannot try to collect it — the official commentary spells out that this bars suing you, taking a lien, or starting attachment proceedings. Three: they cannot report you as late to anyone about that amount. The commentary is unusually blunt here: not to credit bureaus, and not to "employers, insurance companies, other creditors." Four: they cannot close your account or call the whole balance due just because you exercised this right in good faith.[1, 2]

Now the part almost every guide gets wrong. Interest is suspended, not forgiven. The rule explicitly lets the issuer keep showing the disputed amount and its finance charges on your statement, as long as it tells you that payment is not required while the investigation runs. If you lose the dispute, that interest is still there and it is yours to pay. Do not tell yourself "no interest is accruing." Tell yourself "the meter is running, and I might be handed the bill."[1]

One protection you never lose, though, and it is a good one: disputing a charge cannot cost you the grace period on the rest of your bill. The commentary gives the exact example — you dispute $2 out of a $300 statement and pay the other $298 on time. Even if the issuer later decides you were wrong about the $2, you do not retroactively owe interest on the $298. So pay the undisputed part, on time, every time. Withholding the whole bill is a mistake that turns a small fight into a real debt.[2]

Small footnote worth having: the ordinary late fee is not capped at some friendly number. A 2024 rule that would have held it to $8 was struck down in court in April 2025 and never took effect. Late is expensive. Pay the undisputed part.[27]

A Stolen Card Costs You $50. A Stolen Card Number Costs You Nothing.

Everyone has heard the "$50 rule." Almost nobody knows what it actually says — or that in the most common kind of card fraud today, it does not apply at all.

The statute caps your liability for unauthorized use at the lesser of $50 or the amount taken before you notified the issuer. But even that $50 only sticks if the issuer met three conditions: the card was an accepted card, it gave you proper notice of your liability and how to report a loss, and — this is the important one — it provided a means to identify the person using the card.[4, 6, 9]

Now hold that third condition up against how card fraud actually happens in 2026. Somebody buys your card number from a breach and orders a laptop online. No card was presented. No identification was possible. The official interpretation draws the conclusion for us, and it is worth quoting: when merchandise is ordered by telephone or the Internet by someone without authority, using the account number by itself, "no liability may be imposed on the cardholder."[5]

Read that plainly: for online card-number theft, your legal liability is zero. Not fifty dollars. Zero. The $50 ceiling is for a card that was physically taken out of your wallet and handed to a cashier. And the "$0 Liability" your issuer advertises is not the law doing that work — the commentary notes an issuer is not even required to impose liability at all, so zero liability is a policy they chose. Nice of them. But you already had a stronger claim.[5, 4]

And here is the sentence to keep in your back pocket when a bank agent gets skeptical. Federal law puts the burden of proof on the card issuer to show the use was authorized. You do not have to prove you did not do it. They have to prove you did.[9]

This is not a rare problem. The FBI's Internet Crime Complaint Center logged 18,774 credit card and check fraud complaints in 2025, with $282.7 million in reported losses — up roughly 46% in complaints and 41% in losses from the year before. If it happens to you, it is also worth freezing your credit, because a leaked card number often travels with the rest of your identity: how to freeze your credit.[20]

The Moment You Hand Someone Your Card, the Protection Disappears

Here is the line that decides everything, and it is drawn in a place most people never look.

Regulation Z defines "unauthorized use" as use by someone who has no actual, implied, or apparent authority — and from which you get no benefit. Every protection in the last section hangs on that definition.[4]

So what happens when you hand your card to your college kid for groceries, and they spend $2,000 on something else? The official interpretation answers with brutal clarity. If you give the card and permission to a person who then exceeds the authority you gave — the commentary names family members and coworkers specifically — you are liable for the transactions, unless you have already told the issuer that this person is no longer authorized.[5]

Read the shape of that. Lent equals liable. The $50 cap does not save you. The zero-liability policy does not save you. The dispute machine does not start, because it was never "unauthorized" in the first place. Your only exit is to tell the issuer, before more charges land, that this person may no longer use the card — and even then you are only protected from that moment forward.[5]

Now the other side of the line, which is just as important. If someone got your card through fraud or robbery — tricked you, threatened you, lifted it from your bag — the commentary says that is unauthorized use, full stop. You did not lend it. You lost it.[5]

So the whole thing comes down to one honest question, and you should ask it before you call the bank: did I hand it over, or was it taken? If you handed it over, no law is coming to help you. If it was taken, everything in the last section is yours. The practical rule that follows is simple. Never lend the card. Add the person as an authorized user instead — that way you can remove them with a phone call, and you always knew you were on the hook.

The Second Weapon: No 60-Day Deadline, but Do Not Pay the Bill

The 60 days have passed. The sofa arrived broken, the contractor took your deposit and vanished, the "handmade" thing from the social-media ad turned out to be a plastic imitation. Most people assume they are finished. They are not.

There is a second, completely separate right in the same regulation, and it is called "claims and defenses." In plain terms: if the merchant will not fix the problem, you may raise against the card company any claim you could have raised against the merchant, and hold back payment for that purchase. The card issuer also may not report that amount delinquent until the dispute is settled.[4, 8]

The key fact: this right is independent of the 60-day billing-error process. The official commentary says so directly — the two operate separately, and you may assert claims and defenses whether or not you filed a billing-error notice. There is no 60-day cliff here.[5]

But it comes with three conditions. One: you must have made a good-faith attempt to resolve it with the seller first. The commentary is generous here — no special procedure is required, you do not have to chase the manufacturer, and if the seller has gone bankrupt you do not have to file a claim in the bankruptcy. You can go straight to the card company. Still: keep the emails, the ticket numbers, the dates. Two: the purchase must be for more than $50. Three: the transaction must have happened in your state, or within 100 miles of your address — an old rule we will unpack in a moment.[4, 5]

And now the trap that ruins people, hidden in a single sentence of the commentary: a consumer who pays the disputed balance has no further right to assert claims and defenses. Think about what that means. The instinct — "I will just pay it to keep my credit clean, and fight it afterward" — destroys the weapon. The right lives in the unpaid balance. Pay it, and it is gone.[5]

One more thing the issuer cannot do: it cannot just take the merchant's word and close the file. The commentary requires a reasonable investigation — an independent assessment based on information from both you and the merchant, where possible, before it calls the dispute settled and starts collecting.[5]

A quick warning about a rule you will see quoted a lot online. The FTC Holder Rule also lets a buyer raise seller problems against a lender — but it applies to seller-arranged financing, like a car dealer's installment contract, not to an ordinary Visa or Mastercard purchase. Plenty of finance blogs mix the two up. For your credit card, the rule you want is the one above.[11]

Does the 100-Mile Rule Kill Online Purchases? The Honest Answer.

That "$50 and 100 miles" limit was written in the 1970s, when a purchase happened at a counter you could drive to. So what is the "place" of an order you typed into a website at midnight? It is a fair question, and you deserve a straight answer instead of the confident nonsense you will find elsewhere.

The answer is that the regulation refuses to decide. The official interpretation addresses this exact situation and says the question of where a transaction occurs — "as in the case of mail, Internet, or telephone orders" — is to be determined under state or other applicable law. That is it. Federal law hands the question to the states and walks away.[5]

So be careful of both confident claims. "Online purchases are not covered because of the 100-mile rule" has no basis in the text. Neither does "online is always covered." What the commentary does say, elsewhere and clearly, is that claims and defenses can include mail, Internet, or telephone orders. So the right itself plainly reaches online shopping; only the geographic filter is unsettled.[5]

There is also a list of six exceptions that switch the $50-and-100-mile filter off entirely — mostly for cases where the card issuer and the merchant are the same company, or one controls the other, or the merchant is a franchised dealer in the issuer's own products. Note the limit of that: the commentary warns that a store does not qualify just because it accepts your card. "They take Visa" is not a relationship.[4, 5]

So what should you actually do? Dispute anyway. In real life the geographic filter almost never becomes the fight, because your bank will usually route the case through the card network's rules, and those rules — the 120-day window from Section 1 — are far more generous than the legal floor. Just know which one you are standing on. The network rule is a courtesy. The statute is a right. Keep both.

The Subscription That Will Not Die, and the Rule That Was Supposed to Kill It

A free trial you forgot. A gym you left two years ago. A streaming service whose cancel button leads to a maze, then a phone number, then a hold queue. Every month, another charge.

In 2024 the FTC finished a rule that would have forced companies to make cancelling as easy as signing up. People called it "click to cancel." It is worth knowing exactly what happened to it, because a lot of advice online still assumes it exists. On July 8, 2025, the Eighth Circuit Court of Appeals vacated the rule in its entirety — six days before it was supposed to take effect. It never applied to anyone, for a single day. The FTC has started over, but as of mid-2026 the replacement is only an early-stage proposal that, in its own words, imposes no obligations on anyone.[19]

So does that mean you are defenseless? No — and this is where most coverage stops too early. A different law, passed in 2010 and very much alive, requires any online seller with a recurring charge to give you "simple mechanisms" to stop it. It is called ROSCA, and it is not decorative. In September 2025 the FTC used it to extract $2.5 billion from Amazon over Prime sign-ups and cancellations — $1 billion in penalties and $1.5 billion back to consumers. Whatever you have read about deregulation, that is the largest consumer settlement of its kind, and it happened after "click to cancel" died.[12, 18]

Practically, here is the order of operations for a subscription you cannot kill. First, cancel in writing and screenshot everything — the date, the confirmation, the maze. Second, dispute the next charge as a billing error: a charge for a service you did not accept is squarely inside the definition. Third, do not assume a new card number saves you. The networks run "account updater" services that quietly hand merchants your new number, which is exactly why the cancellation record in step one matters more than the plastic.[1]

Where This Shield Ends: The Payment Methods That Get None of This

Everything in this guide — the 60-day notice, the payment hold, the ban on late reports, claims and defenses — lives inside one statute that applies to one product: an open-end credit card. Step outside that box and the tools in your hand vanish. Here is the boundary, drawn honestly.

Debit cards get a weaker, time-graded set of protections under Regulation E, and your cash is already gone while you wait. Zelle, and person-to-person transfers you authorized, are the hardest case of all: if you were tricked into pressing send yourself, there is usually no refund right at all. Cash, checks, wire transfers, gift cards, and cryptocurrency have essentially no consumer reversal mechanism. That is not an accident — it is exactly why scammers steer you toward them, and it is why the FTC's 2024 loss table looks the way it does.[10, 13]

Buy Now, Pay Later deserves its own warning, because a lot of people assume it works like a card. In 2024 the CFPB issued guidance saying BNPL lenders should follow the credit-card rules, dispute rights included. On May 12, 2025, the CFPB withdrew that guidance. No court has settled the question, the agency is not enforcing it, and the providers do not offer the Regulation Z process. Treat BNPL as having no reliable statutory dispute right. If you want the full picture of how that market works now, we covered it here: Buy Now, Pay Later in 2026.[29]

And here is the workaround almost nobody mentions. If your BNPL plan, your payment app, or your subscription is funded by a credit card, then the card issuer is still on the hook to you under Regulation Z, even when the app is not. Same for a wallet like Apple Pay or PayPal that is riding on a card. The rule follows the funding source. So when you link a payment app to a funding account, link the card — not the checking account. That single choice quietly decides whether you have a legal right or a customer-service request.[1]

They Said No. You Are Not Finished.

A letter arrives saying the investigation is complete and the charge stands. Most people stop here. The rules do not.

First, demand the evidence. If the issuer decides no billing error occurred, it must give you a written explanation — and if you ask, it must furnish copies of the documentary evidence of your indebtedness. Ask. In writing. What comes back is often thin: a merchant's bare assertion, a receipt with no signature, a delivery scan to the wrong address. That paper is what you build the next step on.[1]

Second, know what they cannot demand of you. The commentary is explicit: an issuer conducting a reasonable investigation may not require you to sign an affidavit or a statement under penalty of perjury, and it may not automatically deny your claim just because you would not file a police report or hand over some document it asked for. If a representative tells you "we cannot proceed unless you file a police report," that is not the law talking.[2]

Third — and this is the move almost nobody makes — re-dispute in writing, fast. If you tell the issuer, in writing and within the window it gave you to pay, that part of the error is still in dispute, then it may not report you as delinquent unless it also does three things: report the amount as "in dispute," send you the name and address of every bureau or person it reported to, and later report the resolution to all of them. Most people never learn this exists. It converts a quiet black mark into a paper trail you control.[1]

Set your expectations honestly about what happens if the issuer breaks these rules. The forfeiture penalty written into the Fair Credit Billing Act is capped at $50 — it is not a windfall, and no one is getting rich suing over a $200 charge. The real leverage is that a documented, written paper trail makes a card company want the problem to go away.[7]

Fourth, escalate outside the bank. File a complaint with the Consumer Financial Protection Bureau. The intake system and the public complaint database are both working as of mid-2026, and companies generally respond within 15 days. Credit cards drew roughly 114,100 complaints in 2025. But be realistic: the CFPB's supervision and enforcement arms were cut back sharply in 2025 and 2026, and a government watchdog documented the retreat. File anyway — and file with your state attorney general at the same time. The state is now often the one that actually shows up.[25, 26, 24, 30, 28]

One last thing. If the disputed balance has already been sold to a collection agency, you have entered a different law with different rights — and some of them are strong. That story is here: your rights when a debt collector calls.

Use This Honestly. The Card Is Not a Refund Button.

There is a temptation buried in everything you just read. You bought something, you used it, you changed your mind, and now you know a phrase that makes the money come back. The industry has a name for that: the card networks call it "first-party misuse." The friendlier street name is "friendly fraud," which is a soft word for lying.[33]

Be precise about the risk, because the internet exaggerates it. The card network rules do not punish cardholders. Visa and Mastercard write rules for merchants, acquiring banks, and issuers — not for you. Mastercard's own material says the merchant's practical recourse is to blacklist repeat offenders at the store level. So no, there is no secret network blacklist of consumers.[32, 33]

But there is a real cost, and it comes from a different direction: your cardmember agreement. Your issuer can close your account largely at its discretion, and a pattern of disputes it considers unfounded is exactly the kind of thing that triggers that. Losing a long-held card hurts your credit history in ways a $60 refund never repays. And every fraudulent dispute makes issuers a little more suspicious of the next person who is telling the truth.

The line is simple, and it is the same one from Section 8. Did the merchant fail you, or did you change your mind? If the merchant failed you, use every tool in this guide without a shred of guilt. If you changed your mind, that is what the return policy is for.

Frequently Asked Questions About Disputing a Credit Card Charge

Key Takeaways

Credit cards are named in more fraud reports than any other payment method, and they lose the least money — about 13 percent of what bank transfers lose. That gap is the law working. But the law only works if you use it, so here is the whole guide in one breath. Your clock is 60 days from the statement, not from the charge. The law wants a letter, sent to the billing inquiries address — use the app too, but do not rely on it alone. While the dispute runs, you do not pay the disputed amount, and they cannot report you late — but pay the rest of the bill, and remember the interest is suspended, not erased.[13, 1]

Four more, and they are the ones that separate people who get their money back from people who do not. If your card number was stolen online, your legal liability is zero, not fifty dollars — and the burden of proving you authorized it sits on the bank, not on you. If you lent the card, none of that applies; lending equals liability, so add family as authorized users instead. If the problem is the product itself, there is a second right with no 60-day deadline — but paying the disputed balance destroys it, so never "just pay it and fight later." And if they say no, you are not finished: demand the evidence, re-dispute in writing, and make them flag the account as in dispute.[5, 9]

And one habit that prevents most of this from ever mattering: pay strangers with a credit card, and open your statement every month. That is it. The strongest consumer protection in American law is sitting in your wallet, and it costs nothing to use — but it only defends the charges you actually notice, inside a window that starts whether you are looking or not.