Learn About Unauthorized Transaction Options

Understanding Unauthorized Transactions

An unauthorized transaction is a purchase, transfer, or withdrawal made from your bank account, credit card, or payment account without your permission. These transactions can happen through various methods, including stolen card numbers, compromised online accounts, fraudulent checks, or identity theft. Understanding what counts as unauthorized is the first step in protecting yourself and knowing what options may be available to you.

Unauthorized transactions differ from disputed transactions. A disputed transaction is one where you agreed to the purchase but later changed your mind about the quality, price, or terms. A true unauthorized transaction means you never agreed to it at all. This distinction matters because the protections and processes you may use depend on what type of transaction occurred.

Financial institutions track millions of transactions daily, and unauthorized activity can happen to anyone. According to the Federal Trade Commission, identity theft and fraud reports reached over 2.6 million cases in recent years, with financial fraud being one of the most common types. Credit card fraud alone costs consumers and financial institutions billions of dollars annually, though most consumers are protected under federal law from bearing the full cost of fraud.

Common examples of unauthorized transactions include:

• Someone using your credit or debit card number to make online purchases
• Fraudulent wire transfers from your bank account
• Unauthorized ATM withdrawals using a stolen card
• Forged checks written against your account
• Unauthorized recurring charges or subscriptions
• Account takeover where someone gains access to your login credentials

Practical Takeaway: Review your bank and credit card statements monthly. The sooner you spot unauthorized activity, the sooner you can report it and potentially limit your liability. Set up account alerts through your bank or credit card company to notify you of large purchases or unusual activity.

Your Rights Under Federal Consumer Protection Laws

Several federal laws protect consumers when unauthorized transactions occur. The primary law is the Electronic Funds Transfer Act (EFTA), which covers unauthorized electronic transfers from your bank account, including debit card fraud and unauthorized ACH transfers. Under this law, your liability for unauthorized transactions depends on how quickly you report the fraud.

If you report unauthorized electronic transfers before they occur, you have no liability. If you report within two business days of discovering the unauthorized transfer, your liability is limited to $50. If you wait more than two business days but less than 60 calendar days, your liability increases to $500. However, if more than 60 days pass since your statement was sent, you may be liable for the entire amount of unauthorized transfers.

The Fair Credit Billing Act (FCBA) provides different protections for credit cards. Under this law, unauthorized credit card charges are typically the card issuer's responsibility, not yours. In most cases, your liability for unauthorized credit card transactions is $0, though some card issuers may ask you to pay $25 or $50. The key requirement is that you report the fraud within 60 days of receiving a statement showing the unauthorized charge.

The Fair and Accurate Credit Transactions Act (FACTA) addresses identity theft and gives you the right to place fraud alerts on your credit report and to obtain your credit reports for free when you suspect identity theft. This law also requires credit reporting agencies to investigate your disputes and remove fraudulent accounts from your credit report.

Each law has specific timelines and procedures:

• EFTA: Report within 60 days to limit liability; faster reporting means lower potential cost
• FCBA: Report within 60 days of receiving the statement with the unauthorized charge
• FACTA: Place fraud alerts and obtain free credit reports when identity theft is suspected

Practical Takeaway: Know the difference between your debit card and credit card protections. Credit cards typically offer stronger consumer protection against fraud. Consider using credit cards for most purchases instead of debit cards, and reserve debit cards for ATM withdrawals and trusted merchants.

Steps to Take When You Discover Unauthorized Transactions

Finding an unauthorized transaction on your account can be stressful, but taking swift action increases the likelihood of recovering your money and preventing further fraud. The first step is to contact your financial institution immediately. Call the customer service number on the back of your card or your bank statement—not a number from an email or text message, as scammers sometimes send fake contact information.

When you call, have your account information ready and describe the unauthorized transaction in detail. Include the date, amount, merchant name, and any other details you remember. The representative will document your report and may freeze your account to prevent additional fraudulent charges. They may also cancel your current card and issue a replacement.

Document everything in writing. Send a follow-up letter to your bank or credit card company's fraud department with the details of your report, including the date and time you called, the name of the representative you spoke with, and a description of each unauthorized transaction. Keep copies of all correspondence. This written record protects you if there are disputes later about whether and when you reported the fraud.

Take these additional protective steps:

• Change passwords for any online accounts associated with the compromised account
• Monitor your credit reports through the three major bureaus: Equifax, Experian, and TransUnion
• Obtain your free annual credit reports at annualcreditreport.com (the official government site)
• Place a fraud alert on your credit file if you suspect identity theft
• File a report with the Federal Trade Commission at reportfraud.ftc.gov
• File a police report if the fraud involves identity theft or significant amounts
• Keep records of all expenses related to resolving the fraud

The timeline matters significantly. For debit card fraud, contacting your bank within two business days can limit your liability to $50 instead of potentially $500 or more. For credit cards, you have up to 60 days from receiving your statement to report unauthorized charges.

Practical Takeaway: Create a system to review your accounts regularly—weekly for accounts you use frequently, or at minimum monthly for all accounts. The faster you discover fraud, the faster you can respond and the more protected you'll be under consumer protection laws.

Dispute Resolution and Investigation Processes

After you report an unauthorized transaction, your financial institution will initiate an investigation. The investigation process differs depending on the type of account and the law that applies, but all investigations must be conducted within specific timeframes.

For credit cards under the FCBA, your card issuer has up to 60 days to investigate your dispute and resolve it. During this time, the disputed amount doesn't have to be paid, and it won't be reported to credit bureaus as delinquent. The issuer must communicate with you about the progress of the investigation and inform you of the outcome.

For debit cards and electronic transfers under the EFTA, banks have 10 business days to investigate (or 20 business days if you report after 60 days of receiving your statement). If the bank cannot complete the investigation within that timeframe, they must provisionally credit your account with the disputed amount while the investigation continues.

During an investigation, the financial institution may:

• Review transaction records and security logs
• Contact the merchant where the unauthorized transaction occurred
• Review whether your account showed signs of breach or compromise
• Interview you about the details of the transaction
• Request documentation you may have, such as receipts or correspondence
• Coordinate with law enforcement if identity theft is involved

The investigation outcome can result in the financial institution agreeing that the transaction was unauthorized and crediting your account, or determining that the transaction was actually authorized. If they decide the transaction was authorized, they'll explain their reasoning in writing. You then have the right to further dispute their decision.

If you disagree with the investigation result, you can ask for a supervisor review or escalate your complaint to your state's banking regulator or the Consumer Financial Protection Bureau (CFPB). The CFPB maintains a complaint database and tracks patterns of fraud at specific financial institutions.