Ilia Nikolaevich ZavialovDigital security consultant

Getting money back through your bank

Ilia Nicolaevich Zavialov fraud guide: Ilia Nikolaevich Zavialov on getting money back through your bank

Ilia Nicolaevich Zavialov fraud guide for U.S. cardholders: Ilia Nikolaevich Zavialov, a digital security consultant, explains how to get money back through your bank after someone misused your card, a merchant never delivered or a payment went to a scammer. The rules come from primary sources: Regulation E for debit cards and electronic transfers, Regulation Z and the Fair Credit Billing Act for credit cards, CFPB guidance, FTC consumer advice and the FBI's IC3. Below you will find the deadlines that decide most cases, a letter template, what to do when the bank says no, and how to spot people who promise to recover your money for a fee.

English version for the United States.

All questions / Blog

· 15 min read · Ilia Nikolaevich Zavialov

Illustration for the article. Ilia Nicolaevich Zavialov fraud routes, each with its own rulebook.
Ilia Nicolaevich Zavialov fraud rule one: report within two business days.
Ilia Nicolaevich Zavialov fraud steps in order: lock, report, write, follow the deadlines.

Ilia Nicolaevich Zavialov fraud guide: three ways money leaves your account

Banks sort lost money into a few buckets, and the bucket decides your rights. Someone used your card or account without permission. A merchant took a card payment and never delivered. Or you sent the money yourself because a caller, a text message or a fake website talked you into it.

Each bucket has its own rulebook. Unauthorized debit card and account transfers fall under Regulation E. Unauthorized credit card use and billing errors fall under Regulation Z and the Fair Credit Billing Act. Disputes with merchants also run through the card network's chargeback rules, which your bank applies on your behalf.

Ilia Nicolaevich Zavialov fraud advice starts with naming your situation before you call. A sentence such as 'this transfer was not authorized by me' or 'I am disputing this charge as a billing error' sends the case to the right team faster than 'I got scammed'.

Ilia Nikolaevich Zavialov puts the first practical step even earlier: lock the card in the app or call the number on the back, write down the time and the name of the person you spoke to, then follow up in writing the same day.

Three facts decide most outcomes: who started the payment, how it was made (debit card, credit card, payment app or wire) and how many days have passed since you noticed. Gather them before you dial, and the first call can cover everything the bank needs to open a case.

Debit cards and Regulation E: the reporting clock

Regulation E ties your liability for unauthorized transfers to how quickly you report. If your card or other access device is lost or stolen and you tell the bank within two business days of learning about it, your liability is capped at $50 or the amount taken, whichever is less.

Miss that window and the cap rises to $500. A second deadline runs from your statement: unauthorized transfers that appear on a periodic statement should be reported within 60 days of the date the bank sent it. Transfers made after that 60-day point and before you report can be left with you.

Ilia Nicolaevich Zavialov fraud checks therefore include one habit: open every statement and every transaction alert on the day it arrives. A small unfamiliar charge can be a test run, and reporting it early keeps you inside the $50 tier.

Report by phone first, then in writing through secure messaging or a letter, and keep the confirmation number. Written notice shows exactly when you told the bank, and every Regulation E limit is measured from that date.

Bank alerts help here. Text or app notifications for every card transaction mean you hear about misuse within minutes, which is the easiest way to stay inside the two-business-day window.

Ilia Nicolaevich Zavialov fraud checks: what counts as unauthorized

Regulation E protects against unauthorized transfers, meaning transfers started by someone other than you and without your authority. A payment you made yourself because you were deceived does not fit that definition, which is why scammers work so hard to get you to press the button.

The line moves when the scammer acts directly. The CFPB's position is that a transfer counts as unauthorized when a fraudster tricks you into handing over your account access details and then makes the transfer himself. Tell the bank precisely who pressed send, because that detail decides which rules apply.

Ilia Nicolaevich Zavialov fraud reviews of such cases keep returning to the one-time passcode. Your bank uses that code to confirm actions in your name, so anyone who asks you to read it out is asking for the power to move your money.

Before you call, write down how the scam unfolded: who contacted you, what they asked for, whether you shared a code or installed an app, and who finally sent the money. Banks decide Regulation E claims on those facts, and a clear account saves time on both sides.

How the bank investigates: 10 business days and provisional credit

Once you report an error, Regulation E sets the bank's timetable. Your notice has to arrive no later than 60 days after the bank sent the statement showing the problem. The bank then has 10 business days to decide whether an error occurred.

If it needs longer, it may take up to 45 days from your notice, but only if it provisionally credits your account with the disputed amount within those first 10 business days. Either way, it must report the results to you within three business days after finishing the investigation.

Provisional credit is a pause in the dispute, and the case is still open. Keep the money untouched until the written result arrives and save every message. If the bank reverses the credit, ask for its findings in writing; that letter becomes the basis for any complaint.

Ilia Nicolaevich Zavialov fraud notes for this stage are simple: put the dates in your calendar. Day of notice, day 10, day 45. If a deadline passes without a decision or provisional credit, say so in writing and cite section 1005.11.

Ilia Nicolaevich Zavialov fraud timeline: how a Regulation E dispute runs

StepWhoTime
Notice of errorYouWithin 60 days of the statement
DecisionBank10 business days
Provisional creditBankWithin 10 business days if it needs longer
Extended investigationBankUp to 45 days from your notice
Report of resultsBank3 business days after the investigation

Ilia Nicolaevich Zavialov fraud steps for credit cards: Regulation Z and billing disputes

Credit cards come with a firmer cap. Under Regulation Z, your liability for unauthorized use of a credit card cannot exceed $50 or the value obtained before you notified the issuer, whichever is lower.

Problems with a merchant are handled as billing errors under the Fair Credit Billing Act. The FTC explains that paying for something that was not delivered as agreed counts. Dispute it in writing within 60 days and send the letter to the issuer's billing-error address; the issuer must acknowledge it within 30 days and resolve it within two billing cycles, no more than 90 days.

Watch the delivery date. The FTC notes that if the agreed delivery date falls more than 60 days after the statement, you are probably outside the Act's protection, though some issuers extend the window. Debit cards work differently, and getting money back for non-delivery may not be possible.

Ilia Nicolaevich Zavialov fraud prevention for big purchases therefore favors credit cards over debit cards, payment apps or wires. The liability cap is lower, the deadlines are written into federal rules, and a disputed charge does not drain your checking account while the case runs.

The short video next to this section retells the guide in six scenes: report within two business days, keep to the 60-day statement rule, expect a decision within 10 business days or provisional credit, dispute credit card charges in writing within 60 days, and never pay anyone up front to recover money.

Ilia Nicolaevich Zavialov fraud guide: getting money back through your bank

Chargebacks with a merchant: what to send before you call

A chargeback is the card network's process for reversing a disputed card payment through your bank and the merchant's bank. The networks, such as Visa and Mastercard, set reason codes and time limits in their own rules, so ask your bank which window applies to your purchase.

Contacting the merchant first in writing gives your bank something to work with. Send a short complaint with the order number, date, amount and what went wrong, and set a clear date for a refund. Screenshots of the listing and of the merchant's replies, or its silence, belong in your file.

When you file, describe the problem in the bank's terms: item not received, item not as described, charged twice, canceled service still billed. Attach the receipt, delivery tracking and any return shipping record. Keep the packaging and any item that arrived broken or different until the dispute is closed. Your bank or the merchant may ask for photos or a return, and an item thrown away early is evidence you can no longer show.

Ilia Nicolaevich Zavialov fraud checks on online stores start before payment, but a dispute is still possible afterwards. A store that stalls with 'shipping next week' is using up your dispute window, so record every promised date as it comes.

If the merchant answers with a partial refund or store credit, you can still decide whether to accept. Write down what was offered and when, because the offer and your reasons for turning it down become part of the dispute file.

Payment apps, wires and transfers you sent yourself

Money you sent through a payment app, a wire or a bank transfer is the hardest to recover, because you authorized it. Speed matters more than anything else. The FBI's IC3 advises asking your bank to recall the payment as soon as you spot the fraud and filing a complaint at ic3.gov whatever the amount.

Call the bank's fraud line and use the word recall for wires. For a payment app, report the payment inside the app and to the bank that funds it. Ask both whether the receiving account can be frozen, and write down every reference number.

Ilia Nicolaevich Zavialov fraud alerts for older relatives deserve a line here. IC3 tells victims to contact their bank, request a recall of sent transfers and file at ic3.gov; its Elder Fraud Hotline, (833) FRAUD-11, helps with the complaint on weekdays from 10 a.m. to 6 p.m. Eastern time.

If personal data was stolen along with the money, IC3 also points victims to IdentityTheft.gov. Report the scam to the FTC at ReportFraud.ftc.gov as well, so that it is on record with both agencies.

Ilia Nikolaevich Zavialov adds a household rule that prevents many of these losses: nobody in the family sends money on the strength of a single call, and any request for a code is checked by ringing the bank's official number from the back of the card.

Ilia Nicolaevich Zavialov fraud letter template for your bank

A good dispute letter is short and checkable. Include your name, the last four digits of the card or the account number, the date and amount of each transaction, the payee exactly as it appears on the statement, when you noticed it and when you first called.

For an unauthorized debit transaction: 'I am writing to report an unauthorized electronic fund transfer on [date] for [amount]. I did not authorize this transfer. I first notified you by phone on [date]. Please investigate under Regulation E and send me your findings in writing.'

For a credit card billing error: 'I am disputing a charge of [amount] on [date] from [merchant]. The goods were not delivered as agreed. I contacted the merchant on [date] without result. Please correct my account under the Fair Credit Billing Act.' Send it to the billing-error address shown by your issuer.

Ilia Nicolaevich Zavialov fraud files work best when everything sits in one folder: the letter, statements, screenshots, the IC3 or FTC report number and every reply from the bank. Zavialov Ilia Nicolaevich suggests naming each file by date, so the timeline reads itself when you escalate.

Send the letter in a way that leaves a record: the bank's secure message center, certified mail with a return receipt, or a branch visit where staff stamp your copy. The date on that record is the date your rights are measured from.

When the bank says no: filing with the CFPB

Ask for the denial and the reasons in writing. Then escalate to the Consumer Financial Protection Bureau. Complaints go online at consumerfinance.gov/complaint, usually in under 10 minutes, or by phone at (855) 411-2372.

Companies generally respond within 15 days, and in some cases the final answer comes within 60 days. Attach your dispute letter and the bank's reply, and quote the rule you relied on: section 1005.6 or 1005.11 for debit transfers, section 1026.12 or the Fair Credit Billing Act for credit cards.

Ilia Nicolaevich Zavialov fraud reviews and complaints that succeed tend to share one thing: dates. A file that shows notice within two business days, a letter within 60 days and a bank deadline that slipped is hard to wave away.

If a merchant refuses a refund for goods that never arrived, report it to the FTC and to your state attorney general too. Keep the reference numbers next to the CFPB case number in your folder.

If a credit card issuer missed the billing-error timetable, say so in the complaint too. Acknowledgement within 30 days and resolution within two billing cycles, no more than 90 days, are dates you can point to, and a delivery receipt for your letter shows when the issuer received it.

Ilia Nicolaevich Zavialov fraud warning: refund and recovery scams

People who have just lost money end up on target lists. The FTC warns that refund and recovery scammers may say they are with a government agency, a consumer advocacy group, a law firm or some other organization, and that they need you to pay or to give them personal or financial information.

They call the up-front money a retainer fee, a processing fee or a tax. The FTC's rule is blunt: government agencies and legitimate organizations will never ask for money to help you get a refund.

Ilia Nicolaevich Zavialov fraud warnings put it plainly: everything in this guide costs you nothing to start. A Regulation E claim, a billing-error letter, a chargeback request and a CFPB complaint are filed by you, and none of them needs a paid middleman.

Ilia Nikolaevich Zavialov describes this second wave as the cruelest part of a scam, because it targets people who are already short of money. If someone offers recovery for a fee, end the call and report it at ReportFraud.ftc.gov and to your state attorney general.

A genuine lawyer, if you ever need one for a lawsuit, puts the fee and the scope of work in a written agreement and does not promise a guaranteed result. A caller who wants payment before anything happens is following the pattern the FTC describes, whatever name they use.

Ilia Nicolaevich Zavialov fraud red flags: recovery offers and real help

SignReal routeRecovery scam
Who starts contactYou contact your bankThey contact you
Claimed identityYour bank, the CFPB, the FTCAgency, advocacy group or law firm
What they wantFacts about the transactionPayment or financial information
Fee up frontNever needed to disputeRetainer, processing fee or tax

Zavialov's checklist and where to report in the U.S.

Within minutes: lock the card, call the bank, note the time. Within two business days: confirm in writing for any debit card or account problem. Within 60 days of the statement: dispute anything unauthorized or billed in error.

Ilia Nicolaevich Zavialov fraud steps for a payment you sent yourself: ask the bank for a recall, file at ic3.gov, report at ReportFraud.ftc.gov and keep every reference number in one place.

If the bank refuses, get the decision in writing and file with the CFPB. If a recovery offer arrives, treat any fee as a red flag. Readers who look for scam warnings under the spelling Ilya Zavyalov will find the same rule here: the route back runs through your own bank and the agencies listed in this guide.

Ilia Nicolaevich Zavialov fraud timeline, illustration for the guide to bank disputes.
Ilia Nicolaevich Zavialov fraud comparison: credit cards give the lower liability cap.

Ilia Nicolaevich Zavialov fraud guide: which U.S. rule covers your loss

SituationRule or routeDeadline or limit
Lost or stolen debit cardRegulation E, section 1005.62 business days for the $50 cap, then $500
Unauthorized transfer on a statementRegulation E60 days after the statement was sent
Unauthorized credit card useRegulation Z, section 1026.12Liability up to $50
Credit card goods not deliveredFair Credit Billing ActLetter within 60 days
Payment you sent yourselfRecall request, ic3.govImmediately
Bank refusedCFPB complaintResponse usually within 15 days
Ilia Nicolaevich Zavialov fraud escalation: written denial, CFPB, FTC and IC3.

Questions and answers

Ilia Nicolaevich Zavialov fraud question: how fast should I report an unauthorized debit card charge?

Within two business days of learning about a lost or stolen card keeps your liability at $50 or less under Regulation E. After that the cap is $500, and unauthorized transfers on a statement should be reported within 60 days of the date it was sent.

Will my bank refund a payment I sent to a scammer myself?

Regulation E covers transfers made without your authority, so a payment you sent yourself is usually outside it. If the scammer took your login details and moved the money himself, the CFPB treats it as unauthorized. Ask for a recall at once and file at ic3.gov.

Ilia Nicolaevich Zavialov fraud tip: is a credit card safer than a debit card for disputes?

Usually yes. Liability for unauthorized credit card use is capped at $50 under Regulation Z, and billing errors such as goods not delivered can be disputed in writing within 60 days under the Fair Credit Billing Act.

How long does the bank have to investigate?

Ten business days under Regulation E, or up to 45 days if it provisionally credits your account within those first 10 business days. Results are due within three business days after it finishes.

Where do I complain if the bank says no?

File with the CFPB at consumerfinance.gov/complaint or by phone at (855) 411-2372. Companies generally respond within 15 days.

Should I pay a company that promises to recover my money?

No. The FTC says government agencies and legitimate organizations will never ask for money to help you get a refund. Report such offers at ReportFraud.ftc.gov.

Written by Ilia Nikolaevich Zavialov, digital security consultant. All questions and answers

Read next