What it means
The rule covers electronic transfers to and from a consumer's account at a bank or similar institution. Examples include card purchases at a till, cash withdrawals at a machine, bill payments and preauthorised debits such as a gym subscription.
It generally does not cover accounts held by businesses. The most-cited part concerns unauthorised transfers.
A consumer's liability is capped at $50 if the loss is reported within two business days of learning of it. It rises to a maximum of $500 if reported later but within 60 days of the statement that shows the transfer, and it can be higher still if the consumer waits longer than that.
There is also a procedure for errors. A consumer who notifies the bank of an error within 60 days of the statement has the right to an investigation, and the bank must generally complete it within 10 business days or give a temporary credit while it continues.
A longer investigation of up to 45 days is allowed when the bank provides that temporary credit. The rule also governs disclosures and consent.
Banks must tell consumers about fees and rights when an account is opened, and a business generally needs the customer's authorisation before it can take recurring electronic payments. For overdraft services on ATM and one-time debit card transactions, the customer must opt in.
For business owners, the rule matters in two ways. If you sell to consumers, you may face chargeback and dispute processes linked to its protections.
If you hold business accounts, you should know that these protections generally do not apply, so your fraud controls and your bank contract carry more weight. Businesses that accept payments should also know how the rule shapes the dispute process.
When a consumer challenges a debit transaction, the bank may credit the account and ask the merchant for proof of the sale. Keeping receipts, delivery confirmations and signed authorisations makes it far easier to win these disputes.
In practice
Real-world examples.
Example
A cardholder notices a $300 ATM withdrawal he did not make and phones his bank the same day. His maximum loss is $50, and the bank refunds the rest after its investigation.
Example
A subscription service charges a customer's account every month by preauthorised debit. The customer cancels and the business keeps charging, so the customer disputes the transactions and the bank must investigate and correct the error.
Example
A small company with a business debit card has $5,000 taken in a fraud. Because the account is not a consumer account, these rules do not apply, so recovery depends on the bank's contract and the company's insurance.
Formula
Calculation
Consumer liability for an unauthorised transfer reported within two business days = the lesser of $50 and the amount lost
A consumer's debit card is stolen and used for $900 of unauthorised purchases. She reports it the next day, within the two-business-day window. Her liability is the lesser of $50 and $900, which is $50. The bank bears the remaining $850.Case study
Seen in the real world.
Marigold Pay is an illustrative, fictional online retailer that accepted debit card payments. Its finance team noticed a rise in disputed payments, and a review showed that many came from customers who had not recognised the company's name on their statements.
Marigold changed the billing descriptor to show its trading name and a phone number, and it sent a confirmation email after each order. Disputes fell by about half in the following quarter. The illustrative lesson is that consumer protections make it easy for customers to challenge unfamiliar charges, so clear descriptors protect revenue.
Marigold also kept delivery confirmations and customer emails for every order so that it could answer a dispute with evidence quickly. Its win rate on contested charges improved, and the team spent far less time chasing paperwork.
Watch out
Common mistakes.
- Assuming a consumer is always fully protected, when waiting too long to report an unauthorised transfer can raise the liability above $50 and even beyond $500.
- Believing business bank accounts have the same protections, when the rule is aimed at consumer accounts.
- Treating a credit card dispute and a debit card dispute as the same thing, when credit cards fall under a different rule with different liability limits.
Questions
People also ask.
How quickly must a consumer report a lost card?
To keep liability at $50, the consumer must report the loss within two business days of learning about it.
What is a provisional credit?
It is a temporary refund that a bank may have to give while it completes an error investigation lasting longer than 10 business days.
Does the rule apply to payments from a mobile wallet?
Generally yes, if the payment is funded from a consumer account, because it is an electronic transfer from that account.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%Related