Getting Money Back After an Unauthorized Bank Account Withdrawal

Finding missing cash in your checking account is alarming, especially when household funds are tight. Fortunately, federal law sets strict procedures for financial institutions to investigate unauthorized withdrawals and return stolen funds. Using a practical worked scenario, here is how the dispute process works from the moment an unknown charge appears to the day the money is refunded.
Worked Scenario: An Unexplained Account Withdrawal
Consider a hypothetical account holder named Alex. While reviewing account activity online, Alex spots an unfamiliar electronic fund transfer deducted from the checking balance. Under federal rules, electronic fund transfers include ATM withdrawals, debit card purchases, specific online bill payments, and automated recurring deductions. Unlike disputing a credit card charge, where a credit line cushions your cash flow, an unauthorized debit takes real money directly out of your deposit account.
To recover that money, Alex must act quickly. How much liability Alex faces depends on how the fraud occurred and how rapidly the financial institution receives notice.
Step 1: Notice Windows and Loss Liability Limits
Federal regulations define specific timeframes and liability thresholds depending on whether Alex lost a physical card or security credentials:
- Lost or stolen debit card or PIN: If Alex discovers the debit card, security code, or PIN was stolen and notifies the bank within two business days, Alex cannot be held liable for more than the unauthorized amount or $50, whichever is less. (As a basic protective measure, never write a PIN directly on the debit card or store it written down in a wallet.)
- Reporting after two business days: If Alex delays beyond two business days after learning about the loss or theft, liability can climb up to $500.
- Card remained in possession: If Alex never lost the debit card, PIN, or security code, but an unauthorized transaction appears on a monthly account statement, Alex must notify the bank within 60 days after the statement was sent. Waiting beyond that 60-day window means Alex could be forced to pay the full amount of any unauthorized transactions occurring after the 60-day mark and before notice is provided, if the bank proves notifying them earlier would have stopped those subsequent transactions.
- Special extensions: If unusual situations like hospitalization or lengthy travel stop Alex from notifying the institution within the standard deadlines, the notification windows must be extended.
Step 2: Bank Investigation Rules and Temporary Credits
Once Alex reports the missing money, the institution must open an investigation. Under Consumer Financial Protection Bureau guidance on unauthorized transactions, the bank or credit union generally has ten business days to investigate the issue. If Alex opened the account less than 30 days prior to the incident, the institution receives 20 business days to investigate.
If the bank cannot conclude its review within those initial ten business days (or 20 business days for a new account), it must generally provide a temporary credit to Alex's account for the disputed amount, minus a maximum of $50, while continuing the investigation.
There is an important procedural caveat: if Alex initially reports the unauthorized transfer by phone, the institution can require written confirmation of the error. If the bank requests written confirmation and Alex fails to submit it within ten business days, the institution is no longer required to provide that temporary credit during the remainder of the review.
Step 3: Maximum Investigation Timelines
The financial institution cannot drag the investigation out indefinitely. In standard situations, the bank must resolve the dispute within 45 days. However, the resolution period can be extended up to 90 days if any of the following apply:
- The disputed transaction took place in a foreign country.
- The transaction occurred within 30 days of the account being opened.
- The transaction was a debit card point-of-sale purchase.
During these extended investigations, having the temporary credit ensures Alex does not remain without essential funds while waiting for a final resolution.
Step 4: Final Findings and Correcting the Error
Once the investigation wraps up, strict legal timetables govern the final steps, as detailed in the CFPB missing money explainer:
If the bank determines an error occurred, it must correct that error within one business day of making the determination. The institution then has three business days to deliver its findings to Alex. Furthermore, Alex holds the right to request all documentation and materials the bank relied upon to make its decision, and the bank must send that material promptly.
If the institution instead decides the charge was actually authorized, it cannot secretly pull back the provisional funds. The bank must deliver written notice to Alex before debiting any money that had been temporarily credited during the review.
Key Deadlines Alex Must Keep in Mind
To avoid overpaying or losing funds entirely, keeping these specific milestones straight is critical:
- Notify within two business days to cap liability at $50 for lost cards or stolen PINs.
- Report statement errors within 60 days to prevent full liability on future charges.
- Provide written confirmation within ten business days if the bank asks for follow-up documentation.
- Expect initial investigation results within ten business days, or provisional credit if the probe requires up to 45 or 90 days.
Sources
Published October 28, 2026. No affiliate links on this page. Facts come from the sources linked above; check them for updates.
