The card decides the law
Two people can dispute an identical $400 charge and get materially different treatment, entirely because of what they paid with. This is not a bank policy quirk. Debit and credit disputes are governed by two separate federal frameworks with different deadlines, different liability caps, and a different answer to the question that matters most while you wait: who is holding the money?
Debit cards, ATM withdrawals and ACH debits fall under the Electronic Fund Transfer Act, implemented as Regulation E (12 CFR Part 1005).
Credit cards fall under the Truth in Lending Act, implemented as Regulation Z (12 CFR Part 1026). The billing-dispute provisions are what people usually mean by the Fair Credit Billing Act.
Nearly every practical difference below follows from that split.
The liability difference is the one that costs money
Under Regulation E, your maximum liability for unauthorized electronic transfers depends on how quickly you report:
| When you report | Maximum liability |
|---|---|
| Before any unauthorized transfer occurs, or within 2 business days of learning your card or access device was lost or stolen | $50 |
| More than 2 business days after learning of the loss or theft, but within 60 days of the statement being sent | $500 |
| More than 60 days after the statement was sent | Potentially unlimited for transfers after that 60-day window |
That third row is the one to take seriously. Regulation E does not cap your losses for unauthorized transfers that occur after the 60-day period has run and that a timely report would have prevented.
Under Regulation Z, the statutory ceiling on your liability for unauthorized credit card use is $50, and it does not escalate with delay. In practice most issuers waive even that.
The gap between "$50, fixed" and "potentially unlimited" is the single strongest argument for putting recurring and online payments on a credit card rather than a debit card.
The deadline difference
Both frameworks run their clock from when the statement was sent, not from when you read it or when the charge posted. This catches people out constantly.
- Regulation E error resolution: notify your bank within 60 days of the statement showing the error being transmitted to you.
- Fair Credit Billing Act billing errors: the creditor must receive your notice within 60 days after the first statement containing the error was sent.
Two practical notes. First, for credit cards the FCBA route contemplates a written notice, and writing preserves the statutory protections in a way a phone call does not — call if you like, but follow it in writing. Second, an issuer's own courtesy policy may be more generous than the statute; that generosity is revocable, and the statutory deadline is the one you can actually rely on.
Who holds the money while it is investigated
This is the difference nobody tells you about until it matters.
Credit card. The disputed amount is a charge you have not yet paid. Under the FCBA the creditor may not require you to pay the disputed portion while the dispute is pending, and may not report it as delinquent to credit bureaus on that basis. Your cash is untouched throughout.
Debit card. The money is already gone from your account. You are asking to have it returned. Regulation E's provisional-credit mechanism exists precisely because of this asymmetry — but provisional credit is a deadline-driven obligation, not something that happens the moment you call. If a fraudulent debit charge has overdrawn you, the fees it triggered are a separate conversation with the bank.
What each side has that the other does not
Credit cards give you a claim against the merchant. Regulation Z § 1026.12(c) lets you assert against the card issuer the claims and defenses you have against the merchant — the provision behind "the thing arrived broken and the seller won't answer." It carries conditions in the regulation, including amount and geographic limits, though many issuers apply it more broadly than required. There is no Regulation E equivalent: Regulation E addresses *errors and unauthorized transfers*, not a merchant who took your money and did not deliver.
Debit disputes can move faster. When a bank does issue provisional credit, funds can be back in your account well before a credit card dispute reaches its outer limit.
Deciding which route to use
- Charge you did not authorize at all → unauthorized transaction under whichever framework applies. Report immediately; on debit, the clock is directly worth money.
- You authorized it, but the amount is wrong, it posted twice, or the merchant billed after you cancelled → billing error (credit) or error (debit).
- You authorized it, the amount is right, but the goods or service never arrived or were not as described → strongest as a claims-and-defenses assertion, which is a credit card route.
- You genuinely do not recognize it and cannot tell which of the above it is → identify the charge first. Half the descriptors people bring us turn out to be a merchant billing under a name they had never seen. Our guide to unrecognized charges walks the identification step before you dispute.
Before you file either one
Get the descriptor identified, pull the receipt or the cancellation confirmation, and write down the date the statement was sent — not the date you noticed. That date is what both clocks run from, and it is the first thing you will be asked for.