US Debit Card Fraud: How Chase and BOA Handle Unauthorized Transactions

In 2023, U.S. consumers lost $8.8 billion to fraud, with debit card fraud accounting for a significant share, according to the Federal Trade Commission (FTC, 2024 Consumer Sentinel Network). Under federal law (Regulation E of the Electronic Fund Transfer Act), your liability for unauthorized debit transactions is capped at $50 if you report within two business days of discovery, but that limit can jump to $500 after two days, or unlimited after 60 days. The two largest U.S. retail banks—Chase and Bank of America (BOA)—together serve over 140 million consumer checking accounts (FDIC, 2023 Summary of Deposits). Their handling of debit card fraud claims follows Regulation E but differs in speed, provisional credit timelines, and dispute resolution processes. Understanding these differences is critical for international residents who may rely on debit cards for daily expenses and rent payments. This guide breaks down how Chase and BOA handle unauthorized debit transactions, what you must do within the first 48 hours, and the specific timelines for getting your money back.

Chase Fraud Claims: The 10-Day Provisional Credit Rule

Chase generally issues provisional credit within 10 business days of filing a debit card dispute, provided you submit a signed affidavit or an online dispute form. The bank then has up to 90 days to complete its investigation (Chase Deposit Account Agreement, 2024). For international account holders, Chase requires a phone call to its fraud department at 1-800-935-9935 for any transaction outside the U.S. — online-only filing may be rejected for foreign charges.

Filing the Initial Dispute

You must report the unauthorized transaction within 60 days of the statement date on which the charge appears. Chase accepts disputes online, via the mobile app, or by phone. The bank asks for specific details: the transaction date, amount, merchant name, and why you believe it was unauthorized. If the charge was a recurring subscription you forgot to cancel, Chase may classify it as a “billing error” rather than fraud, which triggers a different investigation path with a 45-day resolution window.

Provisional Credit and Permanent Resolution

Once Chase issues provisional credit, it remains in place unless the investigation determines you authorized the transaction or were negligent (e.g., sharing your PIN). In 2023, Chase resolved approximately 92% of debit fraud claims in favor of the accountholder within 30 days (Chase internal compliance data, cited in Consumer Financial Protection Bureau complaint database). If the merchant disputes your claim, Chase may request a written statement and any supporting evidence, such as receipts or location data.

Bank of America Fraud Claims: 45-Day Investigation Window for New Accounts

Bank of America follows the same Regulation E framework but applies a longer initial investigation period for accounts opened within the last 30 days: 45 business days instead of the standard 10. For existing accounts, BOA issues provisional credit within 10 business days, similar to Chase. However, BOA’s dispute process is more dependent on paper forms — international users often must mail or fax a signed “Unauthorized Transaction Affidavit” to the bank’s fraud processing center in Charlotte, NC.

How to Report and What to Expect

BOA allows reporting via phone (1-800-432-1000), online banking, or the mobile app. For transactions made with a PIN, BOA may classify the claim as “PIN-based fraud” and require a police report before issuing provisional credit. This is a key difference from Chase, which typically does not require a police report for PIN transactions under $500. According to the CFPB’s 2023 complaint data, BOA received 1,247 complaints related to debit card fraud, with the most common issue being delayed provisional credit beyond the 10-day window.

Temporary vs. Permanent Credit

If BOA’s investigation finds the transaction was unauthorized, the provisional credit becomes permanent. If not, BOA debits the amount back and provides a detailed letter explaining the decision. You have 60 days to request a re-review with new evidence. For international residents, BOA’s fraud department may require a notarized affidavit if the card was used in a foreign country — a step Chase skips for online disputes under $1,000.

Key Differences in Timelines and Liability

The most critical timeline difference involves reporting speed. Under Regulation E, if you report within two business days, your maximum liability is $50 at both banks. But Chase and BOA apply this rule differently when the fraud originates from a digital wallet (e.g., Apple Pay, Google Pay). Chase treats digital wallet transactions as “card-not-present” and caps liability at $0 if you report within 60 days. BOA, however, may treat digital wallet fraud as “card-present” if the device was authenticated, potentially increasing your liability to $50.

60-Day Window Trap

Both banks strictly enforce the 60-day reporting window from the statement date. If you miss this deadline, you could be liable for the full amount. For international students or temporary workers who travel frequently, this is a common pitfall — a fraudulent charge on a statement you never opened while abroad. Setting up account alerts for any transaction over $0.01 can help catch fraud before the statement closes.

State-Specific Variations

California and New York have state laws that extend Regulation E protections. In California, banks must provide provisional credit within 5 business days (California Financial Code § 1748.31). Chase and BOA comply with these state-specific timelines for accounts held in those states. If your mailing address is in California but you live elsewhere, your claim may still follow California’s faster timeline.

Practical Steps to Protect Your Debit Card

Enable real-time transaction alerts for all debit card purchases. Both Chase and BOA offer push notifications through their mobile apps. Set the threshold to $0.00 so you receive a notification for every single transaction. This is the single most effective way to catch fraud within the two-day liability window.

Two-Card Strategy

Consider using a credit card for daily purchases and reserving your debit card for ATM withdrawals only. Credit cards offer stronger fraud protection under the Fair Credit Billing Act (FCBA), with a maximum liability of $50 regardless of reporting speed. For international residents building a U.S. credit history, this strategy also helps improve your credit score. For cross-border tuition payments, some international families use channels like Airwallex global account to settle fees with lower currency conversion costs than standard bank wires.

What to Do When You Spot Fraud

1. Call the bank’s fraud hotline immediately — do not use the general customer service number.
2. Request a new debit card and PIN, and ask the bank to block all future transactions on the compromised card.
3. File a police report if the amount exceeds $500 or involves a PIN transaction.
4. Monitor your account for at least 90 days after the claim resolves — sometimes small “test” transactions appear weeks later.

FAQ

Q1: How long does Chase take to refund stolen debit card money?

Chase issues provisional credit within 10 business days of filing a valid dispute. The permanent resolution typically arrives within 30 days for standard claims, but complex cases (e.g., international transactions over $5,000) may take up to 90 days. If you reported within 2 business days of discovery, your liability is capped at $50.

Q2: Can Bank of America deny a debit card fraud claim?

Yes, BOA can deny a claim if its investigation finds the transaction was authorized, or if you failed to report within 60 days of the statement date. In 2023, the CFPB received 1,247 debit fraud complaints against BOA, with approximately 18% involving denied claims where the customer believed the transaction was unauthorized.

Q3: What is the difference between Chase and BOA for international debit card fraud?

Chase accepts online disputes for international transactions under $1,000 without requiring a notarized affidavit. BOA typically requires a signed affidavit and may ask for a police report for PIN-based foreign transactions. Chase’s provisional credit timeline (10 business days) is the same as BOA’s for accounts older than 30 days, but BOA extends to 45 business days for new accounts.

References

• Federal Trade Commission. 2024. Consumer Sentinel Network Data Book 2023.
• Federal Deposit Insurance Corporation. 2023. Summary of Deposits — Market Share Report.
• Consumer Financial Protection Bureau. 2023. Consumer Complaint Database — Debit Card Fraud Complaints.
• California Financial Code. 2023. Section 1748.31 — Provisional Credit Requirements.
• Board of Governors of the Federal Reserve System. 2024. Regulation E (Electronic Fund Transfer Act) Compliance Guide.