Rules
Regulation E Deadlines: What to Do When a Fintech Debit Card Charge Goes Missing
Regulation E error resolution deadlines give 10 business days to investigate. Fintech debit card charges go missing when nobody starts the clock.
What to take away
- Regulation E, at 12 CFR Part 1005, is the federal rule that covers debit card and prepaid card errors, including most fintech card accounts.
- You must tell the institution within 60 days of the statement showing the problem. That notice starts the clock.
- The institution generally has 10 business days to investigate and must provisionally credit you while it works, with a possible 45 calendar day extension in narrow cases.
- The card issuer, not the app, is normally the regulated party. The app is often only a program manager.
- Your first written notice, and the date you sent it, is the record that matters later.
Who has jurisdiction
Regulation E implements the Electronic Fund Transfer Act. The Consumer Financial Protection Bureau writes the rule, and the official text sits at Regulation E, 12 CFR Part 1005. The Federal Reserve keeps a parallel index of consumer regulations at its supervision and regulation listing.
Who Regulates What
Entity
- CFPB
- Writes Regulation E
- Federal Reserve
- Keeps parallel index
- Neobank app
- Front end only
- Chartered bank
- Issues card, legal duty
Role
- CFPB
- Federal Reserve
- Neobank app
- Chartered bank
The rule reaches banks, savings associations, credit unions and most nonbank providers of electronic fund transfer services. That includes prepaid accounts, which is the category most fintech debit cards fall into. A neobank is usually a front end; the deposit account and the card are issued by a chartered bank behind it.
This split matters when a charge goes missing. You may be talking to an app's support chat while the legal duty sits with the issuing bank. Ask for the name of the issuer in writing.
What must be disclosed
A compliant error resolution disclosure tells you four things. First, how to report an error and what contact point accepts notice. Second, the deadline for reporting, which is 60 days after the institution sent the statement or document showing the problem. Third, what happens after you report: investigation, provisional credit, and the time limits. Fourth, how the outcome is communicated.
When you file, give the institution enough to identify the transaction. A compliant notice typically includes the account name, the date and dollar amount of the charge, the merchant descriptor, and a short statement of why the charge is wrong. Keep it factual: unauthorized, duplicated, wrong amount, or goods never received.
- Account name and last four digits of the card
- Date, amount and merchant descriptor of the charge
- One sentence on what is wrong
- The date you send the notice and how you sent it
Records to keep
The record you keep is the one that decides a later dispute. Save a copy of the notice, the send date, and any confirmation number. Screenshots of the app's transaction detail screen help, because descriptors on fintech cards are often cryptic and the app view may be the only readable version.
If the institution misses the investigation deadline without a valid extension, you can ask that the provisional credit become permanent and file a complaint with the CFPB.
The CFPB complaint process is described at its complaint portal. Complaints are public in redacted form, and you can search how other users describe the same company in the Consumer Complaint Database.
What happens if you do not
Miss the 60 day notice window and your protections narrow sharply. The institution may still investigate as a courtesy, but it is no longer bound by the Regulation E error resolution timeline. You can lose the right to provisional credit and the right to a defined answer within 10 business days.
A second consequence is quieter. If you report by phone and never confirm in writing, you may have no proof the clock started. Institutions are required to investigate oral notice too, but proving the date is easier with a written record. For how a disputed card charge moves through authorization, clearing and settlement before it ever reaches this stage, see card payments authorization capture clearing settlement disputes.
Where the rules differ by place
Federal Regulation E sets a floor, and states may add consumer protections on top. Some states impose their own timelines or require additional disclosures for prepaid products. State money transmitter licensing also applies to many fintech operators, which is a separate regime from the card rules. You can check whether an operator holds such a license with this money transmitter license lookup.
If your account is at a state-chartered bank, the state regulator and the federal regulator may both take complaints. If it is at a national bank, the Office of the Comptroller of the Currency handles the bank side while the CFPB handles the rule itself.
Example
A user finds a $38.40 charge from an unfamiliar descriptor on a fintech debit card. They report it in the app chat on day three, then send an email the same day with the date, amount and descriptor. On day nine, no provisional credit has appeared. They send a second email citing Regulation E's 10 business day limit and ask for the investigation status. The credit posts on day eleven with a written explanation.
The lesson is the written notice on day three. Without it, the day nine follow up would have had no anchor. For a broader look at how app balances and deposit insurance differ from a bank account, read digital accounts banks nonbanks balances insurance access.
