Fraud vs dispute — why the difference changes your refund outcome

Last updated: 2026-05-01

Fraud and dispute are not synonyms — banks treat them as two completely different cases handled by two different teams under two different statutes. Fraud means the charge was unauthorized: someone used your card or account without consent, and the protections come from the Fair Credit Billing Act (15 U.S.C. §1643) for credit cards or Regulation E (12 CFR §1005.6) for debit. Dispute means you authorized the transaction but want it reversed for a billing reason — wrong amount, undelivered goods, cancelled subscription, defective product — and that runs through FCBA §1666 (credit) or the merchant-dispute process for debit. Filing the wrong category sends your case to the wrong team, the wrong rulebook, and often a slower, weaker outcome.

Quick answer

1. If you (or anyone you authorized) did not make the purchase: file as fraud / unauthorized.
2. If you made the purchase but the merchant didn't deliver, billed wrong, or won't refund a cancelled subscription: file as a billing dispute / chargeback.
3. If you don't recognize the merchant name but might have used the service: look up the descriptor first. Don't file fraud on a charge you actually authorized — the bank's investigation will close it against you and sometimes flag the account. If you've been the victim of identity theft beyond a single charge, also report at reportfraud.ftc.gov.
4. For debit cards: fraud has stricter Reg E reporting windows ($50 cap within 2 business days, $500 within 60 days, unlimited after). Disputes don't have the same liability tiers but still run on a 60-days-from-statement window under §1005.11.

The two categories, in plain terms

Fraud (unauthorized). Someone got your card details and used them, your physical card was stolen, or someone with no authority used your card. The defining test: was there ever a transaction you said yes to? If no, it's fraud. Banks classify this as "unauthorized use" and point the investigation at the card or account being compromised, not at the merchant's behavior.

Dispute (billing dispute / chargeback). You used the card. The transaction was real. Something went wrong after that — the product never showed up, the gym kept charging after cancellation, the trial converted at a higher price than disclosed, the merchandise arrived broken and the merchant refuses a refund. The investigation is pointed at the merchant, and you generally have to show you tried to resolve it with the merchant first.

The hard cases sit in the middle. A subscription you cancelled six months ago that just billed again — fraud or dispute? In bank language, almost always a dispute, because at some point you authorized the recurring. File it as "cancelled recurring" or "services not received," not fraud — filing it as fraud will get the case denied when the merchant produces your original signup record.

Different teams, different rulebooks, different timelines

	Fraud / unauthorized	Billing dispute / chargeback
Bank team	Fraud investigations / risk team	Merchant disputes / chargebacks team
Credit card statute	Fair Credit Billing Act, 15 U.S.C. §1643 (liability cap)	Fair Credit Billing Act, 15 U.S.C. §1666 (billing error)
Debit card statute	Regulation E, 12 CFR §1005.6 (unauthorized EFT liability)	Regulation E, 12 CFR §1005.11 (error resolution)
Reporting window for full protection	Debit: 2 business days for $50 cap; 60 days for $500 cap. Credit: $50 cap regardless under FCBA, no statutory deadline; FCBA dispute window is 60 days from statement.	60 days from statement on which the error first appears (FCBA §1666 / Reg E §1005.11)
Card reissued?	Yes — almost always. New PAN, new CVV.	No. The card stays active.
Provisional credit	Required under Reg E for debit within 10 business days if investigation will exceed that. Most credit issuers post immediately.	Generally available but not always automatic. Often posts within 1-10 business days.
Need to contact merchant first?	No. Going to the merchant first is actively discouraged for fraud (it can warn the fraudster).	Usually yes for credit cards under FCBA — the regulation expects a good-faith effort. Some networks (Visa, Mastercard) require evidence of merchant contact for certain reason codes.
Typical reason code	Visa 10.4 / Mastercard 4837 (no cardholder authorization), Visa 10.5 / Mastercard 4870 (counterfeit), Amex F29 (fraud — no auth)	Visa 13.1 (services not provided), Visa 13.5 (misrepresentation), Mastercard 4853 (cardholder dispute of recurring), Amex C04 (goods not received)

The reason code matters because it controls what evidence the merchant has to produce to win the case. Fraud reason codes essentially put the burden on the merchant to prove you authorized — they generally need a CVV match, AVS match, 3-D Secure authentication, or a signed receipt. Dispute reason codes put more burden on you to show what went wrong with the merchant.

Liability caps for fraud — the timing that protects you

Card type	Liability cap	Reporting window for cap	Statute
Credit card	$50, usually waived to $0 by issuer policy	No statutory deadline for the cap; FCBA billing-error window is 60 days from statement	15 U.S.C. §1643
Debit — within 2 business days	$50	2 business days from learning of loss / unauthorized use	12 CFR §1005.6(b)(1)
Debit — 3 to 60 days	$500	Within 60 days of statement	12 CFR §1005.6(b)(2)
Debit — after 60 days	Unlimited (you can lose every dollar drained after the 60th day)	—	12 CFR §1005.6(b)(3)

Disputes don't have an equivalent liability ladder because you authorized the charge — there's no question of "who pays for this transaction." The question is whether you get the money back. The 60-day window in FCBA §1666 and Reg E §1005.11 is the limit for filing the dispute, not a liability cap. The CFPB's consumer guidance at consumerfinance.gov/complaint is also where you escalate when the bank denies an obvious fraud or dispute case.

How to know which one to file

Run the charge through three questions in order:

1. Did I (or someone I authorized) ever say yes to a transaction with this merchant? If clearly no — fraud. If yes — dispute. If unsure — keep going.
2. Is the merchant name unfamiliar but the timing or amount is plausibly mine? Look up the descriptor. Cryptic strings like "AMZN MKTP US," "GOOGLE *DOMAINS," "FID BKG SVC LLC," or "PAYPAL *MERCHANTNAME" frequently route to companies you do business with under different names. The descriptor lookup covers most. If the descriptor lookup confirms it's a company you used — dispute (or no action needed). If it stays unfamiliar after lookup — escalate to fraud.
3. Did I cancel something but it kept billing? That's a dispute (cancelled recurring), not fraud. Almost always. The original signup is documented authorization, so calling it fraud will fail and risk the bank closing it against you.

The category you say on the call routes the case. Use the words "unauthorized" or "fraud" only if (1) and (2) above land on fraud. Use "billing dispute," "chargeback," or "the charge is wrong" for everything else.

What goes wrong when you file the wrong category

Filing fraud when it's actually a dispute. The fraud team investigates and finds the merchant's authorization record (your signup, CVV match, AVS match, 3-D Secure check). Case denied. Worst case, the bank flags the account for "first-party fraud" — claiming fraud on a charge you actually made. Repeated first-party fraud claims can trigger account closure. It's why banks now ask "did you make a purchase at [merchant] on [date]?" before opening fraud cases — filtering for misclassification.

Filing a dispute when it's actually fraud. Less catastrophic but slower. The dispute team wants your good-faith merchant contact, purchase records, shipping address. None of that exists because you weren't the buyer. The case eventually gets reclassified, but you've lost days, and the card stays active while the fraudster may keep charging.

Filing fraud on a recurring charge you forgot about. The most common misclassification. You see "BARK*BOX 19.95" or "PLNT FITNESS 24.99" on the statement and file as unauthorized. The merchant produces your signup email, IP address, and the box of dog treats they shipped. Fraud denied — and the right move was always a cancelled-recurring dispute. See the forgotten-subscription guide.

The "unrecognized → unauthorized" handoff

Banks distinguish "unrecognized" from "unauthorized" in the call flow. Unrecognized = "I don't know who this is." Unauthorized = "I know it's not mine and the card has been with me." The bank's first response to "unrecognized" is to ask you to investigate — look up the descriptor, call the phone number on the statement, check with household members. Most unrecognized charges resolve to a legitimate company once the descriptor is decoded.

If after that lookup the merchant is still unknown and the card hasn't left your possession, that's the moment to escalate from unrecognized to unauthorized. Exact phrasing: "I've looked up the descriptor and I don't have any account with this company. The card has been in my possession. I want to report this as unauthorized and request a new card." That pushes the case from the merchant-lookup queue into the fraud-investigation queue.

Anti-misconception: what people get wrong

• "Fraud and chargeback are the same thing." They're not. A chargeback is the network-level mechanism for reversing a charge, used in both fraud cases and disputes. The category you file under (fraud vs. dispute) determines which reason code, which team, and which evidence rules apply.
• "I'll just call it fraud, the bank refunds faster." Sometimes true short-term, but if the merchant produces authorization records, the case is denied and the provisional credit is clawed back. Repeated misuse can flag your account for first-party fraud.
• "If I cancel a subscription and they keep charging, that's fraud." No — that's a cancelled-recurring dispute. The original signup was authorized. The right reason code is something like Mastercard 4853 (cardholder dispute of recurring transaction) or Visa 13.7 (cancelled merchandise/services), not a fraud code.
• "Fraud reports automatically cancel my card." Yes for fraud — the bank reissues. That's why you should not use the fraud framing for a charge you authorized but want reversed; you'll lose the card unnecessarily and any auto-pays attached to it will fail.

FAQ

What if I'm genuinely not sure whether it's fraud or a dispute?

Tell the bank exactly that. Use the framing "I have a charge I don't recognize and I'd like help determining whether it's unauthorized or a billing issue." That puts the case in the right discovery flow without you committing to a category that might be wrong. The agent will walk you through the descriptor lookup and possible explanations before classifying.

Can I switch from a dispute to fraud (or vice versa) after filing?

Yes, but it's a manual reclassification — you have to call back, reference the original case number, and explain why the category was wrong. It's faster to get it right the first time. Banks generally allow the reclassification because the underlying complaint is the same; the rules and team change.

If I file fraud, do I have to file a police report?

Banks rarely require it for normal-sized fraud cases. Some banks request a police report for amounts above $1,000 or for identity-theft patterns. For a single unauthorized charge under that threshold, the bank's internal investigation is usually sufficient. If the bank asks, file the report — don't refuse and risk the case being closed.

Does Reg E or FCBA apply if I used a digital wallet (Apple Pay, Google Pay)?

Yes. The underlying card is what determines the rule set. Apple Pay or Google Pay wrapping a credit card uses FCBA. Wrapping a debit card uses Reg E. The wallet adds a tokenization layer but doesn't change the consumer-protection statute. PayPal, Venmo, and other peer-to-peer services have their own terms layered on top, but the bank-level dispute still runs through the underlying card's regulator.

More on dispute mechanics and refund paths: full card-fraud playbook · how chargebacks actually work · decode an unrecognized charge · first 24 hours after unauthorized use · cancelled subscription that keeps billing · escalate to a CFPB complaint · start a guided dispute