Usually, your federal liability for unauthorized credit-card use is capped at $50, not the full amount of the fraud. The limit comes from the Truth in Lending Act (TILA), 15 U.S.C. §1643, and applies only when the statute’s conditions are met. Many issuers or payment networks promise zero liability, but that is a contractual benefit with terms—not a guarantee that every transaction is automatically covered.
If you see a charge you did not make, notify the card issuer promptly through the contact method it specifies and use its billing-error dispute process. Credit-card fraud is handled under a different federal framework from an unauthorized debit-card or bank-account transfer, so do not assume the same protection applies to both.
As an Amazon Associate I earn from qualifying purchases.
What the federal $50 rule actually says
Section 1643 of TILA sets a federal ceiling for unauthorized use of an accepted credit card. When its conditions are satisfied, the cardholder’s liability cannot exceed $50. The rule is commonly summarized as:
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →$50 maximum statutory liability — U.S. Congress, 2024 U.S. Code edition.
#1 Best Overall
The Federal Trade Commission (FTC) states the consumer version plainly: “Federal law limits your responsibility for unauthorized charges to $50.” That is a baseline, not a statement that every issuer will charge $50. An issuer may waive the amount and impose no liability under its account agreement.
Conditions that make the cap apply
The statute’s protection depends on several facts occurring together:
- The instrument must be an accepted credit card.
- The issuer must have given adequate notice that unauthorized use could create liability.
- The issuer must have provided a way to report the card’s loss or theft.
- The unauthorized use must occur before the issuer is notified of the loss, theft, or likely unauthorized use.
- Even when those conditions are met, the statutory amount is a ceiling of $50, not an automatic bill for $50.
If the issuer’s agreement gives a more favorable zero-liability promise, that promise can reduce your cost below the federal ceiling. The account agreement and the type of transaction determine whether that promise applies.
Recommended Free Tools
Several fraudulent transactions are not a $50 charge each
Regulation Z commentary describes a series-of-uses rule: the ceiling is the lesser of $50 or the value obtained before the issuer received notice. In practical terms, a cardholder is not exposed to an unlimited total merely because a thief made many purchases before the report. The rule looks at the covered unauthorized use before notification and applies one statutory ceiling to that series, subject to the statute’s conditions.
Rank #2
- Ideal for Gifting
- Ideal for a bookworm
- Compact for travelling
Why “zero liability” is not the same as the federal rule
“Zero liability” is generally an issuer or payment-network promise that is more generous than TILA’s $50 baseline. It may cover eligible unauthorized purchases without charging the statutory amount, but the promise is controlled by the account agreement and transaction rules.
Check the terms that control your account
Read the agreement or the issuer’s fraud-protection disclosure for limits such as:
- Which transaction types qualify, such as purchases versus cash advances or other account activity.
- Whether the promise applies to a physical card, a digital wallet credential, a card number used online, or all of them.
- What notice method and timing the issuer requires after you discover a problem.
- Whether the protection excludes transactions involving a person you authorized to use the card.
- Whether commercial or business accounts receive different treatment from consumer cards.
Do not assume that a marketing reference to zero liability overrides an exclusion in the agreement. If the contract is unclear, ask the issuer which provision it is applying and request the answer in writing.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsWhat to do when you see a fraudulent charge
Prompt notification protects your position and gives the issuer the information needed to investigate. Use this sequence:
- Verify the transaction details. Check the statement or app for the merchant name, date, amount, and whether the entry is pending or posted. Merchant descriptors can differ from the storefront name, so rule out a legitimate purchase by another household member or a recurring subscription before labeling it fraud.
- Contact the issuer through its specified fraud channel. Use the phone number, secure message path, or other method shown on the card or statement. Tell the issuer which transaction is unauthorized and when you discovered it. If the card or account credentials may be compromised, ask whether the card should be blocked and replaced.
- Open a billing-error dispute. Unauthorized charges are billing errors covered by the Fair Credit Billing Act (FCBA). Follow the issuer’s stated instructions for submitting the dispute, including any written channel or address identified on the statement. Describe the charge, amount, date, and why you did not authorize it.
- Keep a complete record. Save the statement or screenshot, transaction details, the date and time you notified the issuer, confirmation numbers, copies of letters or secure messages, and any documents the issuer asks you to provide. Retain proof of delivery for a mailed dispute.
- Watch for follow-up and additional unauthorized activity. Respond to reasonable investigation requests and review later statements for related charges. Ask the issuer how it will handle replacement-card delivery, recurring merchants, and any payment that was already scheduled against the disputed account.
The federal rules do not establish one identical deadline or procedure for every issuer. Acting as soon as you notice the charge and following the instructions on your statement avoids relying on an assumed universal time limit.
How the FCBA dispute process protects you
The FCBA covers unauthorized charges and other specified billing errors on credit-card and revolving-credit accounts. The FTC explains that the process requires prompt written acknowledgment and an investigation of a billing complaint. While the dispute is being investigated, the law protects the consumer from adverse credit action based on the disputed amount.
Fraud is one type of billing error
A charge you did not authorize is not the only FCBA error. The same dispute channel can address problems such as a duplicate charge or an amount that is incorrect. State the specific error rather than simply saying the bill is wrong; the issuer needs to know whether the issue is unauthorized use, duplication, an incorrect amount, or another covered category.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWhat the investigation does not decide automatically
An issuer’s investigation may distinguish a true unauthorized transaction from a merchant dispute, a billing-description misunderstanding, or use by someone who had permission. A rejected fraud claim does not necessarily mean you have no rights; it may mean the issuer needs different information or that another dispute category applies. Ask for the issuer’s written explanation and the next review step.
Rank #4
Credit-card fraud is different from debit-card fraud
A debit-card purchase or an electronic transfer from a bank account is governed by the Electronic Fund Transfer Act (EFTA), 15 U.S.C. §1693g, rather than the credit-card rule in §1643. The notice-sensitive calculation can expose a consumer to more than the credit-card baseline when reporting is delayed, so use the bank’s instructions immediately.
| Situation | Federal framework | What the rule means |
|---|---|---|
| Unauthorized credit-card use | TILA, 15 U.S.C. §1643, and Regulation Z | When statutory conditions are met, liability is generally capped at $50. An issuer agreement may waive the amount entirely. |
| Unauthorized debit-card or bank-account electronic transfer | EFTA, 15 U.S.C. §1693g | A separate, notice-sensitive rule generally uses the lesser of $50 or the amount transferred before notice; delay can change the calculation. |
| Duplicate, incorrect, or other covered credit-card billing error | FCBA | Use the credit-card billing-error dispute process even when the problem is not fraud. |
| Use by a person originally given authority | Regulation Z commentary and the account agreement | Spending beyond the permission granted can remain the cardholder’s responsibility until the issuer is told that authorization has ended. |
Because the two statutes use different notice rules, do not wait for a credit-card statement cycle before reporting an unauthorized bank-account transfer. Contact the bank as soon as the transaction appears and ask which EFTA procedure and deadline apply.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.When a family member, coworker, or employee used the card
“Unauthorized” has a narrower meaning when you gave someone permission to use the card. Regulation Z commentary recognizes that a person who was provided authority can create responsibility for the cardholder when the person exceeds that authority, at least until the issuer is notified that the authorization has ended.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Examples of authority disputes
- You give a family member a card for groceries and they use it for an unrelated purchase. The issuer may treat the transaction as authorized until you report that the person’s permission has ended.
- You allow an employee to use a company card for travel and the employee makes personal purchases. The account agreement and the notice ending permission are important to the issuer’s analysis.
- You never gave the person permission and did not share the card or credentials. That is closer to classic unauthorized use, subject to the issuer’s investigation and the statutory conditions.
Tell the issuer exactly what permission existed, what limits you set, and when you withdrew it. Merely replacing a card may not notify the issuer that an authorized user’s permission has ended; ask how to remove the user and document that request.
Best Value
- It can be a gift option
- Comes with secure packaging
- Helpful in various ways
How the rule works in common scenarios
| Scenario | Likely legal question | Best next step |
|---|---|---|
| A thief uses a lost physical credit card before you report it. | Were the notice, reporting method, and pre-notification-use conditions satisfied? | Report the loss immediately and dispute each unauthorized entry through the issuer’s stated channel. |
| Your card number is used online, but the physical card is still with you. | Is the transaction unauthorized and covered by the account’s fraud terms? | Notify the issuer, secure the account, and submit the FCBA billing-error dispute with transaction details. |
| A household member used the card after you allowed access. | Did the person have actual or apparent authority, and when did you tell the issuer it ended? | Explain the permission and its withdrawal date; request removal of the authorized user. |
| The same merchant posted the same purchase twice. | This is a possible duplicate-charge billing error, not necessarily fraud. | Use the FCBA dispute process and identify both entries and the single underlying purchase. |
| An unfamiliar debit-account transfer appears. | EFTA’s notice-sensitive liability calculation applies, not TILA’s credit-card cap. | Contact the bank immediately and follow its electronic-transfer error procedure. |
Beware of “loss-protection” insurance scams
The FTC warns about callers who claim consumers are liable for more than $50 and then sell “credit-card loss protection” or insurance. Those pitches are designed to obtain money or personal information; they are not a substitute for the issuer’s dispute process.
Do not pay a caller to create protection that federal law or your account agreement already addresses. End the call, use the phone number on the card or statement, and report the charge directly to the issuer. Never provide a one-time passcode or account credentials to an unsolicited caller claiming to be fixing fraud.
Limits of the federal answer
This explanation is for U.S. consumer credit-card accounts. State-law remedies, card-network rules, business-card treatment, and issuer-specific zero-liability terms can change the practical result. The federal statutes also preserve other applicable law and contractual rules, so the $50 figure should not be read as a promise that every account, cardholder, or transaction receives identical treatment.
Free tools Windows power users keep installed
One-click scans. No signup required.
If the issuer denies the dispute, request the reason and the documents it relied on. You may need to review the agreement, pursue the issuer’s escalation process, contact a consumer-protection agency, or obtain advice for your state and account type. Keep the entire paper trail; the notification date and copies of your dispute are often as important as the original statement.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
