Consumer Protection
- Reg E covers debit, ACH and EFT. Tiered liability, and a clock on error resolution
- Reg Z covers credit cards. Billing disputes, $50 maximum liability, merchandise protection
- FCBA sits inside Reg Z. It's where the formal billing-error procedure comes from
- These are bank rules. You don't comply with them, you use them to predict a dispute
These rules bind banks, not you. Learn them anyway: they tell you how a dispute will go.
Reg E and Reg Z constrain banks and issuers, not merchants. You don't have to "comply" with them. But they set the timelines issuers follow, and they decide which of your evidence matters.
Overview
Federal regulations protect consumers in payment transactions. Merchants don't administer them; that's the issuer's job. Knowing them still explains four things:
- Why dispute rights exist and how they differ by payment method
- Why issuers have specific response timelines
- What documentation helps or hurts in disputes
- Why credit disputes differ from debit disputes
Key Regulations
Regulation E (Electronic Fund Transfer Act)
Covers: Debit cards, ATM transactions, ACH transfers, P2P payments (when bank-funded), payroll cards
Key provisions:
- Liability tiers: $0 → $50 → $500 → unlimited based on reporting speed
- Resolution timeline: 10-45 days (90 days for certain transactions)
- Provisional credit: Required if investigation extends beyond 10 days
- Scope: Covers unauthorized transactions, NOT merchandise disputes
Regulation Z (Truth in Lending Act)
Covers: Credit cards, charge cards, HELOCs (BNPL coverage unsettled - 2024 CFPB rule was revoked in 2025)
Key provisions:
- Maximum liability: $50 statutory (most issuers offer $0)
- Written notice: Required within 60 days of statement
- Resolution timeline: 30-day acknowledgment + 2 billing cycles (max 90 days)
- Scope: Covers billing errors AND merchandise disputes
- Collection pause: the issuer can't collect on the disputed amount while it investigates
Fair Credit Billing Act (FCBA)
The FCBA amended TILA in 1974. Regulation Z implements it. What it covers:
- Formal billing error procedures
- A ban on adverse credit reporting mid-dispute
- Acknowledgment and investigation requirements
- The consumer's right to withhold the disputed amount
The FCBA is why credit cards have formal written dispute procedures. Network documentation rarely names it. It's under every credit dispute anyway.
Why Merchants Should Understand
Anticipate Dispute Outcomes
Reg Z covers merchandise disputes. Reg E doesn't. So quality and non-delivery are valid credit dispute reasons. Debit disputes stop at unauthorized transactions. "I didn't receive my order" works on credit, not debit.
Prepare Better Evidence
Issuers have to "investigate". That tells you what to send with a representment. What they must consider shapes what you document.
Set Customer Expectations
Give a frustrated customer a realistic timeline. Point them at the right channel. Fix it before it becomes a dispute.
Evaluate Payment Method Risk
Credit is safer for the consumer: a fixed $50, against escalating debit liability. Some people reach for credit on big purchases for that reason. So your dispute pattern differs by payment method.
Comparison Table
| Aspect | Reg E (Debit) | Reg Z (Credit) |
|---|---|---|
| Consumer liability max | $50 → $500 → unlimited | $50 statutory; $0 in practice |
| Reporting deadline | 60 days from statement | 60 days from statement |
| Notice format | Oral or written | Written only |
| Investigation period | 10-45 days (or 90) | 2 billing cycles (max 90 days) |
| Provisional credit | Required if investigation extended | Not required |
| Merchandise disputes | Not covered | Covered (with conditions) |
| Collection during dispute | Consumer funds already gone | Cannot collect on disputed amount |
Popular in This Section
- Regulation E Guide - Debit/ACH liability and disputes
- Regulation Z Guide - Credit card billing disputes
Next Steps
New to consumer protection regulations?
- Start with Reg E - Debit/ACH liability and disputes
- Then review Reg Z - Credit card billing disputes
Understanding dispute flows?
- Learn the chargeback lifecycle - Full dispute process
- Understand issuer-side handling - How issuers process disputes
Building your compliance program?
- Review network rules - VAMP, ECM thresholds
- Understand PCI DSS - Data security requirements
Related Compliance Topics
- PCI DSS Compliance - Data security requirements
- AML Basics - Anti-money laundering
- Issuer-Side Chargebacks - How issuers handle disputes
- Issuer Perspective - How issuers think about fraud
- Network Rules - Card network regulations
- Subscription Compliance - Recurring billing rules
- Chargeback Lifecycle - Full dispute flow
- Representment - Fighting chargebacks
- Friendly Fraud - First-party abuse
- ACH Operations - Bank transfer handling
- Cards - Card payment types