Skip to main content

Regulation Z

This page covers credit and charge cards, where the customer disputes a charge on their credit statement. Looking for debit and ACH disputes?

Go by what the customer paid with, not the logo, since debit cards carry Visa and Mastercard branding too. A credit or charge card is Reg Z. Money out of a bank account, including a bank-linked P2P app, is Reg E.

TL;DR
  • Reg Z implements TILA, governs credit card billing disputes, disclosures, and consumer protections
  • Max liability: $50 statutory; most issuers offer $0
  • Billing error disputes: written notice within 60 days of statement
  • Issuers: acknowledge within 30 days, resolve within 2 billing cycles (max 90 days)
  • Unlike Reg E, covers merchandise disputes (with conditions)
  • BNPL coverage remains unsettled (2024 CFPB rule was revoked in 2025)

Reg Z is the federal rule behind credit card billing disputes. It sets the deadlines both you and the issuer have to meet.

What Is Regulation Z?​

Regulation Z (12 CFR Part 1026) implements the Truth in Lending Act (TILA) of 1968. The Fair Credit Billing Act (FCBA) of 1974 expanded it. The CFPB has rulemaking authority.

What Reg Z Covers​

  • Credit cards (open-end credit)
  • Charge cards
  • HELOCs (Home Equity Lines of Credit)
  • Closed-end credit (mortgages, auto loans, personal loans)
  • BNPL (Buy Now, Pay Later) - coverage is unsettled, and the 2024 CFPB interpretive rule didn't survive 2025

Key Provisions​

  • Standardized disclosures (APR, fees, terms)
  • Billing error resolution procedures
  • Limits on unauthorized use liability
  • Restrictions on certain issuer practices

Consumer Liability for Unauthorized Use​

Statutory Maximum: $50​

A consumer who reports unauthorized use promptly has a maximum liability of $50.

In practice:

  • Most issuers offer $0 liability as a competitive feature
  • Visa and Mastercard zero liability policies exceed statutory requirements
  • The $50 is a regulatory floor, not what consumers typically pay

No Time-Based Escalation​

Unlike Reg E, Reg Z liability doesn't move with how fast the consumer reports. Two days or 60 days, the maximum is still $50. That's a real difference between the two rules. Know which one you're under.

Key Difference from Reg E

Reg E (debit): $0 → $50 → $500 → unlimited based on reporting speed Reg Z (credit): $50 maximum regardless of timing

It's why a large purchase feels safer on a credit card.

Billing Error Resolution​

What Qualifies as a Billing Error​

  • Unauthorized charges (fraud, lost/stolen card)
  • Incorrect charges (wrong amount, date, or description)
  • Goods not received
  • Goods not as described
  • Computational errors
  • Failure to credit payments or returns
  • Statements sent to wrong address

Consumer's Obligations​

To invoke billing error protections, the consumer must:

  1. Send written notice (oral notice is insufficient, unlike Reg E)
  2. To the designated billing inquiry address (not the payment address)
  3. Within 60 days of the statement containing the error
  4. Include: name, account number, dollar amount, and explanation of why it's an error

Written notice is the step consumers get wrong. Oral notice doesn't count. Neither does a letter to the payment address.

Issuer's Obligations​

Within 30 days: Send written acknowledgment (unless the issue is resolved)

Within 2 billing cycles (max 90 days): Complete investigation and either:

  • Correct the billing error and credit the account, OR
  • Send written explanation of why the charge is correct

Protections During Investigation​

The issuer cannot:

  • Attempt to collect on the disputed amount
  • Report the disputed amount as delinquent to credit bureaus
  • Restrict or close the account solely because of the dispute
  • Include disputed amount in minimum payment calculation
  • Auto-debit the disputed amount if notified at least 3 business days before

After Investigation​

If error confirmed:

  • Correct the account
  • Credit any finance charges related to the error
  • Send written notification

If no error found:

  • Send written explanation
  • Provide copies of documents if consumer requests
  • Allow grace period to pay (same time as for original billing)

Claims and Defenses (Section 1026.12(c))​

Billing errors aren't the only route. Consumers can also assert claims and defenses against the card issuer over goods or services. That's the issuer carrying your failure. It's why they care about your dispute rate.

Conditions​

To assert claims and defenses:

  1. Consumer made good-faith effort to resolve with merchant
  2. Transaction exceeds $50
  3. Transaction occurred in same state as consumer's address OR within 100 miles

Limitations​

  • Consumer can't recover more than the amount still owed on that specific transaction
  • Geographic and dollar limits don't apply if:
    • Issuer and merchant are related entities
    • Issuer solicited the transaction (e.g., co-branded card promotions)
  • This creates a defense against collection, not an automatic refund
In Practice

Many issuers extend chargeback rights regardless of geographic limits through network rules. The network chargeback process is easier than asserting Reg Z claims and defenses. That's the one you'll actually see. Reg Z is the floor underneath. It applies when the network process doesn't help.

Network Chargeback Rights vs. Reg Z Rights​

AspectReg Z RightsNetwork Chargeback Rights
ScopeFederal law, all credit cardsNetwork rules (Visa, MC, etc.)
Geographic limits100 miles or same stateGenerally none
Dollar threshold$50 minimumOften none
Timeline60 days from statementTypically 120 days from transaction/delivery
Merchandise disputesSubject to conditionsBroader coverage

Most consumers experience network chargeback processes, which are generally more practical and have fewer restrictions. Reg Z is the baseline that can't be contracted away. So build your dispute process around the network rules, not around Reg Z.

BNPL and Reg Z​

Regulatory Status (2025)

In May 2024, the CFPB issued an interpretive rule classifying certain BNPL lenders as "card issuers" under Reg Z. It revoked that rule in April 2025. BNPL is unsettled and likely to move again. Don't rely on a specific BNPL obligation without checking current CFPB guidance. Right now there isn't one.

What Was Proposed (Now Revoked)​

The 2024 interpretive rule would have required BNPL lenders offering digital accounts to:

  • Investigate billing errors using Reg Z procedures
  • Pause disputed payments during investigation
  • Provide refunds if billing errors are confirmed
  • Follow same timelines as traditional credit card issuers

Current State​

Without the interpretive rule, BNPL dispute processes depend on each provider's own policies. Reg Z still applies to BNPL products that meet TILA's definition of credit independently. That generally means more than 4 installments, or any finance charge imposed.

What This Means for Merchants​

  • BNPL dispute processes are provider-specific, and Klarna, Affirm and Afterpay don't share a rulebook
  • No uniform Reg Z-style chargeback process for BNPL currently exists
  • Merchants should review each BNPL provider's dispute policies individually
  • Future regulation may change this - monitor CFPB announcements

Products That Remain Outside Reg Z​

  • 4-or-fewer installments with no finance charge (typical "pay in 4" products)
  • Deferred interest products if paid in full
  • Layaway (no credit extension until final payment)

The typical "pay in 4" product sits outside Reg Z entirely, so your customer's recourse there is whatever the provider's own policy says.

Credit CARD Act Provisions (2009)​

The CARD Act added significant consumer protections implemented through Reg Z:

Rate Increase Protections​

  • 45-day advance notice of rate increases
  • No increases in first year (with limited exceptions)
  • Promotional rates must last minimum 6 months

Payment Allocation​

  • Payments above minimum applied to highest-rate balance first
  • Consumers can direct excess payments if they choose

Statement Requirements​

  • Clear payoff timeframe if only minimum payments made
  • Payoff time at specific payment amounts
  • Same due date each month

Fee Restrictions​

  • Penalty fees must be reasonable and proportional
  • Over-limit fees prohibited unless consumer opts in
  • No fees for phone, mail, or electronic payments

Reg Z vs. Reg E Comparison​

AspectReg Z (Credit)Reg E (Debit/ACH)
Liability cap$50 (most offer $0)$50 → $500 → unlimited
Notice formatWritten onlyOral or written
Notice deadline60 days from statement60 days from statement
AcknowledgmentWithin 30 daysN/A
Investigation2 billing cycles (max 90 days)10-45 days (or 90)
Provisional creditNot requiredRequired if extended
Merchandise disputesCoveredNot covered
Collection during disputeProhibited on disputed amountFunds already gone
Credit reporting during disputeCannot report delinquentN/A

The row that matters to you is merchandise disputes. Your credit customers have a federal route to complain about the product. Your debit customers don't.

Key Timelines Summary​

EventDeadline
Consumer written noticeWithin 60 days of statement
Issuer acknowledgmentWithin 30 days
Issuer investigationWithin 2 billing cycles (max 90 days)
Consumer can withhold paymentDuring investigation
Written explanation if no errorWith resolution

Issuer Compliance Considerations​

Required Practices​

  • Designate billing inquiry address (and disclose it clearly)
  • Train staff on Reg Z procedures
  • Document investigations thoroughly
  • Avoid prohibited actions during disputes
  • Provide written explanations of findings
  • Maintain dispute records

Common Compliance Failures​

Investigation failures:

  • Not completing within 2 billing cycles
  • Not pausing collection on disputed amount
  • Not providing written results
  • Inadequate documentation

Credit reporting failures:

  • Reporting disputed amount as delinquent
  • Not coding disputes properly to credit bureaus
  • Not correcting after resolution

Consumer communication failures:

  • Sending notices to wrong address
  • Missing 30-day acknowledgment
  • Inadequate explanation of findings

Documentation Best Practices​

Maintain records of:

  • Date and content of consumer notice
  • Acknowledgment date and method
  • Investigation steps taken
  • Evidence reviewed
  • Decision rationale
  • Resolution letter
  • Any provisional credits

Enforcement and Penalties​

CFPB Enforcement​

The CFPB is the primary Reg Z enforcer at larger institutions.

2024 Example: $89 million penalty for Apple Card billing dispute mishandling

Common Violations​

  • Failure to investigate properly
  • Improper collection during disputes
  • Inaccurate credit reporting
  • Missing disclosure requirements

Consequences​

  • Civil money penalties
  • Consumer restitution
  • Consent orders
  • Reputational damage

Practical Scenarios​

Scenario 1: Unauthorized Transaction​

Situation: Consumer sees $500 charge they didn't make.

Process:

  1. Consumer sends written notice within 60 days
  2. Issuer acknowledges within 30 days
  3. Issuer investigates (transaction data, merchant records, signatures)
  4. During investigation: amount not in minimum payment, no late fees/interest on disputed amount
  5. Within 2 billing cycles: credit account or explain why charge is valid
  6. Consumer liability: max $50 (most issuers $0)

Scenario 2: Merchandise Not Received​

Situation: Consumer paid $300 for item that never arrived.

Process:

  1. Consumer first attempts good-faith resolution with merchant
  2. If unresolved, sends written billing error notice
  3. Geographic limits apply (but most issuers waive via network rules)
  4. Issuer investigates: delivery confirmation, tracking, merchant communication
  5. No proof of delivery = credit account

Delivery proof decides this one. If you can't produce it, the credit is going through.

Scenario 3: Item Not as Described​

Situation: Consumer paid $150 for "new" electronics that arrived damaged/used.

Process:

  1. Consumer contacts merchant first
  2. Documents issue (photos, correspondence)
  3. Sends written billing error notice
  4. Issuer investigates with evidence from both parties
  5. Resolution based on condition vs. description evidence

Photos and correspondence are the whole case here. Capture them at the time, not once the dispute lands.

Scenario 4: BNPL Dispute​

Regulatory Note

The 2024 CFPB interpretive rule that would have applied Reg Z procedures to BNPL disputes was revoked in 2025. What's below is what most BNPL providers offer voluntarily. It isn't a requirement.

Situation: Consumer used BNPL for $400 purchase, item is defective.

Process:

  1. Consumer contacts BNPL provider
  2. Provider typically pauses disputed payments during investigation (voluntary, not Reg Z-mandated)
  3. Investigation follows provider's own dispute policy
  4. Resolution timeline varies by provider
  5. If resolved in consumer's favor: refund payments made, cancel remaining balance

Next Steps​

Understanding credit card disputes?

  1. Learn the chargeback lifecycle - Full dispute flow from issuer to merchant
  2. Review reason codes - Understand dispute categorization

Preparing for disputes?

  1. Build compelling evidence - Win merchandise and fraud disputes
  2. Understand issuer perspective - How issuers handle Reg Z disputes

Comparing payment methods?

  1. Compare with Reg E - Debit card liability differences
  2. Review BNPL economics - BNPL dispute and cost details

See Also​

Last updated on