The number that decides how much this costs you isn't the fraud amount — it's how many hours pass before you report it.
In almost all cases, your bank or card provider bears the loss, not you — provided you report the unauthorized use promptly. Both the US and UK cap your maximum personal liability by law, and in most real-world situations you can end up paying nothing at all. The single biggest factor in how much you're on the hook for isn't the amount stolen — it's how quickly you report it once you notice.
This is one of the more genuinely consumer-favorable areas of banking law on both sides of the Atlantic, but the exact numbers differ, and the US distinguishes between debit and credit cards in a way the UK doesn't.
| United States | United Kingdom | |
|---|---|---|
| Legal basis — debit | Regulation E, 12 CFR § 1005.6 | Payment Services Regulations 2017, regs. 76-77 |
| Legal basis — credit | Regulation Z / Fair Credit Billing Act | Same Payment Services Regulations 2017 cover both debit and credit |
| Maximum liability — debit, reported fast | $50 if reported within 2 business days of discovering the loss | Provider must refund by end of the next business day after you report it — effectively same-day resolution in most cases |
| Maximum liability — debit, reported late | Up to $500 if reported within 60 days of your statement; potentially unlimited after 60 days | No equivalent 60-day cliff — the Regulations still require prompt refund once reported, though delay can affect how the claim is assessed |
| Maximum liability — credit | Capped at $50 by federal law regardless of timing; most issuers voluntarily offer $0 liability, especially for card-not-present (online) fraud | Same £0-in-practice outcome in most cases, refunded by end of next business day |
| If the bank can show negligence | The $50/$500/unlimited tiers above already account for this | Up to £35 can be deducted from your refund if the provider proves you failed to protect your PIN or security details; refund can be refused entirely if they show you acted fraudulently |
The US debit-card tiers are the sharpest cliff in this entire area of law: $50 if you report within 2 business days, up to $500 within 60 days, and potentially unlimited liability after that. That's a genuinely different outcome depending on whether you happen to check your statement weekly or let it pile up for two months — which is exactly why the advice everywhere is the same: report the moment you notice, don't wait to "look into it yourself" first.
This is the scenario the law is built around, and it's also the most common outcome for people who check their accounts regularly. Expect a fast refund and minimal or zero liability on both sides of the Atlantic.
You're likely still within the US 60-day window for debit cards (capped at $500) and still protected under the UK's Payment Services Regulations. Don't delay any further — report it today, since every additional day matters more the longer it's already been.
A provider deducting the UK's £35 or applying the US negligence-related tiers needs to actually demonstrate this — writing your PIN on the card, sharing it with someone, or similarly clear carelessness. A general claim of "you must have been careless somehow" without specific evidence isn't sufficient grounds, and you can push back on it.
This isn't unauthorized use in the legal sense — the card was used with your consent at the time, even if you now wish you hadn't. These liability protections apply to fraud, not buyer's remorse; a forgotten subscription is a separate cancellation issue, not a fraud dispute.
You report the moment you notice, get written confirmation of the report date, and the provider refunds you within their statutory window without unnecessary friction.
The provider drags out the "investigation" for weeks with no interim update, or tries to shift blame onto you without specific evidence of negligence.
You freeze or cancel the card immediately alongside the report, minimizing any further unauthorized activity while the claim is processed.
You report the fraud but keep using the same card number, allowing further unauthorized charges to happen while you wait.
Use Kibbo's Finance & Banking tools to generate a formal dispute letter citing the exact regulation and timeline your provider is required to follow.
Explore Finance & Banking tools →