posted on 2015-05-20 by Karen Damato
Finding fraudulent purchases on your credit-card account is bad
enough. Having a thief gain access to your bank balance is much worse.
Criminals are stealing card data from U.S. automated teller machines at the highest rate in two decades, preying on ATMs while merchants crack down on fraud at the checkout counter.
Meanwhile, the risk of unauthorized bank withdrawals is weighing on
consumers deciding whether to make purchases with debit cards, which are
connected to a bank account, versus credit cards, for which
accountholders get a bill to pay later.
If fraudulent transactions are made on your credit-card account,
there is no immediate financial hit while you straighten things out,
notes Greg McBride, chief financial analyst at website Bankrate.com.
By contrast, if a thief is able to withdraw dollars from your bank
account, “the horse is out of the barn,” he says. The money is gone from
your account until you are able to get it restored.
Mr. McBride says he generally recommends credit cards over debit
cards, but principally for benefits such as more-generous rewards
Website CardHub.com says fraud concerns are one reason it suggests
consumers use a credit card as their “primary spending vehicle.”
CardHub Chief Executive Odysseas Papadimitriou says he has personally
experienced credit-card fraud and a fraudulent $3,000 withdrawal from
his bank account. The credit-card problem was annoying but when money
disappeared from his bank account, he says, “I got really, really
stressed out. It was very painful to see that.”
Here’s a look at your fraud-related liability on credit and debit cards:
The Consumer Financial Protection Bureau says that if your
credit-card number—not your physical credit card—is stolen, “you are not
responsible for unauthorized charges under federal law.”
If the actual credit card is stolen, you are liable for no more than
$50 in unauthorized charges as long as you report it to the card issuer.
But “most card issuers don’t even hold you to the $50,” Mr. McBride
The Visa V -0.38% and MasterCard MA -0.25% networks and big issuers Discover Financial Services DFS -0.45% and American Express AXP -0.10% all have a zero-liability policy on fraudulent credit-card transactions, according to a recent study by CardHub.
Many banks have instituted a zero-liability policy on their debit
cards, says Mr. McBride, because “they want people to use their debit
But issuing banks usually have some discretion to determine if the
customer promptly reported the theft. And different types of debit-card
transactions may be treated differently.
Federal rules allow significant liability for fraudulent debit-card transactions that aren’t reported in a timely manner.
With debit cards, the CFPB says that “if an unauthorized transaction
appears on your statement (but your card or PIN has not been lost or
stolen), under federal law you will not be liable for the debit if you
report it within 60 days after your account statement is sent to you.”
The rules are different if the card or PIN has been lost or stolen:
Report the problem within two business days and liability is limited to
$50 of unauthorized charges. Then the maximum liability rises to $500.
“If any unauthorized charges go unreported for more than 60 days,”
the CFPB says, “your money, and future charges by the same person, could
While financial-industry policies can be more generous than the U.S.
requires, that can also vary with the type of debit-card transactions
involved, the CardHub report says.
For instance, CardHub says Visa and MasterCard both provide for zero
liability on signature-based transactions on their debit cards. Also,
there’s no liability on a PIN-based Visa debit-card transaction
processed through the Visa network—and the same for MasterCard
transactions on that network. (But a consumer “has no way of knowing
what network transactions are processed on and therefore how much
coverage they have,” the CardHub report says.)
Meanwhile, on ATM withdrawals, CardHub says coverage is at the discretion of the individual bank that issued the card.
The Federal Trade Commission has a handy summary of the rules and advice on how to report card fraud on its website.