When Filing His Expense Voucher for His Travel Marcus Notices Several Fraudulent Charges: The 60-Day Window and the Paper Trail That Decides It

Marcus has 60 days from the date the bank or card issuer sends the first statement showing the fraudulent charge. That statement date is the trigger, not the day the charge appeared and not the day Marcus noticed it while reconciling a travel voucher. Under the federal Fair Credit Reporting Act and Regulation Z, the issuer's 60-day clock runs from the statement's transmission date, and a dispute filed on day 61 gives the issuer a legal basis to refuse investigation. The practical cushion shrinks further because most issuers let cardholders dispute by phone or app within days, while the formal written billing-error process has its own address and deadline.

Why the 60-Day Clock Starts at the Statement Date, Not the Charge Date

The controlling statute is Section 161 of the Fair Credit Reporting Act, implemented for cards by Regulation Z, 12 CFR 1026.13. It gives the consumer 60 days after the issuer transmits the first periodic statement reflecting the alleged error to send a written notice. The Consumer Financial Protection Bureau repeats this deadline in its billing-error guidance for consumers. The charge date is irrelevant to the legal clock because the consumer cannot dispute what they have not yet been shown.

A concrete example: Marcus returned from a two-week trip on September 3, and the fraudulent charges posted September 5 and September 6. If the issuer generated his statement on September 12 and transmitted it that day, his 60-day window closes on November 11. If the statement generated October 12, the deadline is December 11. Same charges, same trip, different deadline — the statement controls.

Two details trip people up. First, "transmitted" generally means the date the issuer sent the statement, not the date Marcus opened the envelope or the email. Second, electronic statements count identically to paper ones under the Electronic Signatures in Global and National Commerce Act, so "I only check paper mail" is not a defense the issuer has to accept.

This window is longer than many consumers assume and easier to miss than the 60-day figure suggests. Marcus noticed the problem while doing expense paperwork, which typically happens after the trip and often after at least one statement cycle. If his voucher reconciliation is running three weeks behind, he may already be a third of the way through the window before he picks up the phone.

The Three Deadlines Marcus Is Actually Racing

Marcus is not facing one deadline. He is facing three, and they belong to different parties: the card issuer, his employer's expense system, and his own bank if the card is a debit card tied to a checking account.

The card network rules matter here. Visa's and Mastercard's zero-liability policies generally do not impose a hard consumer deadline the way Regulation Z does, but issuers administer those policies through their own fraud departments, and an issuer can treat a report made after the Regulation Z window as outside the formal dispute process. That is why the 60-day figure is the one to plan around even when the network's promise sounds unconditional.

The employer deadline is a separate trap. A travel and expense policy that requires submission within 30 days of trip end can expire before the card dispute window does. Marcus should file the expense voucher noting the disputed charges as "pending dispute — do not reimburse," submit the fraud report to the issuer the same week, and keep the two processes documented separately. Conflating them is how people lose both.

Debit cards attached to a checking account fall under Regulation E, not Regulation Z. The error-resolution window there is also 60 days from statement transmission for the formal process, but the liability tiers differ: reporting within two business days limits loss to $50, within 60 days limits it to $500, and beyond 60 days the consumer can lose the full amount. Marcus should confirm which regulation governs his card before he assumes the card-issuer timeline applies.

What Counts as "Written Notice" and Why the Phone Call Isn't Enough

A phone call to the fraud line is useful and should happen first, but it does not preserve Marcus's formal rights under Regulation Z. The regulation requires a written notice, and the CFPB's sample billing-error letter exists precisely because verbal reports get logged as service tickets rather than formal disputes. An in-app dispute form filed through the issuer's own system usually satisfies the writing requirement if the issuer documents it as a billing-error claim, but Marcus should confirm the confirmation email says "dispute" and not "inquiry."

The written notice needs four things to be effective: Marcus's name and account number, the dollar amount of each disputed charge, a description of why each is an error, and the date and merchant for each. Vague letters like "there are fraudulent charges on my account" have been held insufficient in some issuer reviews because they don't let the issuer investigate specific items. Itemizing the suspicious charges on the travel voucher is genuinely useful here.

Timing of delivery matters as much as timing of writing. The regulation treats notice as given when the consumer sends it, not when the issuer receives it, so a certified letter postmarked November 10 against a November 11 deadline counts. Marcus should keep the certified mail receipt or the timestamped in-app confirmation. Email alone is risky unless the issuer's terms designate a specific address for billing-error notices.

If Marcus misses the 60-day window, he is not without options, but the ground shifts. The issuer no longer has to conduct the Regulation Z investigation, and the consumer's leverage becomes the card network's zero-liability policy, the issuer's goodwill, and state consumer protection law. Some issuers still investigate late claims, and the CFPB complaint portal remains available. None of that is a guarantee, which is why the deadline deserves a calendar reminder rather than a memory.

The 30-Day Investigation and the 45-Day Extension

Once Marcus files a timely written dispute, the issuer has 30 days to investigate and respond, with a possible 45-day extension if the issuer needs more time and notifies him in writing. The clock pauses in one specific circumstance: if the consumer fails to provide information the issuer reasonably requests, the 30-day period can be extended by up to 15 days after the consumer responds. This is worth knowing because a slow response to the issuer's follow-up request can quietly stretch the process.

During the investigation, the issuer must provisionally credit the disputed amount or refrain from collecting it, and it cannot report the amount as delinquent while the dispute is open. If the issuer resolves against Marcus, it must explain in writing why, and it must give him copies of documents it relied on if he asks. That written explanation is the artifact that makes a CFPB complaint or a state attorney general inquiry viable.

The provisional credit is not a final refund. If the issuer later decides the charges were valid, it can reverse the credit and charge interest from the original transaction date in some cases. Marcus should not spend the provisional credit as if it were settled money, particularly since the disputed amounts appear on an expense voucher that his employer may be tracking.

Ninety days is the outside outer boundary in most scenarios: 45 days for the investigation plus up to 45 more in the narrow case where the issuer needs additional information and the consumer responds late. Planning around a 60-day resolution gives Marcus a realistic expectation and a reason to follow up at the 30-day mark if nothing has arrived.

Marcus's Filing Sequence From Voucher to Resolution

Order matters, and most of the steps are faster than people expect. The sequence below reflects how the dispute and the expense voucher should run in parallel rather than in series.

1: Call the issuer's fraud line the same day, ask for a fraud block on the card, and get a case reference number. Note the representative's name and the date. 2: Pull the statement that first shows the fraudulent charges and record its transmission date. Add 60 days to that date and put the result on the calendar. 3: File the written dispute through the issuer's app or by certified mail within five business days. Itemize each charge with date, merchant, and amount. 4: Submit the expense voucher with the disputed charges marked "under dispute — not for reimbursement," and attach the issuer's case number. 5: Respond to any issuer request for information within five business days of receipt. 6: At 30 days, call for a status update if no written determination has arrived. 7: If the issuer resolves against Marcus, request the written explanation and supporting documents, then escalate to the CFPB or state regulator.

The most common failure is step 3 combined with step 4. People file the voucher first, get reimbursed for some of the fraudulent charges because the employer's system does not cross-check against disputes, and then the issuer's final decision creates a reconciliation problem. Marking the charges as disputed from the start prevents that.

A second failure case involves travel booked through a third-party platform. If the fraudulent charge is from an online travel agency rather than an airline or hotel directly, the issuer may ask Marcus to contact the merchant first. Doing so is not the same as disputing with the issuer, and the merchant contact can consume days. Making the call to the issuer first, and telling them the merchant contact is in progress, keeps the formal dispute alive.

Why Travel Is the Highest-Risk Category for This Scenario

Travel cards and travel-heavy spending produce more fraudulent-charge disputes than most categories because the card is used across unfamiliar merchants, foreign terminals, and small vendors where skimming is easier. A restaurant in a city Marcus visited once, a taxi charge he doesn't remember, a hotel incidentals hold that never resolved — these are the charges that look fraudulent on a voucher and are the hardest to distinguish from legitimate ones.

The practical consequence is that Marcus should not lump every questionable charge into one dispute. Issuers investigate item by item, and a dispute that includes a charge the issuer confirms was legitimate can slow down or undermine the others. Splitting the clearly fraudulent charges from the merely unfamiliar ones makes the investigation cleaner and the outcome faster.

Foreign transaction fees follow the disputed charge and should be disputed with it. If the fraudulent charge was $340 and the foreign transaction fee on it was $10.20 (3% at a common rate), both should be named in the written notice. Issuers sometimes credit the charge but not the fee when the fee is not explicitly listed.

There is a sensory detail worth remembering here: the moment Marcus notices the charges, he is usually at a desk with the voucher half-filled, a stack of receipts, and a statement open in another window. The temptation is to finish the voucher first and deal with the card later. It should be the other way around — the statement date is the deadline, and the voucher can wait an hour.

How the Employer's Travel Policy Interacts With the Dispute

Company travel policies typically define reimbursement timelines in days from trip end, not from statement date, and some set the deadline at 30 days. A fraudulent charge on the corporate card can create a mismatch: the card dispute has 60 days, but the expense submission has 30. Marcus should read the policy for the phrase "disputed charges" before assuming the standard submission deadline applies.

Many policies explicitly carve out disputed charges, allowing them to be submitted when resolved. Some do not. If Marcus's policy lacks the carve-out, he should submit the voucher on time with the disputed line items flagged and a note that resolution is pending, which satisfies the submission requirement without asking the employer to reimburse amounts that may later be credited back by the issuer.

The accounting treatment matters too. If the employer reimburses Marcus for a fraudulent charge and the issuer later credits it, Marcus has been paid twice and has to return the money. Flagging the charge as disputed avoids the reconciliation headache and is usually what the policy expects even when it does not say so.

Corporate cards complicate this further because the employer, not Marcus, holds the account. In that case Marcus may not have standing to file the dispute at all, and the company's card administrator must do it. He should route the disputed charges to the administrator with the statement date and the 60-day deadline noted.

The Documents That Decide a Dispute in Marcus's Favor

The issuer's decision turns on documentation, and the consumer's written notice supplies most of it. A notice that lists each charge with date, merchant, amount, and reason is treated differently from a notice that says "these aren't mine." The former is investigable; the latter invites a request for more information, which pauses the clock.

Receipts are useful but not always available for fraudulent charges — by definition, Marcus never received one. What he can supply is his travel itinerary, his own receipts for legitimate purchases on the same day, and a statement that he was not at the merchant at the time. Location data from a phone, a boarding pass, or a hotel folio showing he was elsewhere at the time of the charge carries real weight.

A comparison of the charge pattern helps too. If the fraudulent charges all posted within a two-hour window on a day Marcus was on a six-hour flight, the pattern itself is evidence. Issuers see this regularly and recognize it.

Marcus should keep copies of everything until the dispute is fully resolved and the determination letter is in hand. Card issuers and the CFPB have taken the position that records should be retained for at least a year after resolution. It costs nothing to keep a folder.

FAQ

What is the 60-day deadline measured from if Marcus never received a statement?

If no statement was transmitted because the account was new or the address was wrong, the 60-day clock generally starts when the statement would have been transmitted, and the issuer must show it sent one. The consumer's fallback is to call the issuer, confirm the statement date on record, and document that call.

Can Marcus dispute a charge his bank already denied as a fraud claim?

Yes, but the two processes are different. A fraud department denial is not the same as a billing-error investigation under Regulation Z, and Marcus can file a formal written dispute on the same charge within the 60-day window. The issuer must investigate the billing-error claim even if its fraud team previously declined.

What happens if Marcus reports on day 61?

The issuer can refuse to conduct the Regulation Z investigation, and that refusal is legally defensible. Marcus's remaining leverage is the card network's zero-liability policy, the issuer's internal goodwill process, and a CFPB or state regulator complaint. None of these come with a guaranteed outcome.

Does the deadline change for a debit card?

The deadline length is the same — 60 days from statement transmission — but the regulation is Regulation E, and the liability tiers are harsher. Reporting within two business days caps loss at $50, within 60 days caps it at $500, and beyond 60 days can leave the consumer liable for the full amount.

How much does it cost to send a certified dispute letter?

Through the U.S. Postal Service, Certified Mail with Return Receipt runs about $4.85 plus postage at current published rates. A cheaper option is the issuer's in-app dispute form, which creates a timestamped record and usually costs nothing. Confirm the in-app submission produces a written confirmation before relying on it.

Is the 30-day investigation period calendar days or business days?

Calendar days. Regulation Z counts calendar days from the date the issuer receives the written notice, and the 45-day extension is also calendar days. Weekends and holidays count toward the deadline unless the regulation specifies business days, which it generally does not for this provision.

Can Marcus be held liable for the fraudulent charges while the dispute is pending?

No, not in the sense of delinquency reporting. The issuer must provisionally credit the disputed amount or withhold it from collection, and it cannot report the disputed amount as delinquent while the investigation is open. If it reverses the credit after resolving against Marcus, it must explain why in writing.

This article is general educational information, not legal or financial advice. Dispute rights depend on the specific card agreement, the governing regulation, and the facts of the transaction, and readers should consult a qualified consumer-protection attorney or their card issuer for advice on their own situation. If a dispute involves potential identity theft, contact local law enforcement and the Federal Trade Commission's IdentityTheft.gov resource.