What you actually owe if your credit card is lost, stolen, or hit by fraud — the $50 rule, explained

Lose a credit card, or spot a charge you didn't make, and the first question is almost always "how much of this is on me?" The answer is one of federal law's more reader-friendly numbers: under the Truth in Lending Act, as implemented by Regulation Z § 1026.12(b), your liability for unauthorized use of a credit card is capped at $50 — and in a lot of real-world cases, it's $0. Here's how the rule actually works, and why your issuer's "zero liability" promise isn't quite the same thing as the law.

The $50 cap, and when it drops to $0

The Consumer Financial Protection Bureau lays out three scenarios plainly:

- You report the card lost or stolen before anyone uses it. You owe nothing. Full stop. - Someone uses your physical card before you report it missing. Federal law caps what you owe at $50 total for those unauthorized charges — not $50 per charge, $50 total, and only for the period before you notified the issuer. - Only your account number was stolen — the physical card never left your hands. You "generally have no liability for unauthorized use" at all, per the CFPB. Card-not-present fraud (a stolen number used online or over the phone) falls into this more protected category.

Regulation Z defines "unauthorized use" precisely: a charge made by someone who isn't the cardholder, who has no actual, implied, or apparent authority to use the card, and from which the cardholder gets no benefit. That last part matters — if a family member you gave the card to runs up a bill you didn't expect, that's a different situation (implied authority) than a stranger who stole your wallet.

The $50 cap isn't automatic — the issuer has to earn it

This is the part that rarely makes it into consumer-finance roundups: Reg Z doesn't just hand issuers a blanket right to charge you $50. The regulation only lets an issuer impose any liability on you if it met three conditions upfront:

1. It's an "accepted" credit card — you requested it or accepted it, not an unsolicited card mailed to you out of the blue. 2. The issuer gave you adequate advance notice — typically in your cardholder agreement — of the $50 maximum liability and how to report a lost or stolen card. 3. The issuer gave you some way to be identified as the authorized cardholder (a signature, photo, PIN, or similar), so it can actually tell authorized use from unauthorized use.

If an issuer skipped any of that, the $50 cap isn't just the ceiling — it can mean you owe nothing at all, because the issuer never satisfied the conditions that let it bill you anything for someone else's fraud.

Notification is the trigger that stops the clock

The $50 cap (when it applies) covers only unauthorized charges made before you notify the issuer. Report the card promptly — a call to the number on the back of the card or in your agreement generally satisfies this — and any fraudulent charges made afterward aren't your liability at all, regardless of how much someone runs up.

Why your issuer's "$0 liability" isn't the same as the law

Plenty of major card issuers advertise "$0 fraud liability" as a selling point, and reasonably so — it's a real, meaningful protection. But it's important to understand what that promise actually is: a voluntary policy layered on top of the $50 federal floor, not a restatement of what Reg Z requires. The CFPB's own guidance notes that "many card issuers" go further than the law demands. That's good news for cardholders, but it also means the protection you're actually relying on lives in your specific cardholder agreement, not just the statute — worth confirming with your own issuer rather than assuming every card works identically.

What this doesn't cover

This liability structure is specific to credit cards under Regulation Z. Debit cards and other electronic fund transfers are governed by a different federal law (the Electronic Fund Transfer Act, implemented through Regulation E), which uses its own liability tiers tied to how quickly you report a loss — generally a less forgiving timeline than the credit-card rule above. Don't assume the $50 credit-card number applies to a debit card dispute; check your bank's specific disclosures for that account type.

What to actually do if you spot unauthorized charges

- Call your issuer immediately using the number on the back of your card (not a number from a suspicious text or email) — this is what starts your $50-or-less protection and stops further liability. Our guide on reporting a lost or stolen credit card walks through that process. - Follow up in writing if the issuer requires it, and keep records of when you reported it. - If a charge shows up on a statement you've already received, that's a billing dispute, not just a fraud report — see how to dispute a credit card charge for the separate written-dispute timeline that applies there. - Ask your issuer directly whether its cardholder agreement offers $0 liability beyond the federal $50 cap — the CFPB notes many issuers do, but it's a policy you confirm in your own agreement, not one you should assume applies universally.

ClearValue Cards doesn't issue cards, process fraud claims, or guarantee any specific issuer's liability policy — we're a publisher and card-matching quiz. If you're comparing cards and want to know which one actually fits how you use credit, take the quiz and find your match.