A debit card pays with money already in your checking account, while a credit card borrows the issuer's money and bills you later. That difference drives the rest: a debit purchase leaves your balance immediately and is generally not reported to the credit bureaus, and a credit purchase is a loan that can build a credit history, can cost interest, and falls under a separate federal fraud rule with a lower cap.
Key takeaways
- Federally, fraud on a credit card can cost you at most $50 (12 CFR 1026.12(b)); on a debit card the cap depends on how fast you report, from $50 to $500, and later charges can be uncapped.
- With debit fraud, the money is out of your account while the bank investigates; with credit fraud, the issuer's money is involved, and after a written billing-error notice you may withhold payment of the disputed amount.
- Credit card rates averaged 21.19% on all accounts and 22.36% on accounts assessed interest in the Federal Reserve's preliminary third-quarter 2026 data; paying the full statement balance by the due date avoids interest on new purchases.
- "Zero liability" promises from card networks are voluntary policies with conditions, not the legal floor.
Debit vs credit card side by side
| Feature | Debit card | Credit card |
|---|---|---|
| Whose money is spent | Yours, taken from the linked checking account | The issuer's; you owe it back on the statement |
| Credit reporting | Typically not reported to the nationwide credit reporting companies, so it does not build credit | Payments are typically reported to the nationwide credit reporting companies, so on-time payments and balances shape your credit history |
| Interest | None, because nothing is borrowed | None on new purchases if you pay the full statement balance by the due date; otherwise a variable APR |
| Overdraft | If the account lacks funds, the bank may decline or pay the purchase, but it can charge an overdraft fee on a one-time debit purchase only if you opted in | Purchases can be declined above the credit limit; no overdraft account is involved |
| Federal fraud rule | Electronic Fund Transfer Act and Regulation E: $50, $500 or uncapped depending on timing | Truth in Lending Act and Regulation Z: $50 maximum |
| Money during a dispute | Gone from your account until the bank finishes or issues a provisional credit | Your cash is untouched; after a written billing-error notice, you need not pay the disputed amount while it is investigated |
| Rewards | Usually small or none; large banks' debit fees are limited by Regulation II | Often cash back or points; credit card fees are not capped by Regulation II |
Fraud liability, rule by rule
Debit cards and Regulation E
Unauthorized debit transactions fall under Regulation E, which implements the Electronic Fund Transfer Act. Under 12 CFR 1005.6, a bank can hold you liable only if it gave the required disclosures, the card was an accepted access device, and it provided a way to identify you. Then liability follows tiers:
- Report within two business days of learning the card was lost or stolen: you owe the lesser of $50 or the unauthorized transfers made before you reported.
- Report after two business days: you owe the lesser of $500 or the sum of up to $50 for the first two days plus later transfers the bank shows would not have happened had you reported on time.
- Statement deadline: an unauthorized transfer on a periodic statement must be reported within 60 days after the bank sent that statement. Miss it, and you can be held liable, without a dollar cap, for later transfers the bank shows would have been prevented by a timely report.
The official commentary says the first two tiers do not apply to transfers made without an access device, and a CFPB consumer advisory says that if your card or PIN was not lost or stolen, you are not liable for an unauthorized debit you report within 60 days after the statement is sent. The bank must extend these time limits to a reasonable period when extenuating circumstances, such as extended travel or hospitalization, caused your delay.
Debit cards: getting the money back
For error resolution, 12 CFR 1005.11 requires notice within 60 days after the statement showing the error. The bank generally must decide within 10 business days. If it needs longer, it may take up to 45 days only if it provisionally credits your account within 10 business days (it may withhold up to $50 on a suspected unauthorized transfer). The 45 days become 90 for point-of-sale debit transactions, and 10 business days become 20 for transfers within 30 days after an account's first deposit. No provisional credit is required if the bank asks for written confirmation of an oral notice and does not receive it within 10 business days. So the cash can be missing from the account that pays your bills for two weeks or more.
Credit cards: Regulation Z and the billing-error rules
For credit cards, 12 CFR 1026.12(b) limits your liability for unauthorized use to the lesser of $50 or the value of what the thief obtained before you notify the issuer. It applies only if the card was an accepted card, the issuer gave adequate notice of the liability limit and how to report loss, and it provided a way to identify the cardholder. You can notify the issuer by phone, in person or in writing. The same CFPB advisory says that if only your account number (not the physical credit card) was stolen, you are not responsible for unauthorized charges under federal law.
For both cards, a charge is not "unauthorized" if you gave the card to someone, such as a family member, who then went beyond the permission you gave; the official commentary to both regulations makes you liable until you tell the issuer that person's use is no longer authorized.
The separate dispute process in 12 CFR 1026.13 also covers unauthorized charges. Written notice must reach the issuer at the address it lists for billing errors within 60 days after the first statement showing the error was sent. The issuer must acknowledge within 30 days and resolve within two complete billing cycles, no more than 90 days. While the dispute is pending, you need not pay the disputed amount, and the issuer cannot try to collect it or report it as delinquent.
Zero-liability promises
Visa's policy page, for example, says you won't be held responsible for unauthorized charges, but it excludes certain commercial and anonymous prepaid card transactions and transactions Visa does not process, and it expects you to protect the card and report problems immediately. Such terms are voluntary and can be broader than the regulations, but they are not the legal minimum.
A $600 fraud example
Illustrative example: a thief makes $600 of unauthorized purchases. The table shows the maximum you could owe under the federal rules above, assuming the bank can show the facts each rule requires, before any voluntary policy.
| Scenario | Card type | Maximum liability | Arithmetic |
|---|---|---|---|
| A. Card stolen; $600 charged; reported within 2 business days of learning of the theft | Debit | $50 | lesser of $50 and $600 |
| B. Card stolen; reported late; $100 charged in the first two business days, then $500 the bank shows a timely report would have prevented | Debit | $500 | lesser of $500 and ($50 + $500 = $550) |
| C. Only the card number was stolen (no card lost); you report within 60 days of the statement | Debit | $0 | tiers do not apply; the 60-day rule is met |
| D. Card stolen; $600 charged before you report | Credit | $50 | lesser of $50 and $600 |
| E. Only the card number was stolen (no card lost) | Credit | $0 | no federal liability for number-only theft |
The credit worst case is $50; the debit worst case is $500 with late reporting, ten times more, and uncapped for transfers after the 60-day statement deadline. The bigger difference is often cash flow: in scenario A the bank may investigate for up to 10 business days while $600 is missing from your account. On the credit card, once you send a written billing-error notice, the same $600 is a disputed line you need not pay during the investigation. Voluntary zero-liability policies can make the actual loss lower.
Holds, overdrafts and rewards
Holds at gas pumps and hotels
Gas stations, hotels, car rental companies and other merchants that don't know the final amount place a temporary authorization hold. On a debit card it reduces the cash available in checking until released. An undated page from Georgia's consumer protection division says Visa and Mastercard have authorized gas stations to hold up to $175, and that the issuing bank controls how long a hold lasts. On a credit card the same hold reduces your available credit, not your cash, which matters if your checking balance is thin.
Overdraft opt-in for debit
A debit purchase that exceeds your balance is either declined or paid as an overdraft. Under 12 CFR 1005.17, a bank cannot charge a fee for paying an ATM or one-time debit card overdraft unless you affirmatively opted in, and the consent must be separate from other consents. The official commentary lets a bank pay such an overdraft without your opt-in, but then it cannot charge a fee. Recurring debit card payments, checks and ACH transfers are outside this opt-in rule, so fees can apply to those.
Rewards and the debit fee cap
Card issuers earn an interchange fee on each purchase. For debit cards, the Federal Reserve's Regulation II caps the fee at $0.21 plus 0.05% of the transaction, plus a $0.01 fraud-prevention adjustment for eligible issuers, but issuers with under $10 billion in assets are exempt. On a $50 purchase, the cap works out to $0.245, or 0.49% of the sale. The Fed's 2024 data show average fees of 0.47% on covered transactions versus 1.21% on exempt ones. Less fee revenue per purchase leaves a large bank less room to fund debit rewards. Regulation II does not cap credit card interchange. The debit cap has been challenged in federal court, so the figures may change; they are as stated on the Fed's page, last updated December 19, 2025.
Frequently asked questions
Does using a credit card help my credit score more than debit?
A credit card can. The CFPB says debit card and cash payments are typically not reported to the nationwide credit reporting companies, because you are not borrowing, while payments on cards and loans used to build credit are. In FICO's published breakdown, payment history makes up 35% and amounts owed 30% of a score, and both depend on reported credit accounts. Weights can vary from person to person.
Do I pay interest if I pay my credit card in full?
Generally not on new purchases. The CFPB explains that a grace period, if your card has one, usually applies only to new purchases and only if you were not already carrying a balance; paying the full balance by the due date avoids interest on those purchases. Many issuers calculate interest daily on the average daily balance. As an illustration, $600 left unpaid for 30 days at 22.36% costs about $11 in interest ($600 x 0.2236 / 365 x 30 = $11.03).
What is the average credit card interest rate now?
The Federal Reserve's G.19 release of November 6, 2026 shows preliminary third-quarter 2026 rates of 21.19% for all commercial bank credit card accounts and 22.36% for accounts assessed interest. Your own APR is in your card agreement.
How long can a hold last on my debit card?
According to Georgia's consumer protection division, merchant holds generally last no more than a day, though some credit card companies allow up to three days for banks to clear the transaction and the issuing bank controls when the hold drops off. It advises asking your bank why if a PIN-based hold lasts more than a few minutes or a signature-based hold lasts more than a few days.
Can my bank charge an overdraft fee on a debit card purchase?
Not for an ATM or one-time debit card transaction unless you opted in, and even with consent the bank is not required to pay. You can revoke consent at any time, and the bank must act on it as soon as reasonably practicable.
How to choose at checkout
This article is educational and not personalized advice. A decision path based on the rules above:
- Online shopping, travel, hotels, car rentals and gas at the pump: a credit card keeps holds and fraud off your cash, if you can pay the statement in full.
- Everyday spending when you carry a balance: debit avoids interest; at 22.36% APR a carried balance costs about 1.86% a month (22.36 / 12), which can quickly outweigh card rewards.
- Building a credit history: only a credit product that reports (a credit card, a secured card) does this; a debit card typically does not.
- If you use debit: turn on transaction alerts and report a lost card at once, since the two-business-day clock starts when you learn of the loss. Check whether overdraft coverage is on.
Sources
- CFPB, Regulation E, 12 CFR 1005.6, liability of consumer for unauthorized transfers
- CFPB, Regulation E, 12 CFR 1005.11, procedures for resolving errors
- CFPB, Regulation E, 12 CFR 1005.17, overdraft services
- CFPB, Regulation Z, 12 CFR 1026.12, special credit card provisions
- CFPB, Regulation Z, 12 CFR 1026.13, billing error resolution
- CFPB, report suspicious charges if account data is hacked (consumer advisory)
- CFPB, ways to start or rebuild a good credit history
- CFPB, what is a grace period for a credit card
- Federal Reserve, G.19 Consumer Credit, current release
- Federal Reserve, Regulation II debit card interchange fee standards
- myFICO, what is in your credit score
- Visa, zero liability policy
- Georgia Consumer Protection Division, debit card holds
