This guide is maintained as a current resource for September 2026 and covers only the laws of England and Wales. Information is for general guidance, not legal advice. Consult a qualified solicitor for advice specific to your situation.
Learn how to dispute unauthorised online payments in the UK. This guide explains your legal rights under the Payment Services Regulations, how to report and challenge fraudulent or unauthorised transactions, dispute resolution steps, chargebacks, Section 75 claims, and escalation options for consumers in England and Wales.
Unauthorised online payments – where money leaves your account without your consent – are a serious concern for individuals and businesses alike. UK law provides specific protections and procedures for disputing such payments, including bank reimbursement requirements, regulatory standards, and mechanisms for escalation if your bank does not resolve the issue fairly. This article explains what constitutes an unauthorised payment, your legal rights to dispute it, the steps you should take, how banks and providers must respond, and options if the dispute isn't resolved to your satisfaction.
What Is an Unauthorised Online Payment?
An unauthorised payment occurs when funds are taken from your bank account, debit card, credit card or payment service without your permission. This often results from:
- Fraud or cybercrime involving your account or card details.
- Identity theft where someone uses your personal information.
- A transaction you did not initiate or approve.
Under UK law, a payment is unauthorised when you have not given consent for it to take place. Consumers are protected against such transactions and have rights to seek reimbursement from banks and payment service providers. These protections arise from the Payment Services Regulations 2017 (PSD2) and regulatory guidance from the Financial Conduct Authority (FCA).
Your Legal Rights to Reimbursement
Payment Services Regulations 2017
The PSD2 sets out clear rules that banks and payment providers must follow if an unauthorised payment has been made from your account. Under these regulations:
- You should receive a full refund of the unauthorised transaction as long as you report it promptly and have not acted fraudulently or with gross negligence.
- If the payment was made after the card or payment instrument was lost or stolen, you must report this without undue delay to be eligible for a full refund.
- Providers may only make limited deductions (e.g., up to £35) if they can demonstrate you failed to protect your security details such as your PIN or online password.
- If you report the loss or theft before the unauthorised transaction, you should receive a refund without any deduction.
These protections apply to debit card transactions, credit transfers and other electronic payments. However, different statutory frameworks apply for credit card purchases, such as the Consumer Credit Act 1974.
Step‑by‑Step: How to Dispute an Unauthorised Online Payment
1. Review Your Statement and Verify the Transaction
Check your bank or card statement carefully to identify transactions you do not recognise. Sometimes legitimate charges from subscription services or retailers might look unfamiliar if presented under a corporate name.
2. Report the Unauthorised Transaction Promptly
Contact your bank or payment provider immediately once you identify an unauthorised payment. This is crucial because the law requires you to act without undue delay to maintain your rights to reimbursement. Provide the date, amount, merchant details and any supporting information about why the payment is unauthorised.
3. Complete Required Forms or Provide Supporting Evidence
Your bank may ask you to complete a dispute form or provide written confirmation that you did not authorise the payment. Be factual and specific in your account of what happened.
4. Expect a Timely Response
Under regulatory expectations (outlined by the FCA and payment service standards), your provider should take prompt action in investigating your dispute and processing any refundable amount. This generally occurs within a few business days, though complex cases may take longer.
5. Document All Communications
Keep copies of emails, letters and notes about phone calls with your bank. Clear records support your case if you need to escalate to an independent adjudicator later.
Additional Dispute Mechanisms
Chargeback Scheme
If a card payment was taken in connection with a purchase that did not occur or was unauthorised, you can often request a chargeback through your card provider. A chargeback (a voluntary scheme between banks and card networks) allows the bank to request the merchant's bank to reverse the transaction. These are widely used for online fraud or failure of delivery situations, but they are not a statutory right and depend on individual card scheme rules.
Credit Card Legal Rights – Section 75
If the unauthorised payment relates to goods or services paid for on a credit card, you may be able to rely on Section 75 of the Consumer Credit Act 1974. This provides that the credit provider is jointly liable with the supplier for breaches of contract or misrepresentation, and you can claim directly against your card company where:
- The transaction cost is between £100 and £30,000.
- A direct contract exists between you, the retailer and your credit provider.
Section 75 is a powerful protection but has specific scope and limitations.
What If Your Dispute Is Not Resolved?
Escalate with a Formal Complaint
If your bank does not provide a satisfactory resolution, make a formal complaint in writing to the provider. Most institutions have an internal complaints process and offer a “final response” letter outlining their position.
Financial Ombudsman Service
If your complaint is not resolved within eight weeks, or you are unhappy with the final response, you can refer your case to the Financial Ombudsman Service (FOS). The FOS is an independent body that can investigate disputes between consumers and financial firms regarding unauthorised transactions, identity theft cases and how your provider handled your claim.
Police and Reporting Fraud
In suspected fraud or identity theft cases, report the incident to the police and to UK fraud reporting services such as Action Fraud. Although these reports do not in themselves resolve a banking dispute, they create an official record which may assist with investigations and claims.
Common Issues and Risks in Payment Dispute Cases
Delayed Reporting
Failing to report an unauthorised transaction promptly can jeopardise your rights to a full refund under the Payment Services Regulations. Acting quickly helps preserve your statutory protections.
Claim Classification
There can be confusion between an “unauthorised transaction” dispute and a contractual dispute where you disagree with the amount charged or the product/service delivery. If you authorised a payment but later regret it, this may not be treated as an unauthorised transaction and could instead be a contractual dispute requiring different procedures.
Gross Negligence and Security
If a provider convincingly demonstrates that you were grossly negligent in protecting your account details (for example leaving PINs shared or exposing passwords), they may reduce or refuse refunds. However, these are narrow exceptions and must be supported by evidence.
Key Takeaways
Disputing an unauthorised online payment in the UK involves understanding your legal rights under the Payment Services Regulations and associated protections. You should:
- Check your statements and report suspicious transactions immediately.
- Contact your bank or payment provider and provide clear details of the dispute.
- Use tools such as chargebacks and, for credit card payments, Section 75 protections where applicable.
- Escalate unresolved disputes through the provider's complaints process and, if necessary, to the Financial Ombudsman Service.
Prompt action, clear communication and careful documentation strengthen your chances of recovering funds and resolving unauthorised payment issues effectively.
