Personal Money · Sunday, 23 August 2026

01 · Briefing · what happened

The same theft, four different endings - why getting your money back depends on how it left

Personal Money 2 min 23 sources

A card payment is a request your bank can take back. A transfer is a handover it cannot. Almost every rule about refunds is built on that one difference.

$50

most a stolen US credit card can cost you

capped by the 1974 billing law, and most banks charge nothing [5][6]

$84bn

US non-card fraud losses in 2024

the Federal Reserve says only $21bn came back [1]

£85,000

UK refund cap for a tricked transfer

covers more than 99% of claims [12]

2.33%

average US card swipe fee

paid by the shop on every card sale, and built into the shelf price [20]

At a glance

A card payment is a request, not a handover - the shop asks your bank, and the money sits in your account until it settles [9][10].
A bank transfer is a handover - once it reaches the other account it is that person's money, and your bank can only ask for it back [11].
A stolen US credit card costs you $50 at most, and most banks charge nothing at all [5][6].
The same theft on a US debit card costs $50 if you report it within two working days, $500 within sixty, and everything after that [3][2].
Money you were tricked into sending yourself has almost no US protection: the Federal Reserve counted $84bn of non-card fraud in 2024 and only $21bn recovered [1].
A South Carolina town was emailed into wiring $545,598 to a criminal, and had no card rule to fall back on [19].
Britain went the other way, making refunds for tricked transfers compulsory in 2024 and giving buy-now-pay-later the same purchase cover as a credit card in July 2026 [12][17][18].
A right that exists still has to be granted: one UK bank wrongly refused 34% of the fraud complaints that reached the ombudsman last year [13].

Forces in play

Money moving faster High↑

transfers through 2,200-plus US banks land in minutes and cannot be cancelled once the other person is signed up [11]

Refunds arriving Easing↑

88% of the money taken by tricked transfer in the UK last year was paid back, and 84% of refunds came within five days [14][12]

Losses shifting to the payer Building↑

US cardholders carried under 1.8% of debit-card fraud losses in 2011 and 21.8% by 2023, as banks pushed the bill outward [21]

Reversal being misused Building↑

disputes where the buyer really did make the purchase rose from 15% of reported fraud in 2023 to 36% in 2024, and shops put that in their prices [22][8]

In play Your bank — holds the money and decides what it will try to claw back The card networks — run their own reversal rules on top of the law [7] The shop's bank — the account a chargeback actually takes the money out of [7] The person you transferred to — once the money lands, it is legally theirs [11]

How it unfolded

1974 a US law gives card users the right to have a payment taken back off the shop [7]
1978 the US Electronic Fund Transfer Act sets bank-account limits of $50, $500, or everything [3]
2019 UK banks adopt a voluntary code to refund tricked transfers, and apply it inconsistently [12]
2024 Britain makes those refunds compulsory, capped at £85,000 [12]
July 2026 UK buy-now-pay-later gains credit-card purchase protection above £100 [17]

Where this points

Watch whether US rules attach protection to the harm rather than the road - for now, telling your bank to block a payment only works on money being pulled [23][1].

Full briefing

What a payment actually is

When you tap a card, no money moves. The shop asks your bank a question - is she good for this? - and your bank answers yes, then sets the amount aside [9]. The money is still in your account for a few days [10]. It moves later, in a batch, between banks. That gap is what “pending” means. It is also why a shop can cancel a charge your bank cannot yet touch [9].

A transfer works the other way round. You instruct your bank to hand money to another account, and it does. Nothing is set aside and nothing is pending. Once it arrives it belongs to whoever owns that account. Your bank has no route to it - only a polite request to theirs [11].

That difference in direction is what every rule about getting money back is built on. A chargeback is not a moral judgment about who deserves the money. It is a debit: your bank takes the money back out of the shop’s bank account, because the card networks allow it [7]. Nobody can do that to a stranger’s current account.

The tidy version is wrong

Cards protect you and transfers do not - that is the folk rule, and it fails in both directions. A British tourist in Rio watched a beach vendor turn £5.90 of grilled cheese into £590 by adding two zeros to the card reader [16]. She had tapped, so the payment was authorised, and her bank said authorised card payments cannot be reversed [16]. Had the same vendor tricked her into a bank transfer, UK rules since 2024 would have obliged her bank to refund her. The cap is £85,000, and most refunds arrive within five days [12]. A Paris taxi that billed £493 for an £8 ride hit the same wall, and the bank refused a chargeback for want of a receipt [15].

So the protections do not track how badly you were treated. They track which system the money left by. Each was bolted on separately, decades apart and country by country: American credit cards in 1974, American bank accounts in 1978, British transfers in 2024 [7][3][12]. The American debit rule is still a sliding scale. You lose $50 if you report within two working days, up to $500 by day sixty, and the whole account after that [4][3].

Who pays for the ability to undo

Reversal is a service, and someone buys it. American businesses paid well over $100bn in card fees last year, averaging about 2.33% of each sale, and retailers say the cost of disputes goes into shelf prices [20][8]. The customer paying cash is helping fund the refund the card customer may one day need.

02 · Lesson · why it matters

Why the same theft can have four different endings

Whether money comes back is settled by how it left, not by what was done to you.

How it works

Every payment is either a pull or a push
A pull leaves your bank still holding the money
A push hands it to someone else's bank
Whoever holds it decides what can be undone
So the remedy was fixed when you picked the road

The twist

Your protection is a property of the payment method, not of the wrong done to you - and you choose the method before you know which wrong is coming.

Where you've seen this

Work

the same unfair sacking has different remedies for an employee and for a contractor

Buying a home

a deposit held by a third party can come back; one paid straight to the seller is a negotiation

Online accounts

a password you handed over has to be changed everywhere, a key you can switch off is just switched off

Booking travel

the same cancelled flight pays out differently depending on who you booked it through

The catch

The roads do not sort into safe and unsafe. A card can leave you with nothing while a transfer is refunded, so the route beats the reputation.

Full lesson

The question the shop is actually asking

Tap a card and it feels like handing something over. It is not. The shop is asking your bank a question — is she good for this? — and your bank answers yes and puts the amount to one side. Your money has not gone anywhere. It sits in your account, marked as spoken for, while the two banks settle up over the next few days. That marked-as-spoken-for period is what your app calls “pending.”

A bank transfer is the opposite motion. You do not authorise someone to ask. You instruct your own bank to hand the money over, and it hands it over. Nothing is set aside, because nothing is waiting. The moment it lands, it belongs to whoever owns that account.

One of these is a pull. The other is a push. Almost everything that happens afterwards follows from that.

Nobody can debit a stranger

A chargeback sounds like an appeal. It is not. Nobody weighs your case against the shop’s on a scale of fairness. It is a mechanical operation: your bank reaches into the shop’s bank account and takes the money back out. It can do that because the shop signed up to a card network in order to accept cards at all, and that network’s rulebook says the money can be reclaimed.

Now try that on a transfer. The person you paid never joined a network and never agreed to a rulebook. They are someone with an account at a bank that has no relationship with yours. Your bank cannot reach in. It can send a message asking nicely, and that is the whole of its power.

The lever exists in one case and does not exist in the other. Not because one wrong is worse. Because of which direction the money travelled.

The rules grew one road at a time

Because the lever is a property of the road, every protection had to be written for one road at a time, by someone who noticed that road going wrong. American credit cards got their reversal right in 1974. American bank accounts got a weaker one in 1978. Britain made refunds compulsory for people tricked into transferring in 2024, half a century later. Buy now, pay later — a road that did not exist when any of those were drafted — was handed credit-card-style protection in July 2026.

So there is no single body of law about being cheated out of money. There is a pile of patches, each shaped like the road it was written for, and the gaps between them are simply the places nobody has reached yet.

Which is why the map is not the territory

The folk rule says cards protect you and transfers do not. It is wrong in both directions, and the counterexample is not exotic.

A tourist in Rio de Janeiro bought two slices of grilled cheese. The vendor showed her the right figure on the card reader, turned it away, added two zeros, and took £590 for £5.90 of food. Her bank refused. She had tapped, so she had authorised it, and an authorised card payment is not undone because the amount was a lie. Had the same man tricked her into a transfer, British rules would have obliged her bank to pay her back within days.

The road that is usually the safe one was, that afternoon, the unsafe one. Nothing about her, her care, or the crime decided that. The rulebook did, and it had been written years earlier by people who were thinking about a different problem.

Everyone in the pool pays for the exit

The ability to undo is not free, and it is not paid for by the people who use it. American shops pay a fee on every card sale, averaging about 2.3%, and a chunk of that funds the disputes, the fraud losses and the reversals. Retailers say the cost goes into their prices. The person paying cash at the same counter is helping to fund a refund they can never claim.

Meanwhile the same lever is being pulled by people who were not wronged at all. Disputes filed by customers who really did make the purchase went from a sixth of reported fraud to over a third in a single year. Every one of those makes the pool more expensive for everyone standing in it.

You picked the road before you saw the weather

Here is the humbling part. Every remedy above was fixed at the moment you chose how to pay. At that moment you knew nothing about what was coming. You were thinking about speed, or which card sat nearer the front of the wallet.

You cannot choose well at the moment of the harm, because by then the choosing is over. And you cannot choose well beforehand either, because the thing you are choosing against has not happened and cannot be seen. This is not a failure of attention. It is what it is like to stand inside a system whose shape was decided by other people, for other reasons, before you arrived. From your one seat, the only road you can see is the one you are standing on.

03 · Lab · your turn

The Four Roads

Choose how £500 leaves before you know what goes wrong, and watch the remedy turn out to be a property of the road.

04 · Hope · carry this

Every protection in this story exists because enough people were caught the same way and somebody wrote it down. The gaps that remain are just the roads nobody has got to yet.