Setting up and protecting your money

You're deciding which card to hand over

Debit and credit cards look identical and work completely differently. A debit card spends money you already have. A credit card borrows money you pay back later.

That difference changes what happens when something goes wrong — fraud, a bad purchase, a disputed charge — and the legal protections are dramatically different. This section is about knowing which card to reach for and why.

Surcharging a debit card is prohibited nationwide — even when it's run as “credit” at the terminal. On credit cards, surcharges are capped at 3% under Visa's rules and can never exceed the merchant's actual cost. So a sign reading “4% for credit or debit” is very likely wrong twice over.

Source: Durbin Amendment to the Dodd-Frank Act; Visa and Mastercard surcharge rules. Connecticut, Massachusetts, Maine and Puerto Rico ban credit surcharges entirely; Colorado caps at 2% and Illinois at 1%.

The basic difference

A debit card spends money you already have. The money leaves your checking account, usually within a day or two.

A credit card spends the bank's money. You get a bill, and if you pay the full statement balance by the due date you pay no interest at all.

That one distinction drives everything else in this section.

Fraud protection is wildly different, and this is the part to remember

Two different federal laws govern these cards, and they don't protect you equally.

Credit cards fall under the Fair Credit Billing Act. Your maximum liability for unauthorized charges is capped by that statute at $50, no matter how much was stolen. In practice Visa, Mastercard, American Express, and Discover almost all waive even that, so you typically pay nothing.

Debit cards fall under the Electronic Fund Transfer Act and Regulation E, where your liability depends entirely on how fast you report:

Report within two business days of learning about it — you're capped at $50.

Under Regulation E, report after two business days but within 60 days of the statement — you're capped at $500.

Report after 60 days from that statement — you can be liable for the entire amount, and potentially for money pulled from linked accounts too.

Read those tiers again, because the difference between reporting on Tuesday and reporting on Friday can be $450 of your own money. This is the single most useful fact in this section, and it is the reason to check your accounts weekly rather than monthly.

Whose money is frozen while it gets sorted out

This is the practical difference nobody explains.

With credit card fraud, the bank's money was spent. You dispute the charge and simply don't pay it while they investigate. Your checking account is untouched.

With debit card fraud, your money is already gone. Your bank must generally investigate within 10 business days and provide provisional credit if it takes longer, and the full investigation can run up to 45 days.

Meanwhile your rent payment bounces, your auto-pay fails, and you collect overdraft fees for a theft you didn't commit. You'll likely get the money back. You will not get those weeks back.

One thing Regulation E does not cover

Regulation E protects you against transfers you did not authorize. It generally does not protect you when you were tricked into authorizing the payment yourself.

If a scammer convinces you to send money through Zelle or a payment app, that transfer was technically authorized by you, and getting it back is much harder. This is precisely why scammers push you toward those methods. See the section on fraud.

What each one costs you

Debit: usually no annual fee and no interest, because you're not borrowing. The costs are overdraft fees when you spend past your balance, out-of-network ATM fees, and occasionally a monthly account fee.

Credit: no cost at all if you pay the statement in full every month. Expensive if you don't — interest at rates that commonly run over 20%, plus late fees. Cash advances are worse, with no grace period and a fee on top.

So debit punishes you for spending money you don't have. Credit punishes you for not paying it back. Different traps, and the credit one is far more expensive if you fall in.

“Cash price” signs, and the fee they can't legally charge you

You have seen the sign: one price for cash, a percentage added for cards. Some of it is legal and some of it is not, and knowing the difference is worth money.

The most useful fact: surcharging a debit card is prohibited nationwide under the Durbin Amendment and card network rules — even when a debit card is run as “credit” at the terminal. A sign charging a fee on debit purchases is charging something it is not allowed to charge.

On credit cards, surcharges are legal in most of the country but capped. Visa caps them at 3% and Mastercard at 4%, so 3% is the practical ceiling for any merchant taking both — and the fee can never exceed what it actually costs them to accept the card.

A few places go further. Connecticut and Massachusetts prohibit credit card surcharges outright, as does Puerto Rico. Colorado caps them at 2%. Several other states allow them only up to the merchant’s actual cost. Maine’s position is stricter than most but described differently by different sources, and California and Texas have bans on the books that federal courts have found unconstitutional, leaving enforcement unclear.

This map changes with legislatures and court rulings, so check your own state rather than relying on any list, including this one.

So a sign reading “4% for credit or debit” is very likely wrong twice over. Debit cannot be surcharged at all — that is prohibited nationwide by the Durbin Amendment and by card network rules, and it holds even when a debit card is run as credit. And 4% exceeds the 3% ceiling for any merchant who accepts Visa.

A cash discount is different and always legal. The distinction is which price is the posted one. If the shelf says $20 and you pay $20.60 with a card, that's a surcharge. If the shelf says $20.60 and cash gets you $20, that's a discount.

Where a surcharge is charged, it must be disclosed before you pay — at the entrance and at the register — and itemized as a separate line on your receipt, showing the dollar amount.

What to do about it: on a small purchase, paying cash to avoid a 3% surcharge is usually the better deal, since most rewards cards pay back 1% to 2% on general spending — less than the surcharge costs you. A card paying 5% in a bonus category could be the exception. On a large purchase, or anything you might need to dispute, the credit card protections in this section are worth more than the fee. And if you're being surcharged on debit, say so — politely, and then complain to the card network or your state attorney general if it continues.

Points, miles, and cash back — what's real and what isn't

Credit cards typically pay something back on what you spend. WalletHub’s tracking of more than 1,500 card offers puts the average cash back rate at about 1.18%, with flat-rate cards commonly at 1.5% or 2% and bonus categories reaching 5% or more, usually with spending caps. Debit cards rarely pay anything, which is one of the few places debit is plainly worse.

The arithmetic that decides whether rewards matter: 2% back is meaningless against 22% interest. If you carry a balance, the rewards are a rounding error against what you're paying to carry it. Rewards are only real for people who pay in full every month, and issuers know precisely what share of their customers do.

Cash back is the simplest version and the hardest to get wrong. A flat 1.5% or 2% on everything — both widely available with no annual fee — requires no strategy, no calendar, and no expiring categories.

Points and miles can be worth more per dollar, especially when transferred to airline or hotel partners. They also come with blackout dates, limited award availability, programs that devalue points without warning, and real hours spent learning a system. For someone starting out, cash back is the better trade.

Sign-up bonuses usually require spending a few thousand dollars in the first three months. If hitting it means buying things you wouldn't have bought, the bonus cost you money. If it's spending you'd do anyway, it's genuinely free.

Annual fees only make sense if you can name the specific benefits you'll use and they clearly exceed the fee. For a first card, pick no annual fee.

The benefits people forget they already have

Many credit cards include protections that quietly save real money, and most cardholders never check whether theirs does:

Extended warranty, which adds time to the manufacturer's warranty on things bought with the card.

Purchase protection against damage or theft for a window after you buy.

Rental car collision coverage, which can let you decline the expensive add-on at the counter. Check whether yours is primary or secondary before relying on it.

Trip delay, cancellation, and lost baggage coverage on travel cards.

Cell phone protection when you pay the phone bill with that card.

Read your card's benefits guide once. It takes ten minutes and it's the difference between being covered and paying twice for coverage you already had.

Holds, and why your money vanishes at the gas pump

Gas stations, hotels, and rental car companies place an authorization hold that can exceed what you actually spend — sometimes well over a hundred dollars at a pump, or hundreds at a hotel.

On a credit card, a hold just uses some of your limit. On a debit card, it freezes your actual cash, sometimes for several days after you've checked out. If your balance is thin, this is how people get stranded with a card that won't work.

For hotels, rental cars, and deposits, use credit if you have it.

Only one of them builds credit

Debit card activity is not reported to the credit bureaus and does nothing for your score. You could use a debit card responsibly for ten years and still be treated as having no credit history when you apply for an apartment or a car loan.

This surprises people who've deliberately avoided credit to be careful. Being careful with debit is good financial behavior that generates no financial record.

When the purchase goes wrong

Beyond outright fraud, credit cards give you leverage when a merchant fails you — goods that never arrive, a service not delivered, a gym that won't cancel. You can dispute the charge and withhold payment while it's investigated.

With debit, you can ask your bank to reverse it, but you're asking for your own money back rather than refusing to pay someone else's.

For anything shipped, anything prepaid, anything from a business you don't know, and anything you might need to fight about — credit is the stronger position.

A practical rule

Use credit for: online orders, travel, hotels, rental cars, deposits, subscriptions, big purchases, and anything from an unfamiliar merchant. Then pay the statement in full.

Use debit for: cash from the ATM, routine in-person spending, and any category where you know you'd overspend on credit.

That last point is real and worth respecting. If a credit card would lead you into a balance you can't clear, the fraud protection isn't worth what the interest will cost you. Use debit, opt out of overdraft coverage, and build credit with a secured card instead.

Prepaid and cash-app cards are a third category with weaker protections than either. Fine for budgeting a set amount, poor as a main account.

Prepaid and reloadable cards, briefly

A prepaid card is neither debit nor credit. You load money onto it, it isn't tied to a checking account, and it builds no credit history.

Fees vary enormously — activation, monthly, reload, ATM, inactivity — and can total more than a checking account would cost you in a year. Registered prepaid cards do carry some Regulation E protection, so register yours.

If you've been turned down for a checking account, a second-chance or Bank On certified account is almost always the cheaper path. See Section 7.

If your card is compromised

Call the number on the back of the card the same day and use the word fraud. For debit especially, the calendar is running against you.

Document the amount, the date, and what happened. Follow up in writing even if you reported by phone.

Ask specifically about provisional credit if it's a debit card and money is missing from your account.

Then change your online banking password and turn on transaction alerts so the next one surfaces in hours instead of weeks.

What you can do

Where to check this yourself

consumerfinance.gov explains Regulation E debit protections, credit card disputes, and how to file a complaint. Report card fraud to your bank first, then at reportfraud.ftc.gov.

Open this in the app — calculators, checklist and search