The statute of limitations for credit card fraud is five years under federal law for most offenses, while state deadlines typically run three to seven years depending on where the crime happened and whether it’s charged as a misdemeanor or felony. Civil lawsuits by fraud victims follow separate, usually shorter timelines. And if you’re the cardholder who was defrauded, a different set of deadlines governs how quickly you must report the charges to keep your personal liability capped.
The Federal Deadline Is Five Years
Federal crimes that aren’t punishable by death carry a default five-year statute of limitations, measured from the date the offense was committed.1Office of the Law Revision Counsel. 18 USC 3282 – Offenses Not Capital That covers the main federal access device fraud statute, which criminalizes using counterfeit or stolen credit cards, possessing card-making equipment, and running unauthorized transactions through someone else’s account.2Office of the Law Revision Counsel. 18 USC 1029 – Fraud and Related Activity in Connection with Access Devices If prosecutors don’t return an indictment within five years, they lose the case.
The same five-year window applies when credit card fraud is charged as identity theft under the federal identification fraud statute.3Office of the Law Revision Counsel. 18 USC 1028 – Fraud and Related Activity in Connection with Identification Documents, Authentication Features, and Information
The Ten-Year Exception for Bank-Related Fraud
When a credit card fraud scheme causes losses to a financial institution rather than only to individual cardholders, prosecutors get more time. Federal law extends the limitations period to ten years for offenses like wire fraud and mail fraud that affect a bank, credit union, or similar institution.4Office of the Law Revision Counsel. 18 USC 3293 – Financial Institution Offenses The access device fraud statute itself isn’t on the list of offenses that qualify for the extension, so the ten-year window applies only when the same conduct is charged under wire fraud, bank fraud, or another covered statute.
Computer-Based Fraud
Credit card fraud carried out through hacking, data breaches, or unauthorized computer access can also be charged under federal computer crime law. The criminal side follows the standard five-year deadline. Civil claims under the same statute are much tighter: two years from the act or from discovery of the resulting damage, whichever is later.5Office of the Law Revision Counsel. 18 USC 1030 – Fraud and Related Activity in Connection with Computers Data breach victims who want to sue under this provision have to move quickly.
State Deadlines Vary
Most credit card fraud is actually prosecuted at the state level, and the timelines differ from one jurisdiction to the next. State limitations periods for felony fraud generally fall between three and seven years, with some states allowing longer windows for more serious offenses. How the charge is classified matters. A misdemeanor for a small-dollar fraud often carries a shorter deadline than a felony for a larger scheme, and each state sets its own rules.
Fraud that crosses state lines complicates things. More than one state may have authority to prosecute, and the clock in each runs independently. Federal prosecutors may also step in when a scheme spans several states or involves significant dollar amounts, which brings the five-year federal deadline into play.
Civil Lawsuits Have Their Own Clock
If you were defrauded and want to sue the person responsible, you face a separate and typically shorter deadline than the criminal one. State civil statutes of limitations for fraud claims range from about two to twelve years nationwide, with most states landing in the three-to-six-year range. The exact deadline depends on where you file and how the claim is characterized.
The proof standard is also easier in civil court. Criminal cases require the government to prove guilt beyond a reasonable doubt. A civil plaintiff only needs to show that their version of events is more likely true than not. Easier to win on the merits, but the tighter filing window means less time to build the case.
Your Deadlines as a Fraud Victim
If someone used your card without permission, the statute of limitations isn’t the deadline you need to worry about first. Federal law caps your personal liability for unauthorized charges, but only if you report on time.
Credit Card Charges: $50 Cap
Your maximum liability for unauthorized credit card charges is $50 under federal law.6Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card A few conditions apply: the card must have been an accepted card, the issuer must have given you a way to report loss or theft, and the unauthorized use must have happened before you notified them. Most major issuers voluntarily offer zero-liability policies that waive even the $50, but those are company policies, not legal guarantees. The $50 cap is what the statute requires.
Dispute unauthorized charges in writing within 60 days of the billing statement that first shows the fraudulent transaction.7Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors Send the dispute to the billing inquiries address on your statement, not the payment address. Include your name, the account number, the date and amount of the charge, and a brief explanation. Certified mail with return receipt is worth the extra effort. If the timing of your report ever becomes a fight, you’ll want proof.
Debit Card Charges: Tighter Windows, Higher Risk
Debit cards and other electronic fund transfers work differently, and waiting costs you real money. Notify your bank within two business days of discovering that your card was lost or stolen, and your liability is capped at $50.8Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability Report after two business days but within 60 days of your bank statement, and your exposure jumps to $500. Miss the 60-day window, and you could be on the hook for every dollar stolen after that point.
Those deadlines can be extended for legitimate reasons like hospitalization or extended travel, but not for failing to check your statements.8Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability Check your accounts regularly, and report anything suspicious the same day you spot it.
When the Clock Pauses
The limitations period isn’t always a straight countdown from the date of the offense. A few circumstances can pause it.
The Discovery Rule
Credit card fraud often stays hidden until the victim notices an unfamiliar charge, sometimes months or years later. Many states apply a discovery rule that starts the clock when the victim knew or reasonably should have known about the fraud, rather than when it actually occurred. That keeps a fraudster from running out the clock by concealing the activity. The rule is more common in civil cases than criminal ones, and its exact reach depends on the jurisdiction.
Fugitive Tolling
If the suspect flees, the clock stops. Federal law provides that no statute of limitations protects a person who is fleeing from justice.9Office of the Law Revision Counsel. 18 USC 3290 – Fugitives from Justice Someone who commits credit card fraud and then leaves the country or goes into hiding can’t wait out the five years and come back with immunity. The limitations period resumes when they become available for prosecution. Most states have parallel rules.
What Happens After the Deadline Expires
Once the statute of limitations runs, it’s a hard stop. Prosecutors can’t bring criminal charges, and victims can’t file civil lawsuits, no matter how strong the evidence. The defendant can raise the expired deadline as a defense, and the court will dismiss the case. Even new evidence surfacing later won’t revive it. The only way around this is if a tolling rule applied, keeping the clock paused past the date it would otherwise have expired.
For victims, the practical order of operations is the same in every state: report the fraud to your card issuer immediately, file a police report, and talk to an attorney about civil options sooner rather than later. Waiting shrinks your leverage, and waiting past the deadline ends your case.