A suspicious line appears on a Crédit Agricole account statement. The questions that follow are what type of dispute to file, what deadline applies, and what level of reimbursement the law provides for. These three factors vary depending on whether the transaction was authorized by the cardholder.
Unauthorized transaction or disputed purchase: two distinct legal frameworks
Before taking any action, one distinction determines how the procedure will proceed. An unauthorized transaction (stolen card, hacked data, payment the cardholder never approved) is governed by the French Monetary and Financial Code. A purchase the customer approved themselves but whose product was not delivered or turns out to be non-compliant is a commercial dispute, handled through a chargeback procedure with the card network.
| Criterion | Unauthorized transaction | Disputed purchase (chargeback) |
|---|---|---|
| Cause | Fraud, theft, hacking | Non-delivery, non-compliant product |
| Legal basis | French Monetary and Financial Code | Network terms (Visa, Mastercard) |
| Reporting deadline | Up to thirteen months after the debit | Varies by network and bank |
| Legal reimbursement | No later than the first business day after reporting | No legally mandated deadline |
| Burden of proof | The bank must prove authorization or gross negligence | The customer provides evidence of the dispute |
This table highlights a point that is often overlooked: the fact that a transaction was authenticated (3D Secure, SMS code) is not, by itself, enough to prove that the customer authorized it or acted with gross negligence. The bank must establish the relevant facts to refuse reimbursement.
The steps for disputing a card transaction with Crédit Agricole therefore depend directly on this initial classification.

Thirteen-month deadline for disputing card fraud: what the law provides
The thirteen-month period after the debit is a maximum, not a recommended timeframe. Reporting a fraudulent transaction as soon as possible speeds up processing and reduces the risk of other debits going unnoticed.
If several suspicious debits appear on the statement, each must be reported separately. A blanket report (such as “all the debits from March”) does not meet the bank’s formal requirements.
Reimbursement: one business day after reporting
For an unauthorized transaction reported in accordance with the legal requirements, the French Monetary and Financial Code provides for reimbursement no later than the end of the first business day following notification. Cardholders are often unaware of this very short deadline. In practice, the bank may review the case after crediting the account and may subsequently reverse the reimbursement if it establishes that the customer committed fraud or acted with gross negligence.
A refusal to reimburse does not end the appeals process. The customer can contact the banking ombudsman, then the ACPR (French Prudential Supervision and Resolution Authority), and finally a court if the response remains unfavorable.
Practical steps for disputing a transaction with Crédit Agricole
The actions to take follow a specific sequence. Reversing or skipping a step can complicate the case.
- Immediately block the card through the Ma Banque app, online banking, or Crédit Agricole’s automated phone service to prevent any further fraudulent debits
- Report the suspicious transaction in writing (by registered mail or using the dedicated form at a branch), specifying the date, amount, and reason for the dispute
- File a preliminary complaint or report the incident through Perceval, the French Ministry of the Interior’s platform specifically designed for bank card fraud, then, if necessary, follow up by filing a complaint at a police station or gendarmerie
- Keep all supporting documents: screenshots of the statement, proof of receipt for the letter, Perceval receipt, and any correspondence with the merchant
Blocking the card deactivates the current card. The branch will then arrange a replacement card in accordance with the terms of the agreement.
Special case: spoofing (fake bank adviser)
Scams involving fake bank advisers have become increasingly common in recent years. The typical scenario involves a call displaying Crédit Agricole’s number, a caller who knows the customer’s name and account number, and an urgent request to approve a supposedly fraudulent transaction.
In this situation, the customer’s approval under manipulation does not automatically constitute free consent. European case law has clarified that the bank cannot rely on strong authentication to refuse reimbursement if the customer was the victim of a recognized manipulation technique.
What to do if the bank refuses reimbursement
An initial refusal by the bank opens up several avenues of appeal, each involving a higher level of escalation.
- The Crédit Agricole banking ombudsman: free to contact, with a response within a few weeks to a few months, depending on the complexity of the case
- The ACPR: if mediation fails, this supervisory authority can intervene with the institution
- The judicial court: as a last resort, a judge rules on the basis of the evidence provided by both parties
The decisive factor at every stage remains the burden of proof. For an unauthorized transaction, the bank must prove the customer’s gross negligence, not the other way around. The mere fact that the payment was approved using 3D Secure or an SMS code does not shift this burden.

The difference between a case that is resolved and one that drags on often comes down to the quality of the documents submitted with the initial report. A detailed letter accompanied by the Perceval receipt and statement screenshots leaves the bank little room to claim that the transaction was not properly reported. The legal one-business-day reimbursement deadline exists: mentioning it in your dispute letter may speed up the process.



