The short answer
Regulation Z is the CFPB's implementation of the Truth in Lending Act (TILA) and the Fair Credit Billing Act (FCBA). It governs consumer protections around credit cards and other closed- and open-end consumer credit. For merchants, the two most important pieces of Reg Z are: (1) the billing-error dispute process that lets cardholders dispute credit-card charges within 60 days of statement, and (2) FCBA Section 170 (codified in Reg Z) which gives cardholders the right to withhold payment for defective goods or services — even if the merchant has otherwise legitimate grounds to collect.
Reg Z vs Reg E — the core split
- Regulation E: Debit, ACH, prepaid, P2P. Implementing the Electronic Fund Transfer Act.
- Regulation Z: Credit cards and consumer lending. Implementing TILA/FCBA.
Both give consumers a 60-day dispute window; both require banks to investigate; the downstream mechanics differ. Under Reg Z, the bank's dispute initiation kicks off the formal chargeback flow governed by Visa/Mastercard rules.
The FCBA 170 defense
The one Reg Z provision merchants most often encounter: if a customer buys something with a credit card, the merchant fails to deliver or delivers defective goods, and the customer tried in good faith to resolve it, the customer can withhold payment from the issuer. The issuer withholds from you via chargeback. This is NOT friendly fraud — it's a statutory consumer right. Defense: proof of delivery, proof of good-faith resolution attempts, clear refund policy.
What operators need to know
- Your TOS refund policy is the first line of defense. If your terms clearly describe refund eligibility and you honored them, FCBA 170 disputes lose most of their teeth.
- Responsiveness matters. FCBA requires the merchant to have a "reasonable opportunity" to resolve. Ignoring support tickets makes you indefensible.
- Reg Z disclosures for recurring billing. If you bill on credit cards for subscriptions, your enrollment disclosures need to match Reg Z standards — clear price, clear interval, clear cancellation path. Sloppy disclosure = automatic loss on every dispute.
- The "100 miles / $50" rule applies narrowly. FCBA 170 technically requires the transaction to be over $50 AND within 100 miles of the customer's home. Online commerce effectively neutralized the 100-mile restriction through case law, but some issuers still raise it. Worth knowing if you want to contest.
- Reg Z and chargeback representment aren't the same thing. Chargeback representment is a card-network process. Reg Z is the underlying law. An issuer can't reject representment solely because Reg Z was invoked — network rules still apply.
- Credit-card "card-on-file" has Reg Z disclosure requirements. Enrolling a customer in COF for future charges requires specific Reg Z consent language for the specific dollar amounts and intervals.