Key Takeaways

  • Use this guide only when neither you nor another authorized cardholder or account user made or approved the payment. A gambling loss, slow withdrawal, missing refund, or other recognized merchant dispute does not become fraud because it is unresolved.
  • A federally regulated financial institution must investigate an alleged unauthorized credit- or debit-card transaction and consider all relevant factors. Correct PIN or other authentication technology alone cannot decide liability.
  • Read the denial as an evidence claim: record the exact reason, agreement clause, transaction details, reporting date, and facts the institution says show authorization, benefit, negligence, or a missed deadline.
  • Ask for a detailed written decision and clarification of the evidence and investigative steps. Do not claim a general right to the institution's complete internal fraud file.
  • A federally regulated bank must provide a detailed written complaint response within 56 calendar days. The Ombudsman for Banking Services and Investments (OBSI) becomes available after the final response closes the file or more than 56 days have passed.
  • OBSI is independent and free, but it does not guarantee reimbursement. A consumer normally has 180 calendar days after the bank's final response to submit the complaint.

Source check

Checked November 9, 2026

Official and operator sources were checked on this date. Recheck time-sensitive details before relying on them.

Quick Answer: A Denial Is a Reason to Check the Record

A bank's denial does not prove that a casino charge was authorized, and it does not prove the bank made an error. It tells you what the institution concluded from its investigation. Compare that conclusion with the exact transaction, the card or account agreement, the evidence you supplied, and the investigation rules that apply.

Save the denial exactly as received. Mark the amount, date, merchant description, payment method, claim number, first report date, stated reason, cited agreement clause, and complaint deadline. If a material fact is missing or wrong, correct it in writing with a small, labelled evidence packet.

This desk-research guide is for Canadian adults dealing with a genuinely unauthorized transaction. Gambling age and legal routes differ by province or territory; Ontario online casino play is 19+. This is general information, not legal or financial advice, and it cannot predict whether a bank or the Ombudsman for Banking Services and Investments (OBSI) will recommend reimbursement.

First Confirm the Payment Was Genuinely Unauthorized

The Financial Consumer Agency of Canada (FCAC) says an unauthorized transaction is generally one the customer did not make or approve. The institution's agreement may define the term more precisely. Use this route when neither you nor another authorized cardholder or account user made or approved the payment.

Do not call a payment unauthorized merely because you lost a wager, a withdrawal is late, a promised casino refund is missing, a recognized deposit appears twice, the casino account was locked, a service is disputed, or you regret an approved deposit. A false fraud report can create inconsistent records in both processes.

If the statement line is unfamiliar, begin with the Canadian unrecognized casino-charge checklist. If the merchant and payment are recognized but another part is wrong, ask the issuer for the non-fraud merchant-dispute route that matches the facts.

The Denied-Claim Decision Graph

Bank denied the unauthorized-transaction claim
          |
          v
Did you or an authorized user make or approve the payment?
       | Yes                         | No
       v                             v
Use merchant, refund,       Save the denial and
duplicate, or casino route  identify its exact reason
                                      |
                                      v
Is a material fact wrong, missing, or unsupported?
             | No                              | Yes
             v                                 v
Request the detailed final          Send a short correction
response and complaint route        with labelled evidence
             |                                 |
             +---------------+-----------------+
                             |
                             v
              Are you satisfied with the bank's outcome?
                    | Yes             | No
                    v                 v
                 Close file    Detailed response closes file,
                               or over 56 days since complaint?
                                      |
                         +------------+------------+
                         |                         |
                        No                        Yes
                         |                         |
                  Track the clock        Contact OBSI within
                  and preserve proof     the applicable limit

This graph is a routing tool, not a promise. New evidence can change the route, and different payment products can use different agreements and deadlines.

Identify the Exact Payment Product and Institution

Do not treat every casino-related statement line as a credit-card chargeback. Record whether the item used a credit card, debit card, co-badged debit card, Interac e-Transfer, pre-authorized debit, bank transfer, mobile wallet, payment wallet, or another service.

FCAC's specific investigation guidance discussed here concerns unauthorized credit- and debit-card transactions at federally regulated financial institutions. Other payment routes can have different liability tests, reporting limits, evidence, and complaint processes. Do not import a card rule into an e-Transfer, wire, wallet, or pre-authorized-debit case.

Also identify the legal institution. Canadian banks and federal credit unions follow the federal bank complaint framework. A provincial credit union can follow provincial rules and a different external-review timeline. Ask the provider to name its regulator and published complaint process.

Read the Denial Line by Line

Turn the denial into a short fact table instead of arguing only with its conclusion. Record the exact transaction, authorization finding, claim and complaint numbers, and the bank's reason for rejecting reimbursement.

  • Did it cite a PIN, chip, password, multi-factor code, device, network address, or wallet token?
  • Did it say you or another authorized user benefited?
  • Did it allege credential sharing, unsafe storage, gross negligence, or late reporting?
  • Did it say a requested statement, affidavit, or document was not supplied?
  • Which agreement clause did it use?
  • Was a provisional credit reversed?
  • Does the letter close the fraud investigation, the formal complaint, or both?
  • What next step and deadline does it give?

A brief fraud-department message may not be the bank's detailed final complaint response. Ask which process and stage the message belongs to.

Evidence Table: What a Denial Signal Does and Does Not Show

Denial signalWhat it may showWhat to check or correct
Correct PIN or chip-and-PINThe system accepted a valid credentialWhat other circumstances were investigated? FCAC says authentication alone cannot decide liability.
Password, device, or multi-factor authentication (MFA) matchedThe event passed one or more security checksWhether credentials or a device were compromised, and what evidence connects the event to the customer.
Card remained in your possessionPhysical theft may be less likelyCard-not-present use, copied details, wallet tokens, account takeover, and other circumstances still need review.
Merchant name is familiarYou may have used that business beforeWhether you approved this exact date, amount, and transaction. Familiarity is not approval by itself.
Casino account shows activityThe operator recorded a login, deposit, wager, or withdrawalWho controlled the account, device, email, and authentication at that time.
Another user had accessA permitted person may have actedTheir actual authority, the agreement, benefit, timing, and transaction-specific evidence.
Report was lateAn agreement deadline may affect the caseStatement date, discovery date, report date, and the exact clause applied.
PIN or password was sharedSafeguarding duties may be relevantWhat was shared, with whom, when, and whether it connects to this transaction.
Provisional credit was reversedThe temporary credit was not finalThe final reason, agreement term, complaint status, and any related fees or interest.

One signal can be important without proving the whole case. Match every claim to transaction-specific evidence.

Correct PIN, Chip, or Authentication Is Not Conclusive by Itself

FCAC says a federally regulated institution cannot hold a consumer responsible only because an authentication technology was used. Its B-6 bulletin says the institution must consider all relevant factors and cannot shorten or eliminate a comprehensive investigation because the correct chip-and-PIN combination appeared.

This does not make authentication evidence irrelevant. It can matter alongside card possession, transaction location, account access, credential handling, device records, reporting speed, coercion, system problems, and other circumstances. The rule is that one authentication signal alone should not replace the full investigation.

If the denial only says that the correct PIN, password, or device was used, quote that sentence in the complaint and ask what other relevant circumstances were considered. FCAC's published debit-card decision is an example where correct PIN use did not, by itself, prove that the cardholder intentionally contributed to the unauthorized use; it is not a promise about another case.

Build One Small Evidence Packet

Use one folder and a one-page timeline. Include only evidence that helps explain the disputed event:

  1. the statement line and safe transaction reference;
  2. the claim and complaint numbers;
  3. the date, time, and channel of the first report;
  4. the denial and any provisional-credit notice;
  5. the current card or account agreement;
  6. reliable card, device, location, or security-alert records;
  7. password, card, email, or device compromise reports;
  8. casino login, deposit, wager, withdrawal, and support history;
  9. operator confirmation that identifies the account and transaction;
  10. police or Canadian Anti-Fraud Centre references, if filed; and
  11. a list of facts that are wrong or absent from the denial.

Do not alter screenshots or crop away context that changes their meaning. Keep originals. Use redacted working copies only when the receiving process permits them, and never send a PIN, password, card security code, one-time code, or recovery code.

Ask the Bank Precise Questions

Ask for answers in writing:

  • Is this the final fraud-investigation decision?
  • Is the formal complaint also closed?
  • What exact transaction and payment product were investigated?
  • What agreement clause or liability rule was applied?
  • What facts were treated as proof of authorization, benefit, unsafe handling, or late reporting?
  • Besides authentication, which relevant circumstances were considered?
  • Was the transaction card-present, card-not-present, wallet-token, recurring, or another type?
  • Which facts or documents could correct an incomplete record?
  • What is the next complaint step?
  • What date did the 56-day complaint clock begin?
  • If the file is closed, where are the detailed written reasons and OBSI instructions?

Ask for the transaction and decision information the bank can provide. Do not claim that the bank must hand over every internal note, proprietary detection rule, employee record, or security system.

Correct Missing or Mistaken Facts

A useful correction is short and specific. Match each document to one disputed fact instead of sending a large, unexplained file.

I dispute the denial for the transaction dated [date], amount [amount], claim [number]. The decision says [exact reason]. The following material fact is wrong or missing: [fact]. The attached [document] supports the correction because [one sentence]. Please confirm whether this changes the investigation result. If not, please provide the detailed written complaint response, the agreement term relied on, and the next complaint step.

Do not hide an inconvenient fact, such as card sharing, credential sharing, a missed notice, or another authorized user. An accurate correction is stronger than a changing story.

If the institution legitimately requests a signed statement or other cooperation, answer promptly. For debit-card matters within its scope, the Canadian Debit Card Code says a requested signed statement or affidavit can temporarily suspend its investigation timing until the information is received.

Casino Records Can Support a Timeline

The operator may hold useful account creation, verification, login, device, deposit, wagering, password-change, withdrawal, support, and account-lock records. Ask through the exact casino domain or authenticated app. Ontario readers should verify the domain through the regulated-site checker before sharing records.

A casino record can support or contradict a timeline. It does not automatically prove who held the bank card, who controlled the device, whether a credential was stolen, or how the bank must apply its agreement. Keep the bank complaint and operator complaint separate, with references to the same transaction.

If the casino account itself may have been taken over, use the Canadian casino-account takeover guide. It separates an unknown bank payment from later unknown wagers or withdrawals inside an already-funded account.

Start the Formal Bank Complaint

Tell the bank clearly that you are making a complaint about its handling of the denied unauthorized-transaction claim. Include the claim number, disputed transaction, exact problem with the investigation or decision, corrected facts, labelled documents, and the outcome requested.

Ask for written acknowledgement, the complaint start date, and the bank's published complaint process. Keep the names or identifiers of employees, dates, contact channels, promises, and every version of the bank's response.

FCAC says a federally regulated bank must give a detailed written response within 56 calendar days after the complaint was first made. The bank's fraud investigation and formal complaint are connected but not identical processes. A 56-day deadline is not a promise that the claim will be approved.

Know What FCAC Can and Cannot Do

FCAC explains federal consumer rights and supervises federally regulated entities. It can help consumers understand a bank's complaint process and can receive information relevant to its compliance work.

FCAC does not resolve the individual banking dispute, order reimbursement for a casino charge, or act as the consumer's lawyer. Do not send FCAC a complaint expecting it to replace the bank process or an OBSI review.

Use FCAC to understand the federal rules and report a possible compliance concern. Use the bank complaint process and, when eligible, OBSI for the unresolved individual banking complaint.

Escalate to OBSI When Eligible

The Ombudsman for Banking Services and Investments (OBSI) is the external complaints body for Canadian banks and federal credit unions. A consumer may generally contact it at the earlier of the bank providing its detailed written response and closing the file, or more than 56 calendar days passing since the complaint was first made.

A consumer normally has 180 calendar days after receiving the final written response to bring the complaint to OBSI. Send the final bank response, or proof of the original complaint date when more than 56 days passed, plus the disputed transaction, agreement, correspondence, correction, evidence packet, short timeline, and the result you believe is fair.

OBSI asks for consent to speak with the firm, receives information from both sides, reviews the facts, and explains its conclusion. Its process is free and impartial. It can recommend a solution, but it does not guarantee reimbursement.

What OBSI Looks At

OBSI's published fraud approach says it considers the applicable law and regulatory rules, account and card agreements, reporting deadlines, whether the transaction was authorized, how the account was accessed, PIN or multi-factor evidence, credential protection, the consumer's reporting speed, and how the firm responded.

It also considers whether the firm followed its legal obligations, agreement, internal process, and known risk information. That can include whether the firm had an opportunity to prevent or reduce the loss and whether its own error or unreasonable response contributed.

OBSI may recommend full compensation, partial compensation, another resolution, or no compensation. It can review unauthorized transactions and chargeback complaints, but the outcome depends on the evidence and the rules that fit the exact product.

Provincial Credit Unions and Other Providers May Differ

The federal 56-day bank route applies to banks and federal credit unions. Provincial credit unions can have different regulators, complaint bodies, and timelines. OBSI's current consumer guidance generally gives participating provincial credit unions 90 days, while Quebec cases may use 60 days with an exceptional extension to 90 days.

A wallet, payment company, non-bank card issuer, wire service, or other provider may also use a different regulator and complaint process. Check the legal name, whether it is federally or provincially regulated, its published process, its external complaint body, and the deadline in the final response.

Do not use the word bank for every payment provider. A rule that fits one institution or payment rail may not fit another.

What Not to Do

  • Do not describe an authorized casino deposit as fraud.
  • Do not hide card sharing, credential sharing, or another authorized user.
  • Do not invent travel, device, police, or location evidence.
  • Do not submit altered screenshots or inconsistent timelines.
  • Do not send a PIN, full password, security code, one-time code, recovery code, or remote-access permission.
  • Do not post statements, account details, or claim numbers publicly.
  • Do not pay a recovery agent who promises guaranteed reimbursement.
  • Do not gamble more to replace the missing money.
  • Do not treat a provisional credit as final.
  • Do not miss a bank, card, OBSI, or legal deadline while waiting for another party.

One accurate timeline is safer than several overlapping claims with different stories. Update every recipient if new evidence changes a material fact.

Final Denied-Claim Checklist

  1. Confirm neither you nor an authorized user made or approved the payment.
  2. Identify the exact payment product and legal institution.
  3. Save the denial and mark its exact reason.
  4. Compare the reason with the agreement and FCAC guidance.
  5. Build a one-page timeline.
  6. Correct each wrong or missing fact with one labelled document.
  7. Ask which evidence and agreement term supported the decision.
  8. Ask whether the fraud file and formal complaint are both closed.
  9. Start or continue the written bank complaint.
  10. Track the first complaint date and the 56-day clock.
  11. Contact OBSI after the bank's detailed written response closes the file, or after more than 56 days since the first complaint.
  12. Submit to OBSI within 180 days of the final response.
  13. Keep provincial credit-union and other provider routes separate.
  14. Protect credentials and reject recovery scams.
  15. Remember that no complaint guarantees repayment.

Explain It To A 12 Year Old

A bank denial is like a referee saying, "Based on the record, the bank will not repay this payment." Shouting louder does not solve it. Save the exact reason, show any wrong or missing facts, and ask the bank to explain the full decision.

If the bank still says no, an independent helper called OBSI can review both sides. The helper may agree with the customer, the bank, or part of each story, so nobody should promise that the money will come back.

Most importantly, tell the truth about what happened. A payment you approved does not become stolen money just because a casino problem happened later.

Frequently Asked Questions

Can a bank deny my claim just because the correct PIN was used?

A federally regulated institution cannot assign liability solely because a PIN or other authentication technology was used. It must consider all relevant circumstances. PIN evidence can still matter alongside the other facts.

Do I have a right to the bank's complete fraud-investigation file?

Do not assume a general right to every internal note, detection rule, or security record. Ask for the detailed written decision, agreement clause, transaction details relied on, relevant reasons, and complaint route. OBSI may obtain further information during its review.

What evidence can help after a denial?

Useful evidence can include the denial, statements, first report time, security alerts, card or device records, casino account history, support messages, agreement terms, and documents that correct a specific wrong fact. Evidence quality matters more than volume.

Is a lost wager or missing withdrawal an unauthorized transaction?

No. An authorized deposit does not become unauthorized because the money was wagered, a withdrawal is late, or the operator dispute is unresolved. Use the merchant, withdrawal, refund, or casino complaint route that matches the facts.

What if my casino account was hacked?

Secure the casino, email, financial accounts, and devices. Save the operator's login, deposit, wager, and withdrawal history. Separate the original bank payment from later unauthorized casino-wallet activity because they may be different events.

How long does a Canadian bank have to answer my complaint?

A federally regulated bank must provide a detailed written response within 56 calendar days from the first complaint. This is the complaint-handling clock, not a promise that the fraud claim will be approved.

When can I contact OBSI?

You can generally contact OBSI after the bank gives a detailed final response and closes the file, or after more than 56 calendar days have passed since you first complained. You normally have 180 days after the final response to escalate.

Does OBSI guarantee reimbursement?

No. OBSI reviews both sides and may recommend full compensation, partial compensation, another resolution, or no compensation. Its service is independent and free, but the result depends on the evidence and applicable rules.

What if the claim involves a provincial credit union?

Use the credit union's published process and check its regulator and external complaint body. Provincial credit-union timelines may differ from the federal bank process; OBSI's published process generally allows participating provincial credit unions more time than banks.

Sources

Sources were checked when this guide was updated. Rules and operator status can change.

  1. Financial Consumer Agency of Canada: Resolving an unauthorized transaction
  2. Financial Consumer Agency of Canada: Unauthorized credit and debit transactions
  3. Financial Consumer Agency of Canada: B-6 investigations of unauthorized transactions
  4. Financial Consumer Agency of Canada: Canadian Code of Practice for Consumer Debit Card Services
  5. Financial Consumer Agency of Canada: How to file a complaint with your bank
  6. Financial Consumer Agency of Canada: External complaints body rights
  7. OBSI: How the complaint process works
  8. OBSI: Approach to fraud complaints
  9. OBSI: Complaint and mandate FAQs
  10. Financial Consumer Agency of Canada: Debit-card decision 493123-757Q307

Responsible Gambling Note

This information is for adults who meet the legal age and location rules where they are. Gambling is paid entertainment with real risk. Never chase losses or use money needed for bills. For confidential help, use the responsible-gambling service listed by your province or territory.