The machinery every other card question depends on is the billing cycle. The issuer closes the cycle on a statement date, produces a statement showing the transactions, the balance, the minimum payment and the payment due date, and then a window runs before the payment is due. That structure is what creates the grace period, which is the interval in which paying the statement balance in full means no interest is charged on those purchases. It is also what makes the reported balance a snapshot, which is why credit utilization can look high on the credit report of somebody who never pays a cent of interest.
Layered on that machinery is a set of statutory protections, and the popular summaries of them are consistently more generous than the law. The statement must reach you at least 21 days before the due date, and if it does not, the payment cannot be treated as late. Significant changes, including a rate increase, need 45 days' advance written notice. The rate on a balance you already owe is generally protected, but a minimum payment more than 60 days late lifts that protection, and the increase must then end within six months of on-time payment. Payments above the minimum generally go to your highest-rate balance first. And the statement must set out what clearing the balance would take and cost at minimum payments, against what it would take and cost over three years.
On fees, the honest answer is a standard rather than a number. Federal law requires that a penalty fee be reasonable and proportional to the violation it relates to, and Regulation Z implements that partly through safe-harbor amounts an issuer may rely on. Those amounts have been the subject of active rulemaking and litigation: a 2024 rule that would have set a much lower safe harbor for late fees was vacated by a federal court in April 2025, and the codified figures currently render inconsistently across official sources. The practical consequence is that the amount you can actually be charged is a term of your cardholder agreement, read against that legal standard, and the figure to rely on is the one in your agreement rather than any number quoted in an article. What has not moved is a separate set of prohibitions that sit on top of the safe-harbor amounts and bind whatever those amounts turn out to be. A penalty fee may not exceed the dollar amount associated with the violation, which for a late payment means the minimum payment that was due. No fee at all may be charged where no amount was owed, which covers a declined transaction, an inactive account, or closing the account. And only one such fee may be imposed for a single event or transaction, so a payment that bounces cannot draw both a returned-payment fee and a late fee.
The cost of a balance you do carry is disclosed as the account's annual percentage rate, and everything a cardholder can actually do about it is a narrower subject than the card itself: the interest-free window and how it is lost, what the minimum payment is designed to achieve, how the interest is computed day by day, moving a balance to a promotional rate, borrowing cash against the limit, the economics of rewards, the annual fee, and the secured card that lets somebody with no history open an account at all. Each is its own question with its own answer.
The most consequential thing a credit card does, and the one least often discussed alongside rewards and interest rates, is give you a stronger position than a debit card when a transaction goes wrong. Paying by credit card means disputing a bill you have not yet paid; paying by debit card means asking for money that has already left your account. The legal regimes differ to match. Under Regulation Z, liability for unauthorized use of a credit card is capped at the lesser of $50 or the amount obtained before you notified the issuer, you may dispute a billing error in writing within 60 days of the first statement showing it, and while a dispute is pending the issuer may not report the disputed amount as delinquent. There is also a narrower right to assert against the issuer the claims you have against the merchant, letting you withhold payment on a disputed purchase, subject to conditions including a good-faith attempt to resolve it with the merchant and a transaction above $50. Debit cards are governed instead by Regulation E, where liability is tiered by how quickly you report: capped at $50 if you notify within two business days of learning the card or credentials were lost or stolen, rising to as much as $500 if you take longer, and potentially unlimited for unauthorized transfers that keep occurring more than 60 days after a statement showing one was sent. Institutions frequently promise more than this, and Regulation E expressly contemplates agreements imposing lesser liability, but those promises are contractual rather than statutory.
