15 U.S. Code § 1643 – Liability of holder of credit card
the card issuer has provided the cardholder with a description of a means by which the card issuer may be notified of loss or theft of the card, which description may be provided on the face or reverse side of the statement required by section 1637(b) of this title or on a separate notice accompanying such statement;
the unauthorized use occurs before the card issuer has been notified that an unauthorized use of the credit card has occurred or may occur as the result of loss, theft, or otherwise; and
the card issuer has provided a method whereby the user of such card can be identified as the person authorized to use it.
For purposes of this section, a card issuer has been notified when such steps as may be reasonably required in the ordinary course of business to provide the card issuer with the pertinent information have been taken, whether or not any particular officer, employee, or agent of the card issuer does in fact receive such information.
(b) Burden of proof
In any action by a card issuer to enforce liability for the use of a credit card, the burden of proof is upon the card issuer to show that the use was authorized or, if the use was unauthorized, then the burden of proof is upon the card issuer to show that the conditions of liability for the unauthorized use of a credit card, as set forth in subsection (a), have been met.
(c) Liability imposed by other laws or by agreement with issuer
Nothing in this section imposes liability upon a cardholder for the unauthorized use of a credit card in excess of his liability for such use under other applicable law or under any agreement with the card issuer.
(d) Exclusiveness of liability
Except as provided in this section, a cardholder incurs no liability from the unauthorized use of a credit card.
Credit Card Accountability Responsibility and Disclosure Act of 2009 (Credit CARD Act)
Pub. L. No. 111-24, 123 Stat. 1734, codified in relevant part to 15 U.S.C. §§ 1601-1667f, 1681 et seq. and 1693 et seq.
This Act (a) amends the Truth in Lending Act to prescribe open-end credit lending procedures and enhanced disclosures to consumers, limit related fees and charges to consumers, increase related penalties, and establish constraints and protections for issuance of credit cards to minors and students (numerous sections); (b) amends the Electronic Fund Transfer Act to address fees and other terms of gift certificates, store gift cards, and general-use prepaid cards (Sections 401-402); (c) amends the Fair Credit Reporting Act by requiring FTC rulemaking to mandate that advertisements for free credit reports disclose that free credit reports are available under Federal law at annualcreditreport.com and by protecting young consumers from prescreened credit offers (Sections 205, 302); and (d) amends the Mortgage Related Provisions of the Omnibus Appropriations Act of 2009 to clarify the FTC’s rulemaking authority under that Act (Section 511). The Dodd-Frank Act transferred these rulemaking authorities to the Consumer Financial Protection Bureau. This Act also requires other rulemaking, studies and activities involving FTC participation.
https://www.law.cornell.edu/uscode/text/15/1643https://www.ftc.gov/legal-library/browse/statutes/credit-card-accountability-responsibility-disclosure-act-2009-credit-card-act