1. I'm not familiar with "Secure Debit" but whether or not the bank was paid back for the transactions has nothing to do with whether or not the customer is liabile for the charges. Just because card and PIN were present does not mean that your customer authorized the charges are cards can be counterfeited, phished, skimmed, stolen with the PIN written on them, etc. With or without Secure Debit your customer's maximum liability would be $50.00 if the transactions are the result of a stolen card and the customer reported the theft of the card within two business days of the date the discovered the card was stolen.
If the card was not stolen but was in fact counterfeited, then you cannot use this liability schedule and as long as the customer notifies you within 60 days of the statement date that the first charge appears, they have $0 liability.
The only way the customer is liabile for the charges is if your investigation determines that they actually did them.
2. You can only reverse the provisional credit if you have completed your investigation and denied the customer's claim. Based on your decription of continuing your investigation using Secure Debit, it was improper to reverse their provisional credit as you had not completed your investigation.
_________________________
Sola Gratia, Sola Fides, Sola Scriptura, Solus Christus, Soli Deo Gloria!
www.tcaregs.com