When did the first unauthorized transaction hit the member's account? Then when did the statement showing that transaction get delivered to the member? Those are the important dates here; the fact that the cardholder didn't notify you of the loss of the card is, frankly, only a minor consideration.
The member gets 60 days from when the statement was delivered showing the first unauthorized transfer to make his error claim. So your notice was actually timely, and the ten day rule will apply, and you have to do an investigation. But read on, since your investigation may be moot.
As for liability, let's assume that none of the transactions took place before the cardholder knew the card was lost or within two days afterward. If all the transactions took place after two days had passed from knowing of the loss of the card, but before the 60th day from that statement delivery we discussed above, the member is liable for the first $500, and for everything that occurred after the 60th day.
It looks to me that the cardholder's delay in notifying you will work in your favor. Even if you agree that all the transactions are unauthorized, you can lay the liability on the cardholder here because of his failure to act.
_________________________
John S. Burnett
BankersOnline.com
Fighting for Compliance since 1976
Bankers' Threads User #8