My initial impression is that the 2019 transaction isn't involved since the customer has already been reimbursed for it. Under Regulation E, the 2020 transaction could be the subject of the customer's claim, since the customer is claiming it was not authorized, and has not been paid back. If you determine from your investigation, that the 2020 transaction was not authorized, you will have to refund the customer's account for it. The customer would be responsible for the 2021 transaction if the merchant had not already refunded it.
_________________________
John S. Burnett
BankersOnline.com
Fighting for Compliance since 1976
Bankers' Threads User #8