Employee in a medical office took a payment from our customer and used the debit card for 3 transactions. The medical office has contacted our customer and stated that he needs to dispute 2 of the transactions because the employee stole the money. All three transactions posted to the medical office - she didn't steal the number and purchase on Amazon. I'm assuming at the end of the day, she removed the cash and balanced just to the daily total. The medical office is telling our customer that he needs to dispute with us. Are we responsible for making the consumer whole?

Regardless of how the unauthorized transaction occurred, it's your customer and you are responsible for investigating under Reg E to determine if an error occurred.

V/MC have chargeback rights for filing chargebacks when a merchant processes a card multiple times without authorization which you can use to recover the funds for the bank.

Thank you Brian. I thought that was the answer.