The bank also stated that it attempted a "chargeback" against the merchant but on Feb. 23, 2011, "the merchant represented the transactions stating that they were valid, based on the sales drafts already provided."
The bank also wrote in that letter, "due to your initial interaction with the merchant, this case is considered a non-fraud claim. Furthermore, you were unable to provide copies of the receipts for the initial transactions that you said you authorized."
McDevitt said the signatures on the receipts are not his and there is no record of the receipt he actually signed.
T.J. Crawford, spokesman for Bank of America, said the bank cannot discuss McDevitt's account, citing customer privacy concerns.
"With any fraud claim, there is a very thorough review process we go through to verify its authenticity," he said.
When asked whether a customer's proof that a signature does not match his is evidence of a lack of authenticity, Crawford said "every instance is unique."
"These are handled on a case-by-case basis," Crawford said.
In a letter dated May 13, 2011 from the bank provided by McDevitt, the bank said "Our attempts to resolve this matter with the merchant have been unsuccessful. We have exhausted all our available options. We can only suggest that you explore other avenues of recourse to obtain a refund and/or come to a more equitable solution with the merchant."
The bank, which followed the rules of fraud protection and also took measures in "good faith," stated that Visa "advised us that they have declined our arbitration case and have decided in favor of the merchant" on May 13, 2011.
A spokesman for Visa said the company is looking into the matter before it can comment.
Consumers should be aware of differences in fraud protection for credit cards and debit cards, Beverly Harzog, credit card expert with Credit.com, said. With credit cards, the maximum liability for fraudulent charges is $50. If you report the loss or theft of your card before it's used, you're not liable for anything. In most cases, the $50 is also waived
"The rules for debit cards are different," she said. Harzog said if your debit card is lost or stolen, you have to report this within two business days to limit your liability to $50. If you don't report it within two days, you can be liable for $500. But if you don't report an unauthorized transfer within 60 days of receiving the statement showing the fraudulent transfer of money, your losses can be unlimited.
"If there are unauthorized charges on your debit card statement and you haven't lost the card or it hasn't been stolen, you have to report the fraudulent charges within 60 days of the date on the statement to limit your liability," Harzog said. "You're only liable for charges after that 60-day window if you fail to report it."
McDevitt filed a claim with Bank of America within two weeks of his visit to Greece, but the bank found the charges were not fraudulent.
Harzog said she suggested that McDevitt contact the Consumer Financial Protection Bureau.
"Whether or not the bureau can help him isn't clear, but I think it's a step he should take," she said. "It's been a year and a half since this started and he's going to need someone to help him get through the bureaucracy to find out if he can get his money back."
McDevitt said he has spoken to a lawyer and tried to get in contact with the merchant without success. He said he also got in touch with the New York State Attorney General's office.
"Every time I get deeper and deeper, I'm told 'no,'" he said, though he has not yet tried to get in touch with Visa.
"I was robbed of money," he said. "I just think the law should be changed, whether it's debit or credit."