Credit Card Fraud: 15 Warning Signs and What to Do Immediately

A charge of $1.19 appears on your credit card account. You do not recognize the merchant, but the amount seems too small to worry about.

Ignoring it could be an expensive mistake.

Criminals sometimes make tiny test transactions to discover whether stolen card information still works. If the payment succeeds, they may attempt larger purchases, add the card to a digital wallet or sell the details to another criminal.

Credit card fraud does not always begin with a missing card or a huge purchase. Your physical card may remain inside your wallet while someone uses its number online. The first warning might be an unfamiliar charge, an unexpected verification code or a sudden drop in available credit.

If something looks wrong, act immediately. Do not wait for another transaction to prove that fraud is happening.

Credit Card Fraud Emergency Checklist

1. Lock the card through the official banking application, if available.
2. Contact the card issuer using the number printed on the card or listed on its official website.
3. Report every unauthorized pending and completed transaction.
4. Ask whether the account should be closed and replaced.
5. Change compromised passwords and remove unfamiliar devices.
6. Check whether the incident involves only the card or wider identity theft.
7. Preserve screenshots, messages, transaction details and dispute numbers.

What Is Credit Card Fraud?

Credit card fraud is the unauthorized use of a credit card or its account information to obtain money, goods or services.

It can happen when someone:

• Steals and uses a physical card
• Copies information from the card
• Obtains the card number through phishing
• Buys stolen card details
• Takes control of the cardholder’s online account
• Adds the card to an unauthorized digital wallet
• Intercepts a replacement card
• Opens a new account using another person’s identity

A criminal does not necessarily need the physical card. Online and telephone purchases can sometimes be attempted using the card number, expiration date, security code and billing information.

Not every unfamiliar transaction is fraudulent. A legitimate company may bill under its parent company’s name, a family member may have used the card or a forgotten trial may have become a paid subscription. However, every unexplained charge deserves investigation.

Credit Card Fraud Versus an Authorized Scam Payment

This distinction is critical because fraud and merchant disputes may be investigated differently.

Unauthorized credit card fraud occurs when someone uses your card or account without permission. An authorized scam payment happens when a criminal deceives you into approving the payment yourself.

For example:

• Someone steals your card number and buys a laptop without your knowledge. That is unauthorized credit card fraud.
• A fake seller convinces you to pay for a laptop that never existed. You authorized the transaction, but you were deceived.
• You receive an item, but it is damaged or significantly different from its description. That may be a merchant dispute rather than unauthorized fraud.
• A subscription continues after you attempted to cancel it. That may require evidence of your cancellation request.

Report every situation promptly, but explain exactly what happened. Do not claim that you never authorized a payment if you entered the card details or approved the transaction yourself. Tell the issuer whether you received anything, communicated with the merchant, entered a security code or were deceived by an impersonator.

Accurate information helps the issuer place the case in the correct investigation process.

Credit Card Fraud Versus Identity Theft

Credit card fraud and identity theft can overlap, but they are not identical.

Credit card fraud usually involves an existing card or credit account. Identity theft is broader. It occurs when someone uses your personal information to impersonate you, open accounts, redirect mail, obtain services or commit other crimes in your name.

If someone uses your stolen card number to purchase electronics, that is credit card fraud. If someone uses your name, date of birth and other personal information to open a new credit account, that is identity theft and new-account fraud.

One unauthorized purchase does not automatically mean that your entire identity has been stolen. However, unfamiliar accounts, unexplained credit inquiries, unexpected address changes or missing financial mail can indicate a wider compromise.

In case you are wondering,

What Is Credit Card Theft?

Credit card theft means someone has taken your card or got hold of its details without your permission. Your card does not have to be missing. Someone could have your card number while the card is still in your wallet.

The theft may go unnoticed until you spot a charge you do not recognize. If that happens, contact your card issuer immediately using the number on your card or in its official app. Tell them which charge is unfamiliar and ask them to secure your account.

Phishing Credit Card Information: How Scammers Get Your Details

Imagine getting an email that says your latest payment failed. It has the right logo, looks professional, and asks you to “update your card” before your account is closed.

That link could lead to a fake page built to collect your credit card information. This is phishing: someone pretending to be a business you trust so you will hand over your details yourself.

Do not enter your card information through a link in an unexpected message. Open the company’s app or go to its website using an address you already know. If you have already entered your details, call your card issuer immediately and check your recent charges.

How Credit Card Fraud Happens

Understanding how card information is stolen can help you protect other accounts. However, do not delay reporting an unauthorized transaction while trying to determine exactly how it happened.

Phishing emails, texts and calls

A message may claim that your card has been suspended, a delivery fee is unpaid or suspicious activity has occurred. The included link leads to a fake website that collects your card details and login information.

A caller may also impersonate the issuer’s fraud department. The caller may know your name, partial card number or recent personal information. That knowledge does not prove the call is genuine.

Fake shopping websites

A fraudulent online store may accept payment without delivering anything. More dangerously, the checkout page may collect card information for additional unauthorized transactions.

A padlock symbol only shows that the connection is encrypted. It does not prove that the seller is honest.

Data breaches

A compromised retailer, service provider or payment processor may expose customer information. Stolen card data can be used immediately, stored for later use or sold to other criminals.

Card skimming and shimming

A skimmer can capture information from a card’s magnetic stripe. A thinner device placed inside a card reader may target information during card use.

These devices may appear at ATMs, fuel pumps, ticket machines and other unattended terminals.

Account takeover

A criminal may obtain your password through phishing, malware, a data breach or password reuse. Once inside the account, the attacker may change contact information, disable alerts, request a replacement card or add the card to a digital wallet.

Mail theft

A criminal may intercept a new or replacement card before it reaches you. Financial statements and other documents can also expose information useful for identity theft.

15 Credit Card Fraud Warning Signs

Credit card fraud can appear in several ways. The following signs should trigger an immediate review of your account.

1. A Purchase You Do Not Recognize

An unfamiliar transaction is the clearest warning sign, but do not rely on the displayed merchant name alone.

Businesses sometimes use:

• A parent company’s name
• A payment processor’s name
• An abbreviated billing descriptor
• A corporate name different from the brand
• A headquarters location instead of the purchase location

Open the transaction details and check the date, amount, merchant telephone number and location. Search your email for a matching receipt and ask authorized users whether they made the purchase.

If you still cannot identify it, contact the issuer.

2. A Tiny Unfamiliar Charge Appears

A charge of a few cents or a few dollars may be a card-testing transaction.

Criminals can test stolen card information with a low-value purchase before attempting larger transactions. Small charges are easier for distracted cardholders to overlook.

Some legitimate businesses also place temporary authorization holds. Hotels, fuel stations, rental companies and online services may use them to confirm that a card is valid.

Do not guess. Check the merchant and contact the issuer if the charge remains unexplained.

3. Several Small Transactions Happen Close Together

Multiple low-value transactions within minutes or hours can indicate automated card testing.

A criminal may make repeated purchases through gaming platforms, digital services, transportation applications or online merchants. The goal may be to identify which transactions succeed without triggering an immediate block.

Lock the card and review both pending and completed transactions.

4. A Large Purchase Falls Outside Your Normal Spending Pattern

An expensive electronic device, airline ticket, hotel booking or luxury purchase that you did not make requires immediate action.

Some criminals begin with a small test charge and then attempt a much larger purchase. Others spend aggressively because they expect the card to be blocked soon.

Do not wait for the transaction to settle before contacting the issuer.

5. Transactions Appear in an Unfamiliar Location

A purchase from another state or country may indicate unauthorized use, especially when you have not travelled or ordered from an international merchant.

However, transaction locations can be misleading. An online company may process payments through a distant office or payment center.

Consider the merchant, amount, date and your purchasing history together.

6. Online Purchases Appear While You Still Have the Card

Keeping possession of the physical card does not guarantee that its information is secure.

A criminal may have obtained:

• The card number
• The expiration date
• The security code
• Your billing address
• Your online account credentials

This is commonly called card-not-present fraud because the criminal can attempt the transaction without presenting the physical card.

Report the unauthorized purchase even if the card has never left your possession.

7. You Receive an Unexpected Purchase Alert

An alert about a purchase you did not make may provide an early warning—but the alert itself could also be fake.

Do not immediately click a link or call a number contained in the message. Criminals send fake fraud alerts to frighten recipients into revealing login information, card details or verification codes.

Open the issuer’s application independently or type its official website address into your browser. Confirm whether the transaction actually exists.

Read how to tell if an email is from a scammer before trusting an unexpected financial warning.

8. You Receive a Verification Code You Did Not Request

An unexpected one-time code can mean that someone is attempting to:

• Complete a purchase
• Log in to your account
• Reset your password
• Add the card to a digital wallet
• Change an account setting

Never provide the code to a caller or message sender.

A criminal posing as a bank employee may claim that reading the code aloud will cancel a fraudulent transaction. In reality, the code may approve the transaction or give the criminal access to your account.

9. Your Card Is Added to an Unfamiliar Digital Wallet

A notification that your card was added to Apple Pay, Google Pay or another digital wallet should not be ignored.

If you did not add it, someone may have obtained enough information to register the card on another device.

Contact the issuer immediately. Ask it to:

• Remove unauthorized wallet tokens
• Review connected devices
• Block suspicious transactions
• Determine whether the account was taken over
• Replace the compromised card if necessary

Changing the password alone may not remove a card that has already been added to another wallet.

10. You See a Cash Advance or ATM Withdrawal You Did Not Make

An unauthorized cash withdrawal is an urgent warning.

The criminal may have stolen the physical card, captured card information at a compromised terminal or obtained the PIN through observation, a hidden camera or social engineering.

Report the transaction immediately and ask whether related accounts require additional protection.

11. Recurring Charges Appear From a Service You Never Joined

An unfamiliar monthly charge may result from:

• Stolen card information
• A forgotten subscription
• A misleading free trial
• A difficult-to-cancel service
• A merchant billing under an unfamiliar name

Search your email for signup and cancellation records. If you never authorized the subscription, report it.

Replacing the card may not automatically stop every recurring payment because some participating merchants can receive updated card information. Ask the issuer specifically how future charges from that merchant will be handled.

12. The Same Purchase Is Charged More Than Once

Duplicate charges can result from a processing error, but they can also indicate unauthorized activity.

Compare the dates, amounts and transaction details. If you recognize the purchase, contact the merchant and ask whether one charge will be reversed.

If you do not recognize the merchant or neither transaction is legitimate, contact the card issuer instead.

13. Your Card Suddenly Stops Working

A card may be declined because:

• It expired
• You reached the credit limit
• The issuer placed a security block
• A technical problem occurred
• An unusually large authorization is pending
• Someone changed the account
• Fraudulent purchases consumed the available credit

Contact the issuer through a verified channel. Do not follow instructions in an unexpected text claiming that your card must be “reactivated.”

14. Your Contact or Account Information Changes

An unrequested change to your email address, telephone number, password or mailing address may indicate account takeover.

Criminals sometimes change contact details to intercept alerts and prevent the real cardholder from receiving security notices.

Check:

• Personal information
• Notification settings
• Authorized users
• Connected devices
• Digital wallets
• Linked payment accounts
• Recent password changes
• Replacement-card requests

If you cannot access the account, tell the issuer that an attacker may have changed the login information.

15. Your Available Credit Drops Unexpectedly

A reduction in available credit without a visible completed purchase can indicate a pending authorization.

A criminal transaction may reduce your available credit before it appears as a posted charge. Legitimate authorization holds can produce the same effect.

Review pending activity and ask the issuer to identify unexplained authorizations.

Quick Credit Card Fraud Decision Table

Use this table to decide what to do next.

What to Do Immediately After Discovering Credit Card Fraud

The following steps can help stop additional transactions and create a clear record of your response.

Step 1: Lock the card

Use the issuer’s official mobile application or website to lock the card if the feature is available.

A temporary lock may stop new transactions, but it does not replace reporting the fraud. Previously authorized or recurring transactions may still be processed.

Step 2: Contact the card issuer

Call the number printed on the back of the card. If the card is missing, obtain the number from the issuer’s official website or application.

Do not use a number provided in an unexpected fraud alert. Caller ID and text messages can be manipulated.

Tell the representative:

• Which transactions you dispute
• When you discovered them
• Whether you still possess the card
• Whether you shared information with anyone
• Whether you entered a verification code
• Whether account details changed
• Whether you received digital-wallet notifications
• Whether other accounts show suspicious activity

Step 3: Ask the right questions

Before ending the call, ask:

1. Has the card been completely blocked?
2. Are any unauthorized transactions still pending?
3. Will the account number change?
4. When will the replacement card arrive?
5. Will a temporary credit be issued?
6. What evidence is required?
7. How can you track the investigation?
8. Will recurring merchants receive the new card information?
9. Have unauthorized digital-wallet tokens been removed?
10. Should you take additional identity-theft precautions?

Record the representative’s name or identification number, the date, the time and the case number.

Step 4: Review the entire account

Do not stop after identifying one charge.

Review several months of:

• Completed transactions
• Pending transactions
• Cash advances
• Balance transfers
• Recurring payments
• Fees
• Credits
• Address changes
• Authorized users

A criminal may have tested the card earlier or used several merchant accounts.

Step 5: Gather evidence

Collect the following before submitting or completing the dispute:

• Screenshots of unauthorized transactions
• Transaction dates and amounts
• Merchant names and billing descriptors
• Related emails, texts and call records
• Receipts showing legitimate purchases
• Proof of cancellation, when relevant
• Messages exchanged with the merchant
• Dates you contacted the merchant and issuer
• Dispute and fraud-report numbers
• Notes describing exactly what happened

Preserve original messages instead of keeping only cropped screenshots.

Step 6: Dispute unauthorized charges correctly

Follow the issuer’s instructions and submit every required document.

For US credit cards, written billing-error notices generally should reach the issuer within 60 days after the first statement containing the error was sent. Report suspected fraud immediately rather than treating 60 days as a waiting period.

Rules and deadlines can differ by country, card agreement and transaction type. Debit-card protections can also differ significantly from credit-card protections.

Step 7: Secure related accounts

If you entered credentials on a suspicious website or reused the same password elsewhere:

• Change the card-account password
• Change every account using the same password
• Secure the connected email account
• Enable multifactor authentication
• Review active sessions
• Remove unfamiliar devices
• Check password-recovery information
• Reject unexpected login approvals

Your email account deserves special attention because it may receive password-reset links and financial alerts.

Step 8: Check for wider identity theft

Look beyond the affected card when you notice:

• Accounts you did not open
• Credit inquiries you do not recognize
• Incorrect addresses
• Missing financial mail
• Unexpected collection accounts
• New authorized users
• Changes to several financial accounts

If someone appears to be opening accounts in your name, consider a fraud alert or credit freeze and follow the official identity-theft reporting process in your country.

Review how to know if you have been scammed if the card incident began with a suspicious seller, impersonator or online relationship.

What to Do After Receiving a Replacement Card

A replacement card stops the old card number from being used for many transactions, but your work is not finished.

Activate it through an official channel

Use the issuer’s application, verified website or activation number supplied with the card.

Update legitimate automatic payments

Review subscriptions, utilities, insurance payments and other legitimate recurring charges. Update them individually instead of waiting for important payments to fail.

Remove the old card from digital wallets

Check your own devices and ask the issuer to confirm that unauthorized wallet tokens were deleted.

Monitor the account closely

Watch both the old and replacement card activity. An automatic card-updater service may allow some recurring merchants to receive new card details.

Secure your accounts

A new card number will not solve an account takeover if the criminal still controls your email, password or telephone number.

Destroy the old card

Cut through the chip and magnetic stripe before disposing of the compromised card.

Are You Responsible for Fraudulent Credit Card Charges?

In the United States, federal law generally limits liability for unauthorized credit card use to no more than $50. Many issuers provide zero-liability policies that offer additional protection.

If only the card number was stolen and the physical card was not lost, federal protections generally provide that the cardholder has no liability for unauthorized use.

However, several facts can affect how a case is handled:

• Whether the transaction was genuinely unauthorized
• Whether you gave someone permission to use the card
• Whether you approved the payment yourself
• Whether the problem is actually a merchant dispute
• When you notified the issuer
• Whether you provided the requested evidence

Never assume that every loss will automatically be refunded. Report it promptly, describe it accurately and follow the complete dispute process.

Can a Pending Credit Card Charge Be Fraudulent?

Yes. A pending transaction can be unauthorized, but it can also be a legitimate authorization hold.

Hotels, fuel stations, rental companies and restaurants may temporarily authorize an amount before the final transaction is completed.

If you clearly did not make the pending transaction, contact the issuer immediately. The representative may explain that the formal dispute must wait until the charge posts, but the issuer can still secure the account and prevent additional use.

Do not wait for the pending charge to disappear before reporting that the card may be compromised.

How to Protect Yourself From Credit Card Fraud

You cannot eliminate every risk, but you can make unauthorized activity harder to continue and easier to detect.

Turn on transaction alerts

Enable alerts for:

• Purchases
• Online transactions
• Cash advances
• Declined transactions
• Account changes
• Password changes
• Digital-wallet activity

Set the purchase threshold as low as practical.

Use unique passwords

Never reuse a financial-account password on an email, shopping or social-media account. One breached website could expose credentials that criminals test elsewhere.

Protect your email

Use a strong, unique password and multifactor authentication. Review forwarding rules because an attacker may secretly redirect financial messages.

Inspect payment terminals

Avoid a card reader that appears loose, damaged, unusually bulky or different from nearby terminals. Cover the keypad when entering a PIN.

Verify financial messages independently

Do not trust a message because it contains your name or partial card number. Open the official application or call the number printed on the card.

Review statements every month

Transaction alerts are useful, but they do not replace statement reviews. Examine accounts you rarely use as carefully as your primary card.

Shop carefully

Before paying, check:

• The exact website address
• Independent information about the seller
• Return and refund policies
• Contact information
• Whether prices are unrealistically low
• Whether the seller creates artificial urgency
• Whether the payment method offers meaningful protection

Learn the scam warning signs that should make you stop before paying when a seller pressures you to act quickly or discourages verification.

Protect physical documents

Do not send photographs of the front or back of your card through messaging applications. Secure your mail and destroy old cards and financial documents properly.

Frequently Asked Questions About Credit Card Fraud

What is usually the first sign of credit card fraud?

An unfamiliar transaction is the most common sign. Tiny charges, unexpected verification codes and digital-wallet alerts may appear before larger purchases.

Can fraud happen while I still have my card?

Yes. A criminal can use stolen card information online without possessing the physical card.

Why do criminals make tiny charges?

They may be testing whether the card is active before attempting larger transactions.

Should I cancel my card after one suspicious transaction?

Contact the issuer immediately. It will determine whether the card should be blocked, closed or replaced.

Should I contact the merchant or issuer first?

Contact the merchant when you recognize it and suspect a billing error. Contact the issuer immediately when you did not authorize the transaction or believe the card is compromised.

Can a bank call me about suspected fraud?

Yes, but caller ID can be spoofed. Do not reveal passwords, PINs or verification codes. End the call and contact the issuer through a verified number.

Can someone use my card without the security code?

Some transactions may be attempted without every piece of card information. Merchant security requirements vary.

Is every unfamiliar pending charge fraudulent?

No. It may be a temporary authorization or unfamiliar merchant descriptor. Investigate it promptly.

Will replacing the card stop recurring fraud?

Not always. Ask whether unauthorized recurring merchants can receive updated card information and how they will be blocked.

Can credit card fraud damage my credit?

An unauthorized purchase should not directly damage your credit after it is properly resolved. However, fraudulent accounts, missed payments or high reported balances may affect it.

Should I freeze my credit after card fraud?

Consider a freeze if personal identity information was exposed or someone attempted to open accounts in your name. One compromised card does not always require a freeze.

Can I recover money lost to credit card fraud?

Unauthorized credit card transactions generally receive strong legal and issuer protections, but you must report them promptly and cooperate with the investigation.

How long does an investigation take?

The timeline depends on the issuer, transaction, evidence and applicable rules. Ask what happens while the investigation is pending.

Should I report credit card fraud to the police?

A report may be useful or required when the physical card was stolen, identity theft occurred, the fraud is repeated or the losses are substantial.

What evidence should I preserve?

Keep statements, screenshots, receipts, merchant communications, suspicious messages, call records and every confirmation number connected to the case.

Final Warning

Credit card fraud does not always announce itself with a massive purchase. It may begin with a tiny charge, an unfamiliar merchant name, a verification code you did not request or a notification that your card was added to another device.

Do not wait for a second unauthorized transaction.

Lock the card. Contact the issuer through a verified channel. Review pending and completed transactions. Preserve evidence. Secure connected accounts and determine whether the incident involves only one card or broader identity theft.

A legitimate charge can be explained. An unauthorized charge needs to be stopped.