Credit card misused – lock it and dispute the charges
Found charges on your card that are not yours? These steps lock the card, get your money back and stop it happening again – calmly, in the right order.
- Lock the card in your banking app, or call the number on the back of the card.
- Tell the issuer it is fraud, not a forgotten purchase.
- Write down every unauthorized charge – date, amount, merchant (screenshot).
- Turn off online payments for the card if the app offers it.
First, size it up: how do you spot card misuse?
- Charges you do not recognize, often a small test amount first, then larger ones.
- Payments to merchants or countries where you have never shopped.
- Notifications about payments you did not make.
- A declined payment when your limit should have been fine – the card may already be maxed out by someone else.
These questions take you through it in the right order:
1Do you still have the card itself?
- Lock it anyway, right now, in the app or by phone - the number was copied
- Ask for a replacement card with a new number
- Report the card lost or stolen and have it canceled immediately
- File a police report
2Do you already see charges you do not recognize?
- Dispute every unauthorized charge in writing with the issuer
- Document the transactions and keep your report numbers
- Keep watching the statement, turn on push alerts for every charge
3Was the card saved in stores or wallets, or did a phishing link play a part?
- Remove or replace the card everywhere, change the passwords of those stores
- Trace the phishing source - see "Clicked a phishing link"
- Add the new card once it arrives - and stay alert
Step by step
Secure the card and recover the money
- Lock the card immediately – app or the number on the back.
- Dispute every unauthorized charge with the issuer, and follow up in writing.
- Request a replacement card with a new number.
- File a police report if the amount is significant, and keep the case number.
- Check other accounts where the card is stored (streaming, stores, PayPal).
- Trace the source: did you enter card details somewhere recently? See Clicked a phishing link .
What not to do
- Do not wait. The earlier you report, the cleaner your liability position – especially with a debit card.
- Do not give card details or a PIN over the phone or by email “to confirm.”
- Do not ignore small charges. A tiny test amount is a warning sign, not a rounding error.
- Do not keep the old card “just in case.” Get a new number.
Who to contact
- Your card issuer – to lock, dispute and reissue.
- Local police if you lost money, for the report.
- IC3.gov (FBI) for online fraud, and IdentityTheft.gov if your personal details were used.
- The CFPB at consumerfinance.gov if the issuer refuses a legitimate dispute.
Preserve the evidence
Document everything: the statement with the disputed charges marked, the date and time you reported the card, the name of the supposed merchant and, if there was one, the phishing email or text. You need those records for the dispute, the report and the refund.
Protecting yourself from now on
- Turn on push alerts for every card payment – then misuse shows up in seconds, not at the end of the month.
- Enable online payments only when you need them, if your app supports it.
- Use virtual card numbers for one-off online purchases where your issuer offers them.
- Learn to spot phishing and never enter card details on a linked page.
Frequently asked questions
Am I liable for fraudulent card charges?
Barely. For credit cards, federal law caps your liability for unauthorized charges at $50, and most issuers waive even that. Debit cards are less forgiving: report within two business days and you are capped at $50, after that it rises sharply. That is why speed matters more with a debit card.
How do I dispute a fraudulent charge?
Report it to your issuer, then follow up in writing. The Fair Credit Billing Act gives you 60 days from the statement date on which the charge appeared. Most issuers also have a dispute button in the app, which starts the chargeback.
Is locking the card enough?
Locking is the first step. You also need to dispute every unauthorized charge, request a replacement card with a new number, and work out how the details leaked – otherwise it repeats.