By 
You check your card statement and see a charge you did not make. Your first instinct might be to panic, but credit card fraud is one of the most recoverable financial problems you can face. Federal law limits your liability to $50 maximum for unauthorized charges on a credit card — and most major issuers offer zero liability policies that bring that number to $0. Here is exactly what to do, in the right order, the moment you spot something wrong.
Step 1: Do Not Pay the Disputed Charge
If you see a fraudulent charge on a statement you have not yet paid, do not pay that specific amount. Paying a fraudulent charge can complicate the dispute process by implying you authorized it. Pay the rest of your statement balance that represents legitimate charges, but clearly identify the disputed amount in your dispute filing.
If the charge is on a statement you already paid, you will receive a credit to your account once the dispute is resolved in your favor.
Step 2: Report It to Your Issuer Immediately
Call the number on the back of your card or use the issuer’s app to report the unauthorized charge. Most major issuers have 24/7 fraud reporting. When you report:
- Identify the specific charge(s) — merchant name, date, amount
- State clearly that you did not authorize the transaction
- Ask them to cancel the current card number and issue a new one
- Ask for a written confirmation of your dispute filing and a case number
- Ask about their zero liability policy and when you can expect the temporary credit
Most issuers will provisionally credit the disputed amount to your account within 1-3 business days while they investigate. Under the Fair Credit Billing Act, they must resolve the dispute within two billing cycles (no more than 90 days).
Step 3: Check for Other Unauthorized Charges
One unauthorized charge is often not the only one. Once a card number is compromised, fraudsters frequently test it with a small charge ($1-$5) before making larger purchases. Review your last 60-90 days of transactions carefully for any unfamiliar charges, no matter how small.
Also check your other credit and debit accounts — if one card number was stolen, other account credentials may have been compromised in the same incident.
Step 4: Change Passwords on Affected Accounts
If the fraud occurred because your account was accessed (rather than just your card number being skimmed), change your password for the card issuer’s website and app immediately. Enable two-factor authentication if you have not already done so. If you use the same password elsewhere — stop — and change it on any other site where you used the same credentials.
Step 5: Check Your Credit Report for Broader Identity Theft Signs
Credit card fraud is sometimes the first visible sign of broader identity theft. Pull your free credit report at annualcreditreport.com and look for:
- Accounts you did not open
- Hard inquiries from lenders you did not apply to
- Address changes you did not request
If you see signs of broader identity theft beyond the fraudulent card charge, place a fraud alert (free, 1 year) or credit freeze (free, indefinite) with all three bureaus: Equifax, Experian, and TransUnion. A freeze is more protective — it prevents any new credit from being opened in your name until you unfreeze it.
Your Legal Rights
Fair Credit Billing Act (FCBA): Limits your liability for unauthorized credit card charges to $50, and only if you do not report within 60 days of the statement on which the charge appeared. Report within 60 days and your maximum liability is $50. Most issuers’ own zero liability policies reduce this to $0.
Zero liability policies: Visa, Mastercard, American Express, and Discover all offer zero liability on unauthorized charges when reported promptly. You owe nothing on a fraudulent charge you did not authorize and report in a timely way.
Important distinction — debit cards: Debit card fraud has weaker federal protections. Under the Electronic Fund Transfer Act, if you report within 2 business days, liability is capped at $50. If you report within 60 days, liability cap is $500. After 60 days, you may be liable for the full amount. This is one of the key reasons credit cards offer better fraud protection than debit cards for everyday spending.
Timeline: What to Expect After Filing a Dispute
| Timeframe | What Happens |
|---|---|
| Day 1-3 | Provisional credit issued to your account, new card mailed |
| Day 3-14 | Issuer investigates with the merchant |
| Day 14-30 | Most disputes resolved; provisional credit made permanent |
| Up to 90 days | Maximum allowed for complex disputes under FCBA |
If Your Dispute Is Denied
Disputes are occasionally denied if the issuer determines the charge was authorized (for example, a subscription you forgot about). If you genuinely did not authorize the charge and the dispute is denied:
- Request the specific reason for the denial in writing
- Provide any additional evidence — emails, receipts, transaction logs showing you were not present at the merchant location
- Escalate to the issuer’s customer relations or executive office if the front-line dispute team denies repeatedly
- File a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov/complaint — issuers take CFPB complaints seriously and often resolve them favorably
How to Prevent Credit Card Fraud Going Forward
- Enable real-time transaction alerts in your card’s app — you will see every charge as it posts, allowing immediate detection
- Use virtual card numbers for online purchases where you do not fully trust the merchant’s security
- Use Apple Pay or Google Pay for in-person purchases — contactless payments transmit a device account number, not your real card number
- Never share your card number over the phone unless you initiated the call
- Check statements at least every two weeks — the FCBA’s 60-day reporting window runs from the statement date, not when you notice the charge
For more on which cards offer the best fraud protection features, see our guide to the best no-annual-fee credit cards for fraud protection and our breakdown of virtual card number tools.
Sources: Fair Credit Billing Act; Electronic Fund Transfer Act; CFPB credit card dispute guidance; Visa, Mastercard, Amex, Discover zero liability policies. This article is for informational purposes only and does not constitute legal advice.
