Report fraud to your card issuer first, then to the Federal Trade Commission

When you spot unauthorized charges on your credit card, contact your card issuer's fraud department before anything else. The issuer — your bank or credit union — is the entity that can freeze your account, reverse fraudulent charges, and issue you a replacement card. Most issuers have a fraud hotline printed on the back of your card or available through your online account. Call during business hours or use their app to report the fraud immediately; many can place a temporary hold on your account within minutes.

After you report to your issuer, file a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record and generates an Identity Theft Report, which you may need later if the fraud spreads to other accounts or if debt collectors contact you about fraudulent debts. The FTC report is free and takes about 10 minutes to complete online.

Key Takeaways

  • Call your card issuer's fraud line immediately when you spot unauthorized charges; most can freeze your account and reverse charges the same day.
  • File a report with the Federal Trade Commission at IdentityTheft.gov to create an official record that protects you if fraud spreads to other accounts.
  • You are not liable for unauthorized charges over $50 under federal law, and most issuers waive even that amount if you report promptly.
  • Request a new card with a different number, and ask your issuer whether they will monitor your account for related fraud.
  • Check your credit reports at AnnualCreditReport.com within 30 days to catch any accounts opened in your name without your knowledge.

What happens when you call your card issuer

The fraud department will ask you to verify your identity, then walk through the disputed charges with you. Have your statement or app open so you can identify exactly which transactions were not yours. The issuer will ask when you first noticed the fraud, whether your physical card was lost or stolen, and whether you shared your card number with anyone.

Once you report, the issuer will typically reverse the fraudulent charges within one to three business days. They will issue a new card with a different number and may place a temporary hold on your account while they investigate. Some issuers offer a temporary card number or digital wallet access so you can continue making purchases while the physical card arrives.

Ask the issuer whether they will place a fraud alert on your account. This flag tells their system to watch for additional suspicious activity linked to your Social Security number or address. It is different from a credit freeze and does not prevent you from using your card.

Your liability for unauthorized charges

Under the Fair Credit Billing Act, you are not liable for more than $50 in unauthorized charges if you report the fraud to your card issuer. In practice, most major issuers waive the $50 entirely if you report within 60 days of the charge appearing on your statement. The key is reporting promptly — the longer you wait, the harder it becomes to dispute the charge and the more likely the issuer will deny your claim.

If your physical card was stolen or lost, your liability is the same: $50 maximum, usually waived. If only your card number was compromised (you still have the card), liability is also capped at $50. The issuer bears the cost of fraud investigation and reversal, not you.

Filing a report with the Federal Trade Commission

Go to IdentityTheft.gov and select "Report identity theft." You will answer questions about what happened, when you discovered it, and which accounts were affected. The FTC asks for your name, address, phone number, and the details of the fraudulent charges or accounts. You do not need to have all the information at once — you can save your report and return to it.

When you finish, the FTC generates an Identity Theft Report as a PDF. Download and save this document. It serves as proof that you reported the fraud and can be used to dispute charges with creditors, stop collection calls, or place a credit freeze. Some creditors and debt collectors will not accept a dispute without this report.

The FTC does not investigate individual cases, but your report feeds into their database of fraud patterns. If many people report the same merchant or type of fraud, the FTC may open an investigation.

Placing a credit freeze and fraud alert

A credit freeze prevents anyone — including you — from opening new accounts in your name without unfreezing it first. It is stronger protection than a fraud alert and is free. You place a freeze by contacting each of the three major credit bureaus: Equifax, Experian, and TransUnion. You can do this online, by phone, or by mail; all three allow online freezes within minutes.

A fraud alert is weaker but faster to set up. It tells creditors to verify your identity before opening new accounts. You only need to contact one bureau, and they will notify the other two. A fraud alert lasts one year; a freeze lasts until you unfreeze it. If you are still investigating the fraud or worried about identity theft, use both.

Neither a freeze nor an alert affects your existing accounts or your ability to use your current credit cards. They only block new accounts opened in your name.

Checking your credit reports for new accounts

Within 30 days of reporting fraud, request your credit reports from all three bureaus at AnnualCreditReport.com. This is the only official site for free annual reports; do not use other sites that claim to offer free reports. Look for accounts you did not open, inquiries from creditors you did not contact, or addresses that are not yours.

If you find fraudulent accounts on your report, dispute them in writing with the bureau. Send a letter to the bureau's dispute address (listed on your report) with a copy of your Identity Theft Report from the FTC. Include a statement that you did not open the account and request that it be removed. The bureau must investigate within 30 days and remove the account if it cannot verify it.

You can also dispute accounts directly with the creditor that opened them. Send a letter with your FTC Identity Theft Report and ask them to close the account and report it as fraudulent to the credit bureaus.

Protecting your card after fraud

Once your issuer sends a replacement card, activate it before the old card expires. The old card will be deactivated automatically, but do not throw it away until the new one arrives and works. Update any recurring charges (subscriptions, utilities, automatic payments) to the new card number so they do not fail.

Monitor your new account closely for the first 30 to 60 days. Log in to your online account or app at least weekly and review all charges. If you spot anything unfamiliar, report it immediately. Many issuers offer text or email alerts for every transaction; turning these on can help you catch fraud faster.

Consider whether your card number was compromised at a merchant or through a data breach. If you used the card at a restaurant, gas station, or online retailer shortly before the fraud appeared, that may be the source. Avoid using that merchant until you understand what happened.

Frequently Asked Questions

How long does it take to get my money back after I report fraud?

Most issuers credit your account within one to three business days of your report. The investigation may take longer — up to 60 days — but you should see the money back quickly while they investigate. If the issuer denies your dispute, they must explain why in writing.

What if the fraud happened at a specific store or website?

Report it to your card issuer as you normally would. You can also report the merchant to the FTC at ReportFraud.ftc.gov if you believe they were negligent with your data. The FTC does not recover your money, but reports help them identify patterns of fraud at specific merchants.

Do I need to file a police report?

A police report is not required to dispute charges with your card issuer, but it can be useful if the fraud is part of identity theft or if someone you know committed the fraud. File a report with your local police department and keep a copy for your records. Some issuers ask for a police report if the fraud amount is very large.

Can I use my card while the fraud investigation is happening?

Yes. Your card remains active unless the issuer freezes it due to suspected account takeover. Most fraud investigations happen in the background while you use your replacement card normally. If your account is frozen, the issuer will tell you and provide a timeline for when it will reopen.

What if I do not recognize some charges but am not sure if they are fraud?

Contact your card issuer and ask about the charges. Provide the merchant name, date, and amount. The issuer can tell you what company charged you and may be able to look up the transaction. If you still do not recognize it after that, you can dispute it. You do not have to be 100 percent certain to file a dispute.