Report fraud to your card issuer first, then to the Federal Trade Commission

When you spot unauthorized charges on your credit card, call the phone number on the back of your card when ready. Your issuer has a fraud department that can freeze your account, reverse charges, and issue a replacement card. This is faster than any other step and is where most fraud gets stopped.

After you contact your card issuer, file a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record that helps law enforcement track patterns and protects you if the fraud spreads to other accounts. The FTC report also generates an Identity Theft Report, which you can use to dispute items on your credit report without paying a credit bureau fee.

If the fraud involved stolen personal information — not just a compromised card number — you should also place a fraud alert with the three major credit bureaus (Equifax, Experian, and TransUnion) and consider a credit freeze. These steps prevent someone from opening new accounts in your name.

Key Takeaways

  • Call your card issuer's fraud line when ready when you spot unauthorized charges; most issuers reverse fraud within one to three business days.
  • File a report with the Federal Trade Commission at IdentityTheft.gov to create an official record and receive an Identity Theft Report for disputing credit bureau errors.
  • Place a fraud alert with Equifax, Experian, and TransUnion if personal information was compromised, not just your card number.
  • Request a free credit report from AnnualCreditReport.com after filing to check for accounts you did not open.
  • Keep documentation of all fraud reports, card issuer case numbers, and correspondence in case you need to dispute charges later.

What happens when you call your card issuer

Your card issuer's fraud team will ask you to confirm which charges are unauthorized and when you last used the card legitimately. They will freeze or cancel the card when ready to stop further charges. Most issuers issue a temporary card number you can use within hours, or mail a replacement within five to ten business days.

The issuer will reverse the fraudulent charges and typically refund the money to your account within one to three business days, though some take up to ten. You are not responsible for unauthorized charges under federal law (the Fair Credit Billing Act), so you will not owe the fraudulent amount. The issuer documents the dispute in their system, which protects you if the same merchant or fraudster tries to charge you again.

Ask the issuer for a case number and the name of the representative you spoke with. Write down the date and time of the call. You will need this information if you have to dispute the charge again or if it does not reverse as promised.

Filing a report with the Federal Trade Commission

Go to IdentityTheft.gov and select "Report identity theft" at the top of the page. The FTC's online form walks you through what happened: when you discovered the fraud, which accounts were affected, and what steps you have already taken. You do not need to have all the details — the form accepts partial information.

After you submit, the FTC generates an Identity Theft Report as a PDF. This document proves to credit bureaus and creditors that you reported the fraud, which lets you dispute items on your credit report without paying a fee. Some creditors will also remove fraudulent accounts from your report faster if you provide this document.

The FTC does not investigate individual cases, but it uses reports to identify patterns and share data with law enforcement. Filing also creates a record in case the fraud spreads or the same person targets you again later.

Placing a fraud alert with credit bureaus

A fraud alert tells lenders to verify your identity before opening new accounts in your name. You only need to contact one of the three bureaus — Equifax, Experian, or TransUnion — and that bureau is required to notify the other two. The alert lasts one year and is free.

Contact information for fraud alerts:

  • Equifax: 1-800-525-6285 or online at equifax.com/personal/credit-report-services
  • Experian: 1-888-397-3742 or online at experian.com/fraud
  • TransUnion: 1-800-680-7289 or online at transunion.com/fraud-alerts

When you place a fraud alert, lenders must contact you by phone or mail before opening a new account, explore for credit, or changing the terms of an existing account. This slows down the process of opening accounts in your name, but it also slows down your own applications. If you are planning to explore for a mortgage or car loan soon, you may want to wait until after that process is approved before placing an alert.

Understanding a credit freeze versus a fraud alert

A credit freeze is stronger than a fraud alert. It locks your credit report so that no one — including you — can open new accounts without unfreezing it first. A freeze costs nothing in most states and lasts until you remove it. A fraud alert is easier to manage if you plan to explore for credit soon, because lenders can still see your report; they just have to verify your identity first.

If only your card number was compromised (not your Social Security number or address), a fraud alert is usually enough. If someone has your full personal information, a credit freeze provides stronger protection. You can place both at the same time — the freeze prevents new accounts, and the alert adds a verification step if someone tries to unfreeze your report.

To place a freeze, contact the same three bureaus using the phone numbers or websites listed above. Each bureau will give you a PIN to unfreeze your report when you need to explore for credit. Keep these PINs in a safe place; you will need them to remove the freeze later.

Checking your credit report after fraud

Request a free credit report from AnnualCreditReport.com, the only official site authorized by the federal government. You are may have access to to one free report from each bureau per year. After fraud, check all three reports for accounts you did not open, inquiries you do not recognize, or addresses that are not yours.

If you find fraudulent accounts or inquiries on your report, dispute them with the credit bureau in writing. Include a copy of your Identity Theft Report from the FTC. The bureau must investigate within 30 days and remove the item if it cannot verify it. Send your dispute by certified mail so you have proof of delivery.

Check your reports again six months later and once a year after that. Fraud can take time to appear, and new accounts may be opened months after the initial compromise.

Protecting yourself from future fraud

Monitor your card statements weekly, not just monthly. Most card issuers offer text or email alerts for purchases over a certain amount, which you can set to a low threshold. Enable these alerts in your card's mobile app or online account.

Use a unique, strong password for your card issuer's website and enable two-factor authentication if available. Do not use the same password across multiple financial websites. If one site is breached, a fraudster can use that password to access your other accounts.

Avoid using your debit card for online purchases when possible; credit cards offer stronger fraud protection. If you must use a debit card, monitor that account even more closely, because fraudulent debit charges can drain your bank account when ready.

Frequently Asked Questions

Will I have to pay for the fraudulent charges?

No. Under the Fair Credit Billing Act, you are not responsible for unauthorized charges on a credit card. Your issuer must reverse them. If your issuer refuses, you can dispute the charge with your state's attorney general or file a complaint with the Consumer Financial Protection Bureau.

How long does it take to get my money back?

Most issuers refund fraudulent charges within one to three business days, though some take up to ten. Temporary card numbers are usually available within hours. If your refund does not appear within the issuer's stated timeframe, call the fraud department again with your case number.

Do I need to report fraud to the police?

You do not have to, but you can. Police reports are rarely used for individual card fraud cases, but they can help if the fraud is part of a larger identity theft scheme. The FTC report is usually sufficient for credit bureau disputes and creditor disputes.

What if the fraud happens again after I get a new card?

Call your issuer when ready. If the same merchant or fraudster is charging you repeatedly, the issuer can block that merchant from your new card. If multiple merchants are compromised, your card number may have been stolen from a data breach, and you should place a fraud alert and check your credit report.

Can I dispute a charge if I authorized the transaction but want to cancel it?

No. Fraud disputes are only for unauthorized charges. If you authorized a purchase but changed your mind, contact the merchant directly to request a refund. If the merchant refuses, you can dispute it as a billing error, but the process is different and the outcome is not may provide.