Unauthorized Credit Card Use in England: What the Law Says and What to Do

Credit card fraud is a serious issue in England, and understanding your legal position — whether you're a victim, a cardholder, or simply trying to understand your rights — matters more than most people realise. Here's a clear breakdown of how English law treats unauthorized credit card use, what protections exist, and what variables shape real-world outcomes.

What Counts as Unauthorized Credit Card Use?

Unauthorized use occurs when someone uses your credit card — or your card details — without your permission. This covers a wide range of situations:

• A stranger using a lost or stolen physical card
• Online fraud where card details are used without the physical card
• A family member or acquaintance using your card without consent
• Account takeover fraud, where someone gains control of your account

The key legal threshold in England is consent. If you didn't explicitly authorize the transaction, it is legally unauthorized — regardless of whether the person using the card knows you personally.

The Legal Framework in England 🏛️

Unauthorized credit card use falls under several pieces of legislation in England and Wales:

The Fraud Act 2006 is the primary law governing credit card fraud. It criminalizes fraud by false representation, fraud by failing to disclose information, and fraud by abuse of position. Using someone else's card details without permission almost always falls under false representation — the person is implying they have the right to use those details when they don't.

The Consumer Credit Act 1974 and the Payment Services Regulations 2017 govern your rights as a cardholder when fraud occurs. These set out the liability rules between you and your card issuer.

Under the Payment Services Regulations, if a transaction is genuinely unauthorized, your card issuer is legally required to refund you — in most cases, promptly and in full.

Your Liability as a Cardholder

One of the most important things to understand is that your liability for unauthorized transactions is strictly limited under English law.

The £35 cap applies specifically to cases where a card is lost or stolen and used before you report it. For pure fraud — where your details were used without the card leaving your possession — your liability is typically zero.

Gross negligence is the significant exception. If you wrote your PIN on your card, shared your card details voluntarily, or otherwise acted recklessly, your issuer may argue reduced or no obligation to refund. This is assessed case by case.

Reporting Unauthorized Use: What You Should Do

If you identify a transaction you didn't authorize, the process in England involves several steps:

1. Contact your card issuer immediately — most have 24-hour fraud lines. The faster you report, the clearer your legal position.
2. Request a chargeback or fraud refund — your issuer must investigate and, if the transaction is confirmed unauthorized, issue a refund.
3. Report to Action Fraud — the UK's national fraud reporting centre (actionfraud.police.uk). This creates an official record and contributes to wider fraud investigations.
4. Consider reporting to your local police — particularly relevant if the fraud involves someone known to you.

Your issuer is required by the Payment Services Regulations to refund you within one business day of accepting your claim, unless they have reasonable grounds to suspect you acted fraudulently yourself.

When Someone You Know Uses Your Card 🔍

This is where the legal picture becomes more nuanced. If a partner, family member, or friend used your card without permission, it is still legally unauthorized — and still potentially fraud under the Fraud Act 2006.

However, in practice, outcomes vary based on:

• Whether you choose to report it to the police
• Whether there is evidence of intent to defraud
• The relationship between the parties
• Whether money was repaid voluntarily

The law does not carve out exceptions for personal relationships. Unauthorized is unauthorized. But enforcement decisions — whether charges are brought — often reflect the circumstances and the victim's wishes.

What Variables Shape Your Outcome

Several factors influence how an unauthorized use situation resolves, both legally and practically:

• How quickly you reported the fraud — delay can complicate liability assessments
• Your account security practices — whether PIN or passwords were shared
• The nature of the transactions — pattern and value of fraudulent charges
• Whether your issuer accepts the claim — and if not, whether you escalate to the Financial Ombudsman Service (FOS)
• Evidence available — transaction location data, device information, and dispute history

The Financial Ombudsman Service is a free, independent service that can review your case if your issuer rejects your fraud claim and you disagree with their decision. Their decisions are binding on the issuer.

The Part That Depends on Your Situation

English law gives cardholders strong protection against unauthorized use — the framework is genuinely consumer-friendly compared to many other countries. But how that framework applies to any specific case depends on the exact circumstances: the timeline, the relationship involved, how the card or details were accessed, and how your issuer interprets your level of care.

The general rules are consistent. How they apply to your particular account history, your issuer's policies, and the specifics of what happened — that's the part no general guide can answer.