Report fraud to your card issuer first, then to the Federal Trade Commission

When you spot unauthorized charges on your credit card, call your card issuer's fraud line immediately — the number is on the back of your card or your statement. Tell them which charges are fraudulent. Your issuer will cancel the card, reverse the fraudulent charges, and send you a replacement card. This step protects you from liability for those charges under federal law.

After you've reported to your issuer, file a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record that helps law enforcement and gives you a recovery plan tailored to your situation. The FTC report also generates an Identity Theft Report, which you can use to dispute items on your credit report or prove fraud to creditors.

If the fraud involved your personal information being stolen — not just your card number — you'll also want to place a fraud alert on your credit file and monitor your credit reports for other unauthorized accounts.

Key Takeaways

  • Call your card issuer's fraud line immediately; the number appears on your card or statement, and you are not liable for unauthorized charges reported quickly.
  • File a report with the Federal Trade Commission at IdentityTheft.gov to create an official record and receive a personalized recovery plan.
  • Request a fraud alert from the three credit bureaus (Equifax, Experian, TransUnion) if someone may have stolen your personal information, not just your card number.
  • Check your credit reports at AnnualCreditReport.com for accounts you did not open, and dispute any fraudulent entries in writing.
  • Keep copies of all correspondence with your issuer and the FTC, including confirmation numbers and dates you reported the fraud.

What your card issuer does when you report fraud

Your card issuer has a legal obligation to investigate charges you report as fraudulent. They will typically reverse the charge within one to three business days while they investigate, though the investigation itself can take up to 60 days. During that time, you should not be charged interest on the disputed amount.

The issuer will send you a written explanation of their findings. If they determine the charge was fraudulent, it stays reversed. If they find you authorized it, they will re-post the charge to your account. You have the right to dispute their decision in writing within 60 days of receiving their explanation.

Your card issuer will also flag your account for fraud and may contact you about suspicious activity in the future. They cannot close your account solely because you reported fraud, though they can close it for other reasons.

Filing a report with the Federal Trade Commission

Go to IdentityTheft.gov and select "Report identity theft." You will answer questions about what happened, when you discovered it, and what information was compromised. The FTC does not investigate individual cases, but your report feeds into their database and helps them track fraud patterns.

When you finish, the FTC generates an Identity Theft Report as a PDF. This document is important: you can show it to creditors, use it to dispute fraudulent accounts on your credit report, and provide it to police if you file a local report. Keep a copy for your records.

The FTC also creates a personalized recovery plan based on your situation. If your Social Security number was compromised, for example, the plan will tell you to monitor your credit reports and place a fraud alert. If your bank account was drained, it will direct you to contact your bank and the National Consumer Law Center.

Placing a fraud alert and monitoring your credit

A fraud alert tells credit bureaus and lenders to verify your identity before opening new accounts in your name. You only need to contact one of the three major bureaus — Equifax, Experian, or TransUnion — and they will notify the other two. Call their fraud lines or go online to place the alert.

An initial fraud alert lasts one year. If you believe your identity has been stolen (not just your card number), you can request an extended fraud alert that lasts seven years. You will need to provide a copy of your Identity Theft Report from the FTC.

Check your credit reports at AnnualCreditReport.com, which is the only free, official source. You are may have access to to one free report from each bureau per year. Look for accounts you did not open, inquiries from companies you did not contact, or addresses that are not yours. Dispute any fraudulent entries in writing with the bureau and keep copies of your letters.

When to file a police report

You do not need a police report to dispute credit card fraud with your issuer or the FTC. However, filing one creates an official record that can help if the fraud is part of a larger identity theft scheme or if you need to prove the crime to your employer or insurance company.

To file a police report, go to your local police department's non-emergency line or website. Bring your Identity Theft Report from the FTC and any documentation of the fraudulent charges. The police will give you a report number, which you should keep with your other fraud documentation.

If the fraud involved a data breach at a retailer or company, that company may also file a report on your behalf or provide you with information about filing one. Check any breach notification letters you receive.

Protecting yourself while the fraud is being investigated

Do not throw away your old card until you receive the replacement. Your issuer may need the card number to reference during their investigation. Once the new card arrives, destroy the old one by cutting it in half.

Keep a written log of every call you make about the fraud, including the date, time, person's name, and what was discussed. Ask for confirmation numbers and reference numbers for everything. These records protect you if a charge is re-posted or if the issuer later claims you did not report it.

If the fraudulent charges are still appearing after you reported them, contact your issuer again and ask to speak with a supervisor. Document this second contact as well. If the issuer refuses to reverse the charges after investigation, you can file a complaint with the Consumer Financial Protection Bureau at ConsumerFinance.gov.

What happens if fraud is linked to identity theft

If the fraud involved someone using your name, Social Security number, or other personal information to open new accounts or take out loans, you are dealing with identity theft, not just card fraud. This requires additional steps beyond disputing the card charges.

Your FTC Identity Theft Report will guide you through these steps. You may need to contact creditors directly to close fraudulent accounts, dispute items on your credit report, and place a credit freeze (which prevents new accounts from being opened in your name without your permission).

A credit freeze is free and lasts until you remove it. You can place one with each of the three bureaus online or by phone. Unlike a fraud alert, a freeze does not notify lenders — it blocks them from accessing your credit file entirely, so they cannot open accounts without your explicit permission.

Frequently Asked Questions

Am I responsible for paying fraudulent charges on my credit card?

No. Under the Fair Credit Billing Act, your liability for unauthorized charges is zero if you report them before the card is used fraudulently, and limited to $50 if you report after. Most card issuers waive even that $50. You are not liable for charges you report promptly.

How long does it take to get my money back?

Your issuer must reverse the charge within one to three business days while they investigate. The full investigation takes up to 60 days. If they find the charge was fraudulent, the reversal is permanent. If they find you authorized it, they will re-post the charge and you can dispute their decision in writing.

What if the fraudulent charges are from a different country?

Report them to your issuer the same way. International fraud is common and issuers handle it routinely. Your issuer may ask additional questions about whether you traveled or authorized anyone to use your card abroad, but this does not change your right to dispute unauthorized charges.

Do I need to cancel other accounts if my credit card was compromised?

Not necessarily. If only your card number was stolen (not your personal information), canceling just that card is usually enough. If your wallet was stolen or your personal information was compromised, consider changing passwords on bank and email accounts and monitoring those accounts for suspicious activity.

Can my card issuer refuse to reverse a charge I reported as fraud?

Yes, if they investigate and find you authorized the charge. You then have the right to dispute their decision in writing within 60 days of receiving their explanation. If you disagree with their final decision, you can file a complaint with the Consumer Financial Protection Bureau.