Skip to main content

HomeAll guides

How to Track Credit Card Fraud and Protect Your Account

Yes, you can track credit card fraud, but the method depends on who is committing it and what stage the fraud is at

Credit card fraud falls into two categories: card-present fraud, where someone uses a physical card or card details at a store or online, and account takeover, where a fraudster gains access to your account itself and changes settings or adds authorized users. You can track the first type by monitoring your statements and disputing charges. You can track the second by reviewing your account activity log and checking for changes you did not make. Neither type requires special software — your card issuer's website and your own attention are the main tools.

The reason tracking matters is timing. Most card issuers will not refund fraudulent charges unless you report them within 60 days of the statement date. If you catch fraud early, you can dispute it before the charge settles. If you catch it late, you can still dispute it, but the process takes longer and the outcome is less certain. Tracking also helps you spot patterns — if the same merchant keeps charging you, or charges appear from a city you have never visited, you can act before the fraudster makes larger purchases.

Key Takeaways

  • Check your statement at least once a month for charges you do not recognize, and report them to your card issuer within 60 days of the statement date.
  • Most card issuers offer real-time alerts by text or email when a charge is made, which lets you spot fraud within hours instead of weeks.
  • Your card issuer's online account shows a transaction history with merchant names and amounts, and you can dispute any charge directly from that page.
  • Account takeover — where a fraudster changes your password or adds themselves as an authorized user — requires you to review your account settings and recent login activity.
  • You are not liable for fraudulent charges if you report them promptly, but the burden is on you to notice and report them first.

How to spot fraud on your monthly statement

Your card issuer sends a statement every month listing every charge, the merchant name, the date, and the amount. Log into your card issuer's website or app and review this list line by line. Look for merchants you do not recognize, charges from cities you have not visited, or amounts that seem wrong. Many fraudsters test a stolen card with a small charge first — a $1 or $5 purchase — to see if it will go through before making larger purchases. If you see a small charge from an unfamiliar merchant, report it when ready.

Write down the date, merchant name, and amount of any charge you do not recognize. Do not assume it is a mistake or that someone else in your household made it — ask them first. Then contact your card issuer by phone or through your online account and dispute the charge. Most issuers have a "dispute" or "report fraud" button next to each transaction. Use it. The issuer will investigate and either reverse the charge or ask you for more information.

Setting up alerts to catch fraud faster

Real-time alerts are the fastest way to spot fraud. Most major card issuers — Visa, Mastercard, American Express, Discover, and most bank-issued cards — offer text or email notifications when a charge is made. You can usually set alerts for all transactions, or only for charges above a certain amount. If you set an alert for all transactions, you will get a notification within minutes of any purchase. If you set an alert for charges over $50, you will only hear about larger purchases.

To turn on alerts, log into your card issuer's website or app, find the "alerts" or "notifications" section, and choose what you want to be notified about. You can usually set separate alerts for online purchases, in-store purchases, international charges, and cash withdrawals. If you see an alert for a charge you did not make, call your card issuer when ready. Many issuers will freeze your card on the spot and issue a replacement within one to two business days.

Reviewing your account activity log for unauthorized changes

Account takeover is different from card fraud. In account takeover, a fraudster gains access to your online account — usually by stealing your password or using a phishing email — and then changes your settings, adds themselves as an authorized user, or transfers your rewards points. To spot this, log into your card issuer's website and look for an "account activity" or "login history" section. This shows every time someone logged into your account, from where, and on what device.

If you see a login from a city you have never visited, or from a device you do not own, your account may have been compromised. Also check your account settings: review the list of authorized users, check whether your mailing address or phone number has changed, and look at whether any new cards have been ordered. If anything looks wrong, change your password when ready, enable two-factor authentication if your issuer offers it, and call your card issuer to report the unauthorized access.

What happens after you report fraud

When you report a fraudulent charge, your card issuer opens an investigation. They will contact the merchant and ask whether the charge was legitimate. They will also review your account for patterns — if you have reported fraud before, or if the charge is consistent with your usual spending. Most investigations take 30 to 90 days. During that time, your card issuer may provisionally refund the charge while they investigate, or they may ask you to wait for the outcome.

You are not liable for fraudulent charges under federal law, as long as you report them within 60 days of the statement date. If you report after 60 days, your liability depends on your card issuer's policy and the circumstances. Some issuers will still refund you; others will not. This is why tracking your statement monthly is important — it keeps you within the 60-day window.

The difference between fraud and unauthorized charges

A fraudulent charge is one made by someone who does not have permission to use your card — a thief who stole your card number, for example. An unauthorized charge is one made by someone who had permission at one point but no longer does — a subscription you forgot to cancel, or a charge from a family member you did not authorize. Both can be disputed, but the process is slightly different.

For fraudulent charges, you report them as fraud and your issuer investigates. For unauthorized charges, you may be asked to provide evidence that you did not authorize the charge — for example, an email showing you asked a merchant to stop billing you. Keep records of any communication with merchants, especially cancellation requests or complaints. This makes disputes faster and more likely to succeed.

What to do if your card is lost or stolen

If your physical card is lost or stolen, call your card issuer when ready. Do not wait to see if charges appear. Most issuers will freeze the card on the spot, and you can request a replacement card by phone. The replacement usually arrives within five to seven business days. In the meantime, you can still use your account online or by phone if you have the card number memorized, or you can ask your issuer for a temporary card number.

After you report a lost or stolen card, monitor your statement closely for the next 60 to 90 days. Fraudsters often use stolen card numbers within days, but sometimes they wait weeks or months. If you see any charges you did not make, report them when ready. You are protected by federal law, but only if you report within 60 days.

Frequently Asked Questions

How long does it take to get a refund for fraudulent charges?

Most card issuers issue a provisional refund within two to five business days while they investigate. The full investigation takes 30 to 90 days. If the investigation confirms fraud, the refund becomes permanent. If the investigation is inconclusive, your issuer may reverse the refund.

Can I be held liable for fraudulent charges if I report them late?

Federal law protects you from liability if you report within 60 days of the statement date. After 60 days, your liability depends on your card issuer's policy. Some will still refund you; others will not. Check your cardholder agreement or call your issuer to learn their specific policy.

What should I do if I see a charge from a merchant I use but the amount is wrong?

Contact the merchant first to ask whether they charged you more than expected. Sometimes merchants charge a deposit or add a tip that you did not see at the time. If the merchant confirms the charge was wrong, ask them to issue a refund. If they refuse or do not respond, dispute the charge with your card issuer.

Do I need to pay a fraudulent charge while it is being investigated?

No. If you report a charge as fraudulent, you are not required to pay it while the investigation is ongoing. Your card issuer will either provisionally refund it or hold it in dispute. Do not pay the charge yourself unless your issuer specifically asks you to.

How can I prevent fraud in the first place?

Use a strong, unique password for your card issuer's website. Enable two-factor authentication if available. Do not share your card number or security code with anyone. Avoid using public Wi-Fi to access your account. Monitor your statement monthly. Use your card issuer's alerts. These steps do not prevent all fraud, but they reduce your risk significantly.

This guide is for general information only and is not medical, financial, legal, or other professional advice. For decisions specific to your situation, consult a qualified professional. See our Editorial Policy.