Report fraud to your card issuer first, then to the Federal Trade Commission
When you spot unauthorized charges on your credit card, call your card issuer's fraud line when ready — the number is on the back of your card or your statement. Tell them which charges are fraudulent. Your issuer will cancel the card, reverse the fraudulent charges (usually within two billing cycles), and send you a replacement card. This is the fastest way to stop the bleeding and protect your account.
After you've reported to your card issuer, file a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record and generates an Identity Theft Report, which you may need later if disputes arise or if the fraud is part of a larger identity theft. The FTC report takes about 10 minutes and you can do it online.
Key Takeaways
- Call your card issuer's fraud line when ready — do not wait for a statement or confirmation from the issuer that something is wrong.
- Your issuer will reverse fraudulent charges within one or two billing cycles and send you a new card with a new number.
- File a report with the Federal Trade Commission at IdentityTheft.gov to create an official record of the fraud.
- If the fraud is part of a larger identity theft, you may need to place a fraud alert or credit freeze with the three credit bureaus.
- Keep records of all calls, confirmation numbers, and correspondence with your issuer and the FTC.
What happens when you call your card issuer
The fraud department will ask you to identify which transactions are not yours. Have your statement in front of you. They will confirm your identity, then cancel the card and reverse the charges. You are not responsible for fraudulent charges under federal law — your liability is zero once you report it.
The issuer will send you a new card, usually within 5 to 10 business days. In the meantime, ask if they can issue a temporary card number or expedite a replacement if you need access to credit when ready. Some issuers offer this; others do not.
Write down the date and time of your call, the name of the person you spoke with, and the confirmation number they give you. This matters if you need to dispute something later.
Filing a report with the Federal Trade Commission
Go to IdentityTheft.gov and select "Report identity theft." You will answer questions about what happened, which accounts were affected, and whether you know how the fraud occurred. The FTC does not investigate individual cases, but the report creates a record that you can use with creditors and the credit bureaus.
At the end, the FTC generates an Identity Theft Report. read it and save it. You may need to show this report to your card issuer, your bank, or the credit bureaus if the fraud spreads to other accounts or if you need to dispute something on your credit report.
When to place a fraud alert or credit freeze
If the fraudster used your card number alone — not your personal information — a fraud alert is usually not necessary. Your card issuer's reversal is enough.
If you suspect the fraud is part of a larger identity theft — meaning the fraudster has your name, address, Social Security number, or date of birth — place a fraud alert with the three credit bureaus: Equifax, Experian, and TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts in your name. You only need to call one bureau; they notify the other two. The alert lasts one year.
A credit freeze is stronger: it locks your credit report so no one can open new accounts without your permission. You can place a freeze for free. It lasts until you remove it. If you suspect serious identity theft, a freeze is worth the minor inconvenience of having to unfreeze temporarily when you want to open a legitimate account.
Disputing charges if your issuer does not reverse them
In rare cases, an issuer may claim a charge is legitimate and refuse to reverse it. If this happens, file a chargeback dispute with your card issuer in writing. Send a letter to the address listed on your statement for disputes (not the payment address). Include your account number, the transaction date, the amount, and a clear statement that the charge is fraudulent and you did not authorize it.
Keep a copy of everything you send. The issuer must investigate and respond within 30 days. If they find in your favor, the charge is reversed. If they do not, you have the right to escalate the dispute to your state's banking regulator or to the Consumer Financial Protection Bureau.
Monitoring your accounts after fraud
Check your credit report at AnnualCreditReport.com (the official free site) to see if the fraudster opened new accounts in your name. You are may have access to to one free report from each bureau per year. If you see unauthorized accounts, dispute them with the bureaus in writing and file an Identity Theft Report with the FTC if you have not already.
Set up account alerts with your remaining credit cards and bank accounts. Most issuers let you choose alerts for large purchases, international transactions, or any transaction over a certain amount. This gives you early warning if another card is compromised.
How the fraudster got your card number
You do not need to know how the fraud happened to report it, but understanding the source can help you prevent it in the future. Common routes include data breaches at retailers or restaurants, skimming devices on ATMs or gas pumps, phishing emails that trick you into entering your number, or a stolen physical card.
If you know the source — for example, you used your card at a restaurant that was later breached — you can report that information to your issuer. They may use it to identify patterns or warn other customers. But your main job is to report the fraud itself, not to solve the crime.
Frequently Asked Questions
How long does it take to get my money back?
Your card issuer must reverse fraudulent charges within one or two billing cycles. Most do it within a week. If you filed a chargeback dispute, the issuer has 30 days to investigate and respond. Once they find in your favor, the credit appears on your next statement.
Can I be held responsible for fraudulent charges?
No. Under the Fair Credit Billing Act, your liability for fraudulent credit card charges is zero once you report the fraud to your issuer. Debit cards have different rules — you have more liability if you wait to report — so act quickly on debit card fraud.
Do I need to report the fraud to the police?
You do not have to, but you can. Police rarely investigate individual credit card fraud cases, but filing a report creates a paper trail. If the fraud is part of a larger identity theft, a police report may help you dispute accounts or recover damages later.
What if the fraud happens again after I get a new card?
Call your issuer again and repeat the process. If fraud happens multiple times, ask your issuer whether they can investigate how your number keeps being compromised. You may also want to place a fraud alert or credit freeze with the bureaus to prevent the fraudster from opening new accounts.
Should I close the account after fraud?
You do not have to. Closing an old account can hurt your credit score slightly because it reduces your available credit and shortens your credit history. Most people keep the account open after the issuer reverses the charges and sends a new card. But if you feel unsafe or the fraud happens repeatedly, closing it is your choice.