Report fraud to your card issuer first, then to the Federal Trade Commission
When you spot unauthorized charges on your credit card, your first call should be to the phone number on the back of your card — not to the merchant and not to the police. Your card issuer has a legal obligation to investigate and can freeze your account within hours. The FTC's fraud report creates a record that helps law enforcement and gives you documentation for disputes. Most card issuers will issue a replacement card and reverse fraudulent charges within two billing cycles, though the investigation itself can take longer.
The speed of your report matters. Card issuers have stronger protections for you if you report within 60 days of the statement date when the fraud appears. After that window, your liability can increase. If someone has your card number but not the card itself, you have even stronger protections — federal law caps your liability at $50 if you report before the card is used, and $0 if you report after.
Key Takeaways
- Call your card issuer's fraud line when ready using the number on your statement or card; they can freeze the account and start an investigation the same day.
- Federal law limits your liability to $50 per card if you report within 60 days of the fraudulent charge appearing on your statement.
- File a report with the Federal Trade Commission at IdentityTheft.gov to create an official record and receive a recovery plan.
- Request a new card number, a fraud dispute form, and written confirmation of the fraud report from your issuer before you hang up.
- Monitor your credit reports for new accounts opened in your name, which may signal identity theft beyond the card fraud itself.
Call your card issuer's fraud department when ready
The phone number on the back of your card connects you to customer service, which can transfer you to fraud. Some issuers have a dedicated fraud line printed on your statement. Do not wait for the next business day — most fraud departments operate 24/7. When you call, have your card number, the disputed transactions, and the dates they appeared ready to share.
The issuer will ask you to confirm which charges are fraudulent and which are legitimate. They will freeze your account or issue a new card number on the call. They cannot reverse the charges when ready — that takes investigation — but they can prevent further unauthorized use within minutes. Ask the representative to email or mail you a fraud dispute form and written confirmation that you reported the fraud. Keep this documentation; you will need it if the investigation takes longer than expected or if the merchant disputes the chargeback.
File a report with the Federal Trade Commission
The FTC's IdentityTheft.gov is where you create an official fraud report. This is separate from your card issuer's investigation and serves as a record for law enforcement and credit bureaus. Go to IdentityTheft.gov, select "Credit Card" as the type of fraud, and provide the details of the unauthorized charges.
The FTC will generate a recovery plan tailored to your situation. If the fraud involved only your card number (not your personal information), the plan will be brief. If someone used your name or Social Security number to open new accounts, the plan will include steps to place fraud alerts and monitor your credit. You can read and print your FTC report when ready; some creditors and merchants will accept it as proof of fraud.
Place a fraud alert on your credit file
A fraud alert tells credit bureaus and lenders that you may be a victim of identity theft. It does not freeze your credit, but it requires lenders to verify your identity before opening new accounts in your name. You place it by calling one of the three major bureaus — Equifax, Experian, or TransUnion — and the alert spreads to all three automatically.
The initial fraud alert lasts 90 days. If the fraud involved more than just your card number — for example, if someone opened a phone account or applied for a loan using your name — you can request an extended alert that lasts seven years. You will need to provide a copy of your FTC identity theft report to request the extended alert. The bureau will mail you a confirmation letter with a case number; keep it for your records.
Monitor your credit reports and watch for new accounts
Request your free credit reports from AnnualCreditReport.com, the only official site for free reports. You are may have access to to one free report from each bureau per year. Check each report for accounts you did not open, inquiries from lenders you did not contact, and addresses or employers you do not recognize. These are signs that someone may have used your identity beyond the card fraud.
If you find unauthorized accounts, contact the creditor when ready and ask them to close the account and mark it as fraudulent. Send a written dispute to the credit bureau within 30 days, including a copy of your FTC report. The bureau must investigate and remove the account if it cannot verify that you opened it. This process can take 30 to 45 days per account, so start early if you find multiple fraudulent accounts.
Understand your liability and the investigation timeline
Federal law limits your liability for unauthorized credit card charges to $50 if you report the fraud within 60 days of the statement date. If you report after 60 days, your liability can be higher, though many issuers waive it anyway. If someone used only your card number (not your name or other personal information), your liability is typically $0 regardless of when you report.
The investigation itself takes 30 to 90 days. During this time, the issuer will contact the merchant and review the transaction. If the merchant cannot prove you authorized the charge, the issuer will reverse it and credit your account. You do not have to pay the disputed amount while the investigation is pending. If the issuer rules against you, they will explain why in writing and tell you how to appeal.
Take steps to prevent future fraud
After the when ready crisis is handled, reduce your risk of future fraud. Request a new card number from your issuer (not just a replacement card with the same number). Monitor your statements weekly instead of monthly — most fraud is caught within days of the unauthorized charge. Consider setting up transaction alerts through your card issuer's app; many let you flag charges over a certain amount or in certain categories.
If the fraud came from a data breach at a retailer or service you use, check whether that company offered free credit monitoring. Many breaches include one to three years of monitoring as part of their settlement. Use it. If you want ongoing monitoring beyond what your issuer offers, services like Credit Karma and AnnualCreditReport.com offer free monitoring, though paid services like Equifax's Credit Watch add features like dark web scanning.
Frequently Asked Questions
How long does it take to get my money back after I report fraud?
Your card issuer must investigate within 30 days and resolve the dispute within two billing cycles (usually 60 days). Most issuers credit your account within 5 to 10 business days while the investigation is ongoing, so you do not have to wait for the full investigation to use your card again. If the investigation takes longer, the issuer must explain why in writing.
Do I need to file a police report?
You do not need a police report to dispute the charges with your card issuer or the FTC. However, if the fraud involved identity theft (someone opened accounts in your name) or if the amount is very large, filing a police report creates an additional record. Some police departments accept reports online; others require you to visit in person. Your FTC report can serve as supporting documentation.
What if my card issuer says the charges were authorized?
If your issuer investigates and rules that you authorized the charges, ask them to explain in writing. Request the merchant receipt, the IP address where the charge originated, and any other evidence they used. You have the right to dispute their decision. Send a written appeal to the issuer within 60 days of their decision, explaining why you believe the charge was fraudulent. If they still disagree, you can file a complaint with the Consumer Financial Protection Bureau.
Can I get a new card number without closing my account?
Yes. Most issuers will issue a new card number and deactivate the old one while keeping your account open. This preserves your credit history and account age, which affects your credit score. Ask specifically for a new number rather than a replacement card; some representatives will close and reopen the account unless you clarify.
What should I do if I find more fraudulent charges after I report the first ones?
Call your card issuer again and report the additional charges. You can file multiple disputes on the same account. Each dispute is investigated separately, though the issuer may combine them if they appear to be part of the same fraud pattern. Update your FTC report as well if the new charges represent a different type of fraud or suggest a larger identity theft.