Check an unfamiliar credit card charge before calling it fraud. The descriptor might belong to a parent company or payment processor, an authorized user might have made the purchase, or somebody might have used the card number without touching the physical card. Give it one careful look. If nothing fits, contact the issuer promptly.
Early reporting doesn't make a complaint false. Someone who spots an unauthorized payment may not have a receipt yet.
For U.S. credit card accounts, a qualifying charge may fall under the federal billing-error process. The issuer generally must receive written notice within 60 days after sending the first statement that shows the error. A call can start the case, but send written notice if you want to use that formal process.
Red flags in an unfamiliar credit card charge
Turns out, statement details often provide the best first lead. No single clue settles the question.
| Statement clue | Why it matters | Sensible next move |
|---|---|---|
| An unfamiliar merchant descriptor | The statement name may differ from the store, parent company, or payment processor | Search the exact descriptor and check receipts, email, and authorized users |
| A tiny charge followed by a larger one | Small amounts can test exposed card details, but they may also be legitimate verification holds | Look for a matching explanation, then report charges you still don't recognize |
| The same amount appears twice | One entry may still be pending while the other has posted | Compare the dates and statuses before disputing both |
| A recurring charge continues after cancellation | The merchant may have missed the cancellation, or the charge may be unauthorized | Save cancellation and refund records, then explain the actual problem to the issuer |
| A location or IP mismatch appears in merchant records | Travel, VPNs, billing addresses, and payment processors can create mismatches | Treat the mismatch as supporting information, not proof |
The physical card can stay in your wallet while someone misuses its number. A familiar brand name still doesn't show that you authorized the transaction.
Check whether you authorized the payment
Start with your records, but keep the search short. Search the exact descriptor in email, receipts, subscriptions, and digital wallets, then ask other authorized users about it.
Pending charges can change names or disappear. Report a charge that still makes no sense. Documents can follow later. Don't wait for a perfect file.
How to dispute an unauthorized credit card charge
The steps below follow the U.S. credit card billing-error process in 12 CFR 1026.13 in the eCFR. The process applies when its conditions fit.
-
Write down the charge. Save the statement page or a screenshot. Record the transaction date, amount, merchant descriptor, date you noticed it, and what you checked.
-
Reach the issuer through a trusted channel. Call the number on the back of the card or use the issuer's secure app. Say clearly that you didn't authorize the transaction. Ask whether the card should be locked or replaced. Never use contact details from an unexpected text or email.
-
Send a written billing-error notice. Identify yourself, the account, the charge, and why you believe it was unauthorized or incorrectly identified. The issuer generally must receive the notice within 60 days after it sent the first statement showing the error. Use the billing-inquiries address printed on the statement, not a guessed payment address, and keep a copy.
-
Pay the undisputed balance. If the formal process applies, the rule generally lets you withhold the disputed amount while the issuer investigates. Pay everything else on time. Don't stop paying the entire account.
-
Track the response. For a proper written notice, the issuer generally must acknowledge it within 30 days unless it has already resolved the issue. It generally must finish the investigation within two complete billing cycles and no later than 90 days.
-
Read the final decision. If the issuer corrects the error, check a later statement. If it denies the claim, ask for the explanation and the information used to reach that decision.
Report promptly even while you gather paperwork. The FTC's guidance on lost, stolen, and unrecognized card activity tells consumers to open monthly credit card statements promptly and report charges they don't recognize as soon as they discover them.
What Regulation Z controls
Regulation Z supplies the federal billing-error procedure for U.S. open-end credit accounts such as credit cards. It can cover a credit extension not made by the consumer or someone with actual, implied, or apparent authority; a transaction that is not properly identified; a payment or other credit the creditor failed to post correctly; and certain computational or similar accounting errors.
Thing is, the 60-day deadline is not a universal chargeback timer. Visa and Mastercard network procedures can use different processing windows and evidence requirements for issuers and merchants. A network deadline does not replace the consumer's formal billing-error notice, and it does not create a blanket 120-day right to dispute every charge.
A merchant's refund or cancellation policy is separate. If you bought something but received the wrong item, never received it, or were charged after canceling, describe that actual problem to the issuer. Don't call an authorized purchase fraud simply because the merchant dispute is inconvenient.
Rules for credit cards don't automatically cover debit cards, prepaid cards, ACH transfers, wires, or payment-app transactions. Identify the payment rail before relying on a deadline.
If the issuer denies the complaint
To be honest, the timeline does the heavy lifting. Dates first.
List the statement date, the date you reported the charge, each issuer response, and the evidence supporting your position. Check whether the issuer treated the claim as the wrong type of dispute, then send a concise packet with the statement page, cancellation or merchant messages, and other relevant records. Redact your full card number, security code, and unrelated personal information.
If the matter remains unresolved, submit a complaint through the Consumer Financial Protection Bureau. Include the issuer's name, key dates, amount, copies of your notice, and the response. The CFPB says companies generally respond within 15 days. Consumers have 60 days to provide feedback on that response.
A CFPB complaint seeks a company response. It doesn't guarantee that the charge will be reversed.
For a small business reviewing a chargeback
Small businesses should judge a chargeback by the records. The customer's tone is not evidence.
A quick dispute, an angry message, or an IP mismatch does not prove that a cardholder lied. Respond through the payment processor, follow its reason code and deadline, and send records that match the actual claim, such as order details, delivery records, cancellation terms, or relevant customer messages. Keep the evidence relevant.
The consumer's Regulation Z notice period and the merchant's network response process are different. Don't ask a customer to email a full card number or an authentication code. Don't label a claim fraudulent based only on tone or timing.
Three questions that prevent common mistakes
Is an unfamiliar merchant name enough to prove fraud?
No. Search the exact descriptor and compare the amount with your records. Check household purchases and subscriptions. Report the charge if it remains unexplained.
Do I need a receipt before filing?
No. Send the details you have. Add supporting records later if needed, and don't delay while building a perfect file.
What if more than 60 days have passed?
Contact the issuer anyway. The formal federal billing-error protections may be harder to use after the deadline, but the issuer's own procedures or another dispute route may still matter. A network window does not guarantee a refund.
Pull up your latest statement today. Mark each charge you can't explain, call the number on the back of the card, and send written notice to the billing-inquiries address if the charge remains unauthorized. Save proof of what you sent.