An unauthorized charge is a transaction on your bank account, credit card, or debit card that you didn't approve or recognize. This happens more often than many people realize. According to the Federal Trade Commission, credit card fraud alone affected over 2.1 million Americans in 2023, and unauthorized account access cases continue to rise. These charges can range from small amounts—sometimes as little as $1 to test whether a card works—to large sums that drain accounts quickly.
Learn About Massachusetts Driver's License Renewal Documents →
The key distinction is between an unauthorized charge and a charge you simply regret or forgot about. An unauthorized charge means someone used your account or payment information without your permission. This is different from a disputed charge where you received what you paid for but changed your mind. Understanding this difference matters because the process and timeline for disputing work differently.
Your rights when facing unauthorized charges come from federal consumer protection laws, primarily the Fair Credit Billing Act (FCBA) for credit cards and the Electronic Funds Transfer Act (EFTA) for debit cards and bank accounts. These laws were created specifically to protect consumers from fraud and unauthorized access. Banks and credit card companies are required to have procedures in place to investigate your claims and protect your money.
Knowing your rights is the foundation of taking action. Federal law limits your liability for unauthorized charges under certain conditions, and this guide explores those conditions and processes. The amount you might owe depends on when you report the fraud, what type of account was compromised, and how quickly you act.
Practical takeaway: Review your statements regularly—at least weekly for accounts you use frequently—so you spot unauthorized charges quickly. Most card companies and banks offer free statement access online, making this check something you can do in minutes.
Unauthorized charges occur through several common methods. Card skimming—where criminals install hidden devices on ATMs or payment terminals to read your card information—accounts for millions of dollars in fraud annually. Data breaches at major retailers or online services expose payment information for thousands or millions of people at once. Phishing emails or text messages trick you into sharing your account details directly with scammers. Account takeover happens when someone gains access to your online banking password, often through reused passwords across multiple websites.
Learn What Engineers Say About Oil Changes →
Identity theft represents a more serious form of unauthorized charges. A criminal might open new accounts in your name, make purchases, or commit fraud using your personal information. According to the Identity Theft Resource Center, there were over 3,200 reported data breaches in 2023 that exposed sensitive personal information. When this happens, the unauthorized charges can be extensive and take months to fully resolve.
Prevention doesn't require extreme measures, though stronger habits do reduce your risk. Use unique, complex passwords for financial accounts—avoid using the same password across multiple websites. Enable two-factor authentication on banking apps whenever your financial institution offers it. This means even if someone has your password, they can't access your account without a second verification step, usually a code sent to your phone.
Monitor what information you share online and in person. Don't carry your Social Security card in your wallet. Shred sensitive documents before throwing them away. When making purchases online, use credit cards rather than debit cards when possible—credit cards offer stronger fraud protection under federal law. Cover the keypad at ATMs when entering your PIN. Check your credit report from the three major bureaus (Equifax, Experian, and TransUnion) for accounts you didn't open.
Practical takeaway: Start with two changes this week: change passwords for your primary financial accounts to unique combinations, and set up two-factor authentication if your bank offers it. These two steps block the majority of account takeover attempts.
The first 24 to 48 hours after discovering an unauthorized charge are crucial. Your actions during this window determine your liability level and improve the chances of recovering your money. The Federal Trade Commission recommends a specific sequence of actions designed to protect both you and your accounts.
Learn How to Draw Minecraft Characters Step by Step →
Contact your bank or credit card company as soon as you notice the unauthorized charge. Call the number on the back of your card or your statement—not a number you find through an internet search, as scammers sometimes set up fake customer service lines. Tell the representative you have an unauthorized charge and explain what happened. They'll likely ask when you discovered it, whether you shared your card information with anyone, and details about the charge itself. This call should be documented, so ask for a confirmation number and the representative's name.
Your financial institution may immediately freeze or cancel your card to prevent additional unauthorized charges. This protects your account but means you won't be able to use that card for legitimate purchases until you receive a replacement. Most banks and card companies can issue a temporary card number for online or phone purchases while the physical replacement arrives, usually within 5-10 business days.
If unauthorized charges suggest someone has full access to your account—particularly if multiple charges appear or your balance has changed significantly—change your online banking password immediately. Use a computer or phone you trust, not a public device. If you can't safely change your password (for instance, if you suspect malware on your device), contact your bank to have them help you secure the account.
Request that your bank place a fraud alert on your credit report with the three major credit bureaus. This one-call process, handled by contacting just one bureau, is required to notify the other two. A fraud alert tells creditors to verify your identity before opening new accounts or issuing credit in your name. This remains in effect for one year and can be renewed annually if you remain at risk.
Practical takeaway: Create a document right now with your financial institution's fraud reporting phone number. Don't store this only in your phone—write it down or email it to yourself. If your phone is lost or stolen, you'll still have access to this critical number.
After you've reported the unauthorized charge by phone, your bank or credit card company must provide you with a written explanation of how they'll investigate. This typically arrives within 5-10 business days. Federal law requires financial institutions to investigate disputes within specific timeframes. For credit cards under the FCBA, the investigation period is 30 days from when your written dispute is received. For debit cards and bank accounts under the EFTA, the investigation window is typically 10 business days, extendable to 45 days if the bank needs additional time.
Get Your Free Guide to Moving Messages From iPhone to Android →
To file a formal written dispute, send a letter to your card issuer or bank. Include your name, account number, the specific transaction date and amount, and a clear statement that the charge is unauthorized. Explain briefly what happened—for instance, "I did not authorize this charge of $147.89 on March 15, 2024" or "My debit card was lost on March 10, 2024, and I discovered fraudulent charges on my statement." Keep your letter concise and factual. Mail it to the address provided for disputes (usually different from the mailing address for payments). Send it via certified mail with return receipt requested so you have proof of when it arrived.
During the investigation period, the financial institution cannot charge you for the disputed amount. However, you remain responsible for any undisputed charges on your account. If your unauthorized charge pushed you over your credit limit or caused overdraft fees on a bank account, those fees may be reversed if the underlying charge is found unauthorized—though you may need to request this specifically.
The bank or credit card company will contact you during the investigation, often requesting additional information. Respond promptly and provide whatever documentation they request. If you have records of your card being in your possession at the time of the charge, or evidence that you were in a different location than where the charge occurred, provide those details. After the investigation concludes, you'll receive written notice of the results. If they determine the charge was unauthorized, it will be removed from your account and any associated fees reversed. If they determine the charge was authorized, they'll explain their reasoning and you can pursue additional steps if you disagree.
Practical takeaway: Keep a dedicated folder—physical or digital—for all dispute documentation. Store copies of your written dispute letter, certified mail receipts, and all correspondence from your financial institution in one place. This documentation becomes important if the dispute isn't resolved as you expected.
Your liability and the timeline for disputing unauthorized charges differ based
This guide is for general information only and is not medical, financial, legal, or other professional advice. For decisions specific to your situation, consult a qualified professional. See our Editorial Policy.