Reach the right provider
Fictional example: Samira pays supposed postage charges on an imitation delivery website. She then notices an unusual address. She opens the genuine card app and uses its help section, ignoring the support number shown on the suspicious payment page.
Use an already known, independently verifiable contact route. Search advertisements can also lead to fake support. If the app provides a card-lock feature, read what it does and ask the issuer about uncertainties. A temporary lock and permanent card replacement are not necessarily equivalent measures.
Explain exactly what was disclosed
Describe whether you entered the card number, expiry date, security code, name or address. Mention any payment you confirmed, one-time code you supplied or approval in the banking app. These distinctions may affect the action the provider takes next.
Provide complete sensitive information only through the issuer’s verified process when required. Personal notes usually need only the card type and last digits. Do not place security codes in an openly shared document or post screenshots showing full card details in public comments.
Record individual transactions
Check actual activity in the official app or statement. Note the date, amount, currency, merchant description and displayed status. Distinguish a pending authorisation from a posted transaction without drawing your own legal conclusion from that status alone.
Report unfamiliar activity through the issuer’s procedure and ask whether stopping, recovering or disputing the payment is possible. Keep the case reference. Whether money is returned depends on the circumstances and applicable conditions; promising reimbursement would be misleading.
Stop further approvals and preserve evidence
Do not approve a new payment supposedly required to reverse an earlier one. Do not move money into a claimed safe account. If somebody calls after your report, verify their identity through the already known service route before sharing personal information.
Keep the original message, available order details and relevant screenshots securely. Where money has been lost, reporting to the locally responsible police may be appropriate or part of the next steps. Follow official guidance for your country; this article does not invent a universal contact number.
Agree follow-up with the issuer
Samira records which card was affected, what action was confirmed and when to review outstanding activity again. If a replacement card is issued, she later checks legitimate recurring payments too. That helps prevent an important service from unexpectedly stopping.
Also consider whether you entered a reused password on the fake page. That needs a separate response: reporting card exposure does not secure an email account. This information does not replace individual banking or legal advice; confirm relevant procedures and deadlines directly with the responsible provider.
Your checklist
The checkboxes are for your own reference. No entries are sent to us. To keep a copy, print the page or save it as a PDF using your browser menu.
Common questions
Should I wait until money actually leaves?
No. Report possible exposure of card details already. The issuer can explain suitable protection before a visible transaction appears.
Will a fraudulent payment definitely be refunded?
That cannot be promised. Report promptly and ask about the specific review and dispute procedure. Eligibility and the outcome depend on the circumstances.
Is removing the card from an online shop enough?
No. It does not erase details somebody may already have captured. Speak to the issuer about the affected card and necessary protective measures.
Sources and further information
Primary sources from public authorities, consumer organisations and providers. A source may be in another language; follow the guidance that applies to your service and where you live.
- BACS: Finanzieller SchadenSource review date:
- BACS: Phishing, Vishing, SmishingSource review date:
- FTC: What To Do if You Were ScammedSource review date:
