Seeing an unauthorized charge on a credit card can feel confusing if you don’t recall signing up for anything. The line may look like a store you never visited. Many unfamiliar charges are still real purchases with odd names. Some are not yours at all.
This guide explains what unauthorized use means, what federal law caps, and the steps to report the charge without panic.
Table of Contents
What an unauthorized charge on a credit card is
An unauthorized charge on credit card is a use of your card or card number by someone who did not have the right to use it.
The Consumer Financial Protection Bureau puts it in plain terms. Unauthorized use is generally use by a person who does not have the right to use the card. Losing the card and having a stranger spend on it is the classic example.
Federal Regulation Z uses a similar test. Unauthorized use means use by a person other than the cardholder, without actual, implied, or apparent authority, and from which you received no benefit.
That last part matters. If you handed the card to a family member or roommate, the issuer may treat those purchases as authorized until you say that person can no longer use the card. Tell the issuer as soon as you want that permission to end. The company may issue a new card.
A weird merchant name is not automatically fraud. Processors often print a legal name or a city you do not recognize. Match the date and amount to receipts, app stores, gas holds, and household users before you file.
How much you can owe
Federal law caps what you owe for unauthorized credit-card use. Under the Truth in Lending Act, that cap is $50, or the amount taken before you notify the issuer, whichever is less. The issuer also has to meet notice conditions before it can hold you to even that $50.
The CFPB draws a useful line. You are generally not responsible for unauthorized charges if someone stole only the account number. If the physical card is lost or stolen too, you could be responsible for up to $50.
Many major issuers advertise $0 liability policies. That extra protection is a company rule, not a reason to wait. Report the problem so new charges stop.
Credit cards and debit cards do not follow the same clock.
| Card type | Main federal rules | Typical liability if you wait |
|---|---|---|
| Credit card | Truth in Lending Act and Fair Credit Billing Act | Generally capped at $50 for unauthorized use, often $0 in practice |
| Debit card or ATM card | Electronic Fund Transfer Act and Regulation E | Can rise from $50 to $500, or more, if you report late |
A debit pull takes cash from checking. A credit-card charge is a bill you can dispute while the review runs. Use the credit card for the unauthorized line if that is what posted.
What to do in the first hour
Move in order. Speed helps more than a perfect letter in the first call.
- Open live activity in the issuer app, not only last month’s PDF.
- List every line you did not allow, including pending holds.
- Call the number on the back of the card or in the official app. Do not use a number from a pop-up or text.
- Say you are reporting unauthorized use. Ask the issuer to lock or replace the card.
- Ask whether the case is a fraud claim or a billing dispute, and how to send written follow-up.
- Change the issuer login and email password on a device you trust.
If the card is in your wallet and only the number was used, still lock it. Stolen numbers travel. A replacement card stops later charges tied to the old number.
Do not send a photo of the full card, a one-time passcode, or remote-access permission to anyone who contacted you first. Real issuer fraud teams start from the number on your card or the official app.
Pro Tip: Write down the date, time, and reference number from the first call. That note is useful if a later letter asks when you first reported the unauthorized charge on a credit card.
How to dispute the charge in writing
A phone report starts the lock. A written billing-error notice protects the federal timeline on a credit card.
The CFPB says you should send a written notice within 60 calendar days after the charge appeared on your statement. After the issuer gets that notice, it generally has 30 days to confirm receipt unless it already finished the required steps. It then generally has two billing cycles, and no more than 90 days, to resolve the issue.
Send the notice to the billing-inquiries address on the statement, not the payment address. Include:
- Your name and account number
- The date and amount of each unauthorized charge
- The merchant name as it prints
- A short statement that you did not authorize the use and received no benefit
- The date you first called
Keep copies. Send copies of receipts, not originals. Certified mail with a return receipt gives you proof of arrival. Many issuers also accept a written dispute inside the official app or website. If the issuer says electronic notice counts, save the confirmation screen.
You generally do not have to pay the disputed unauthorized amount or related finance charges while a valid billing-error review is open. You still need to pay the rest of the bill on time. Skipping the undisputed minimum can add a late fee that has nothing to do with the fraud claim.
If you already paid the bad charge, you can still dispute it. The CFPB notes you may not see the money back until the issuer decides you were right.
What happens after you report it
The issuer may post a temporary credit while it investigates. That credit can look like a refund. It is not always final. If the issuer later decides the charge was authorized, it can take the temporary credit back. That take-back can look like a new charge.
Issuers sometimes ask for an affidavit or a police report. Provide what they request. You do not have to argue with the merchant yourself for a true stolen-card case. For a subscription you forgot you started, the merchant path may still be faster.
If the issuer says the charge stands, it generally must explain why in writing and tell you what you owe and when. You can write back that you still dispute the amount. You can also send a complaint to the CFPB at consumerfinance.gov.
If the problem looks like identity theft beyond one card, use IdentityTheft.gov to build a recovery plan. You can also place a fraud alert with one nationwide credit bureau. That bureau generally tells the other two.
Common Mistakes: Paying the unauthorized line “just in case” and then missing the 60-day written window. Assuming a household user is automatically fraud. Ignoring pending holds after you lock the card. Calling a number from a text that claims to be the bank.
How to lower the odds of a repeat charge
Replacement cards help only if you update the places you still want to pay. Recurring bills on the old number may fail, then the merchant may retry a stored wallet.
Useful habits include:
- Transaction alerts for every purchase
- Checking pending activity after travel, gas, or hotel stays
- A unique password and a second factor on the issuer login
- Removing saved cards from sites you no longer use
- Watching authorized-user activity if someone else has a card on the account
A $1 authorization and matching reversal can be a merchant card check. It can also be someone testing a stolen number. If you did not add the card anywhere new, treat that pair as a reason to call.
FAQs: Unauthorized Charge on Credit Card
Q. Do I owe money on an unauthorized charge on a credit card?
A. Federal law generally caps unauthorized credit-card use at $50, and only for charges before you notify the issuer. The CFPB says you generally owe nothing if only the number was stolen and the plastic card was not. Many issuers waive the $50. Report the charge anyway so more spending cannot post.
Q. Is a charge by my spouse or child unauthorized?
A. Not automatically. If you gave that person the card or added them as an authorized user, the issuer may treat the spending as authorized until you revoke that permission. Call the issuer, remove the person’s access, and ask for a new card number if you need a clean break.
Q. How long do I have to report an unauthorized charge on a credit card?
A. Call as soon as you see it. For federal billing-error rights, send written notice so it arrives within 60 days after the issuer sent the first statement that showed the charge. Waiting can make later charges harder to fight, even when the first charge was clearly not yours.
Q. Should I call the store or the card issuer first?
A. Call the issuer first when you did not allow the purchase at all. Lock the card so the next swipe fails. Call the store first when the line matches a real order with a wrong amount, a duplicate swipe, or a subscription you already canceled. You can still send the issuer a written notice if the store does not fix it.
Conclusion
An unauthorized charge on a credit card is a purchase you did not allow and did not benefit from. Federal law generally caps what you owe at $50, and often you owe nothing when only the number was stolen.
Lock the card the same day, then send a written billing-error notice within 60 days of the statement that showed the charge.
Pay the rest of the bill on time while the review runs. Keep the call notes and confirmation numbers. That file is usually enough to finish the claim without guessing.
Disclaimer: This article is for general information only. It is not financial or legal advice. Liability limits, zero-liability policies, and dispute tools vary by issuer and by card type. Confirm account-specific questions with your card issuer or official CFPB and FTC resources.
Meet the Author
