Security & accounts

Suspect your credit card info was stolen after an online purchase

Unexpected charges after shopping online usually mean your card number was captured either by a fake site, a breach at a real retailer, or card skimming elsewhere. Contacting your card issuer immediately limits the damage regardless of the cause.

Difficulty
Easy
Time
20–40 minutes
DIY cost
$0

Symptoms

  • Unfamiliar charges appear shortly after an online purchase
  • Charge from a merchant or amount you don't recognize
  • Card issuer flags a transaction as suspicious
  • Multiple small test charges before a larger one appears

Likely causes

  • CommonData breach at a retailer you shopped withStored card data at a company can be exposed in a breach without your knowledge until charges appear.
  • CommonFake or fraudulent shopping websiteA convincing but fake online store can capture your card details directly at checkout.
  • PossibleCard skimming at a physical location around the same timeA compromised card reader elsewhere could be the actual source, coincidentally timed with an online purchase.

What to do

  1. Call your card issuer immediately to report the unauthorized charge and request a new card number.
  2. Review your recent transaction history for any other unfamiliar charges.
  3. Change the password on the shopping site's account, and any other account using the same password.
  4. Check whether the retailer has announced a data breach around the time of your purchase.
  5. Dispute the unauthorized charge formally with your card issuer if it hasn't been reversed automatically.
  6. Monitor your statements closely for the next few billing cycles.
  7. Consider using virtual card numbers for future online purchases to limit exposure.

When to call a pro

For repeated fraud or if a chargeback is denied unfairly, your bank's fraud department can escalate the dispute.

Safety

Generally low risk

Generally low risk for a careful person. Stop if anything looks different from what this guide describes.

Related guides

Operator provides AI-generated troubleshooting information. It can be wrong. For safety-critical, electrical, gas, structural, medical, automotive safety, or other high-risk problems, consult a qualified professional.