What to Do If Your Credit or Debit Card Details Were Stolen Online

 

If your credit or debit card details were stolen online, act quickly. The most important step is to contact your card issuer or bank before more unauthorized transactions occur.

Do not wait for a suspicious charge to become larger.

1. Contact Your Bank or Card Issuer Immediately

Use the official banking app, website, statement, or the number on the back of your card.

Tell them that your card details may have been stolen.

The FTC recommends reporting lost, stolen, or unauthorized card activity to your card issuer as quickly as possible.

Ask whether they recommend:

• Blocking or locking the card
• Cancelling the card
• Issuing a replacement
• Changing your PIN
• Monitoring the account for fraud

The FTC and CFPB both recommend reporting suspected unauthorized card activity promptly.

2. Review Recent Transactions

Check your account for purchases or withdrawals you do not recognize.

Look carefully at:

• Pending transactions
• Small unfamiliar charges
• Online purchases
• Recurring payments
• Cash withdrawals

Report suspicious transactions to your financial institution as soon as possible. Visa also advises cardholders to report unauthorized transactions immediately.

3. Ask Whether the Card Should Be Replaced

If the card number, expiry date, CVV/security code, or other sensitive card details were exposed, your issuer may recommend replacing the card.

A new card number can help prevent continued misuse of the stolen details.

Follow your bank or card issuer's instructions rather than relying on advice from the suspicious website or caller.

4. Change Related Passwords

If you entered card details on a fake website and also created an account there, change that password.

If you reused the same password elsewhere, change those accounts too.

Prioritize:

• Email
• Banking
• Shopping accounts
• Payment services

Use unique passwords and enable multi-factor authentication where available.

If your card details were stolen after buying from an unfamiliar store, review our guide on how to spot a fake online shopping website before you buy.

5. Watch for Follow-Up Scams

After card information is stolen, scammers may contact you pretending to be your bank.

They may ask for:

• Verification codes
• PIN
• Password
• Full card details
• Remote access to your device

Do not trust an incoming call or message simply because the person knows some of your information.

End the conversation and contact the bank independently.

6. If Unauthorized Charges Already Appeared

Report them immediately.

The CFPB explains that reporting unauthorized transactions quickly can affect your protections, especially for debit cards.

Tell the card issuer that you did not authorize the transaction and ask about its fraud or dispute process.

Consumer protections vary depending on whether the card is credit or debit, the country, and how quickly the problem is reported. In the U.S., reporting speed can be especially important for debit-card losses.

If the card loss is connected to a scam payment, you may also want to follow our guide on what to do if you paid a scammer online.

7. Keep Evidence

Save:

• Suspicious website URL
• Order confirmation
• Emails or messages
• Screenshots
• Transaction information
• Dates and times

This can help when explaining the incident to your bank, card issuer, or relevant authorities.

8. Scan Your Device if You Downloaded Something

If the incident also involved:

• A suspicious download
• Fake security software
• Remote access
• An unknown attachment

scan the affected device using trusted security software.

If you suspect malware, avoid entering new banking passwords on that device until it has been checked.

Quick Emergency Checklist

If your card details were stolen:

• Contact the card issuer or bank
• Lock/block the card if advised
• Review transactions
• Report unauthorized charges
• Replace the card if necessary
• Change exposed or reused passwords
• Ignore follow-up verification-code requests
• Save evidence
• Scan the device if malware may be involved

Final Thoughts

If your credit or debit card details were stolen online, speed matters.

Contact your financial institution first, review transactions, and follow its instructions about blocking or replacing the card.

Then secure any related online accounts and stay alert for follow-up scams.

Do not give a caller your PIN, password, or verification code just because they claim to be protecting your money.

Guide note: Card-fraud protections and reporting deadlines differ by country, card type, issuer, and circumstances. Always follow the current instructions of your bank or card issuer.