May 12, 2026

Who Pays for Credit Card Fraud?

Written by Alison Kimberly
|
Edited by Joe Evans
Blog Post Image

In most cases, the card issuer absorbs the cost of credit card fraud first, not you.

Under federal law, your liability for unauthorized credit card use is capped at $50, and the Federal Trade Commission says you owe nothing if you report the card lost or stolen before any unauthorized charges are made.

When a transaction is disputed and reversed, the merchant may take the loss through a chargeback if it cannot prove the purchase was valid.


  • FCBA liability cap: Your maximum out-of-pocket cost for unauthorized credit card use is generally $50 under federal law.

  • Report fast: If you report a lost or stolen credit card before unauthorized charges happen, you are not responsible for those charges.

  • Dispute window: Credit card billing disputes generally must be sent within 60 days after the first bill with the error was sent to you.

  • Network protections: Many major card networks and issuers offer $0 fraud liability policies that go beyond federal minimums.

  • Merchant chargebacks: Retailers can absorb the loss when a disputed transaction is reversed and the merchant cannot prove it was authorized.

Summary generated by AI, verified by MoneyLion editors


Credit card fraud is the unauthorized use of someone else’s credit card or credit card number to make purchases, withdraw cash or open new accounts without permission. Credit card fraud can happen when someone:

  • Steals your physical card

  • Uses your card number online

  • Skims your card at a payment terminal

  • Steals card details through a data breach

  • Uses your card information after a phishing scam

  • Opens a new card in your name through identity theft

Credit card fraud can involve a single unauthorized charge or a larger identity theft issue. The right response depends on whether someone used your existing card or opened a new account in your name.

In most consumer cases, you don't pay for confirmed credit card fraud. The cost usually falls to one of these parties:

Party

When They May Pay

Card issuer

Often absorbs the fraud loss upfront and credits your account

Merchant

May absorb the loss through a chargeback if the transaction is reversed

Payment network

May help set liability and dispute rules for card transactions

Cardholder

Usually $0, or up to $50 under federal law in limited cases

The Federal Trade Commission says your liability for unauthorized credit card charges is limited to $50. If only your card number is stolen but not the physical card, you aren't responsible for unauthorized use.

Credit cards come with stronger federal protections than many other payment methods. The Fair Credit Billing Act limits your liability for unauthorized credit card use and gives you dispute rights for billing errors.

Here is the basic liability breakdown:

Situation

Your Possible Liability

You report the card lost or stolen before unauthorized charges happen

$0

Your card number is stolen, but your physical card is not

$0

Your physical card is lost or stolen and used before you report it

Up to $50

Your issuer offers $0 liability and the claim qualifies

$0

Even though federal law caps liability, you should report fraud as soon as possible. Fast reporting helps stop more charges, speed up replacement-card access and reduce confusion during the investigation.


MoneyLion offers a service to help you find personal loan offers. Based on the information you provide, you can get matched with offers for up to $100,000 from our top providers. You can compare rates, terms, and fees from different lenders and choose the best offer for you.


Credit card and debit card fraud aren't treated the same way. With a credit card, the disputed charge is tied to borrowed funds. With a debit card, the fraud can remove money directly from your bank account while the investigation is pending.

Feature

Credit Card Fraud

Debit Card Fraud

Maximum liability

Usually $0 to $50

Can range from $0 to unlimited depending on timing

Reporting window

Dispute billing errors within 60 days of the statement

Liability depends heavily on how fast you report

Access to funds during investigation

Your bank account is not directly drained

Money may leave your account while the claim is reviewed

Governing law

Fair Credit Billing Act

Electronic Fund Transfer Act

Chargeback rights

Strong dispute process through issuer and network rules

Dispute rights exist, but bank-account access can be affected

Debit card fraud works under different rules. The Electronic Fund Transfer Act sets liability based on how fast you report the loss to your bank. Here's how debit card liability generally breaks down:

  • Before unauthorized charges happen: Your liability is $0.

  • Within two business days: Your maximum liability is $50.

  • After two business days but within 60 calendar days after your statement is sent: Your liability can climb to $500.

  • After 60 days: You could face unlimited losses, including money taken from linked accounts.

The FTC gives the same debit-card liability tiers and warns that waiting too long can expose you to much larger losses.

When you report credit card fraud, your issuer typically opens an investigation. The issuer may remove the disputed charge, issue a temporary credit and send you a replacement card. The process may include:

  1. You report the unauthorized charge.

  2. The issuer freezes or closes the compromised card.

  3. The issuer investigates the transaction.

  4. The merchant may be asked to provide proof.

  5. The issuer decides whether the charge was valid.

  6. If fraud is confirmed, the charge is removed.

  7. If the transaction is reversed, the merchant may receive a chargeback.

The CFPB says you should contact your card company right away to dispute a charge on your credit card bill. Under federal billing-error rules, creditors generally must acknowledge a billing-error notice within 30 days and resolve the investigation within two billing cycles, not more than 90 days.

If you spot credit card fraud, act quickly. The faster you report it, the easier it may be to stop more charges and clean up the account.

  1. Contact your card issuer. Call the number on the back of your card or use the issuer’s app to report the fraud and freeze the account.

  2. Review your recent transactions. Flag every charge you don't recognize, even small ones, since scammers may test cards with small purchases first.

  3. Request a new card. Ask the issuer to cancel the compromised card and send a replacement with a new number.

  4. Change your account passwords. Update logins for your card account, email and any retailer accounts tied to the card.

  5. Place a fraud alert with the credit bureaus. Contact Equifax, Experian or TransUnion to add a free fraud alert to your credit file.

  6. File a report with the FTC. Visit IdentityTheft.gov to create a recovery plan if you suspect identity theft.

  7. Monitor your credit reports. Check your reports for new accounts or hard inquiries you didn't authorize.

Credit card fraud shouldn't hurt your credit score once the unauthorized charge is reported, investigated and removed. The risk comes if the fraudulent charge causes a missed payment, pushes your balance higher or is connected to broader identity theft.

To protect your score:

  • Report the fraud quickly.

  • Keep paying any legitimate charges.

  • Ask whether the disputed amount will be removed while the investigation is pending.

  • Review your statements.

  • Check your credit reports for unfamiliar accounts.

  • Set up transaction alerts.

If someone opened a new card in your name, that is identity theft and may affect your credit report. In that case, review all three credit reports and consider a fraud alert or credit freeze.

A chargeback is a transaction reversal that can happen after a cardholder disputes a charge. If the issuer finds the transaction was unauthorized or the merchant cannot prove it was valid, the merchant may lose the sale amount and may also face chargeback fees.

A merchant may be more likely to absorb the cost if:

  • It accepted a fraudulent transaction.

  • It can't provide proof of authorization.

  • It failed to follow card-network verification rules.

  • The transaction was card-not-present and disputed as fraud.

  • The chargeback deadline and evidence rules favor the cardholder.

Not every dispute ends with a merchant paying. In some cases, the issuer may absorb the loss, the claim may be denied or the transaction may be found valid.

Card issuers use several signals to investigate possible fraud. They may review the transaction, merchant records and your account history. Issuers may look at:

Investigation Factor

What It May Show

Purchase location

Whether the purchase fits your normal pattern

Transaction amount

Whether the charge is unusual

Merchant category

Whether the merchant type looks suspicious

Device or account data

Whether the purchase came from a known device or login

Card-present status

Whether the physical card was used

Previous spending

Whether the charge matches your usual behavior

Merchant evidence

Receipts, shipping details or authorization records

The issuer may contact the merchant for records. If the merchant can't support the transaction, the issuer may reverse the charge.

You can't prevent every fraud attempt, but you can reduce the risk and spot problems faster.

Prevention Step

Why It Helps

Turn on transaction alerts

Helps you spot unauthorized charges quickly

Use virtual card numbers when available

Reduces exposure of your real card number

Avoid saving cards on unfamiliar sites

Limits where your card data is stored

Use strong passwords

Helps protect online card accounts

Enable multifactor authentication

Adds another layer of account protection

Check statements weekly

Helps catch small test charges

Use secure networks

Avoids exposing card data on public Wi-Fi

Freeze or lock cards you don't use

Prevents new purchases on inactive cards

If your information appears in a data breach, watch your accounts closely and consider replacing the affected card.

Credit card fraud and identity theft overlap, but they are not always the same thing.

Issue

What It Means

Credit card fraud

Someone uses your existing card or card number without permission

Identity theft

Someone uses your personal information to impersonate you or open new accounts

Credit card fraud is often easier to resolve when it involves one existing account. Identity theft can take longer because it may involve new accounts, credit report errors, tax fraud or other misuse of personal information.

You may want to file an identity theft report if the issue goes beyond one unauthorized credit card charge. Consider using IdentityTheft.gov if:

  • Someone opened a new credit card in your name.

  • You see unfamiliar hard inquiries.

  • Your personal information was used for loans or accounts.

  • You receive bills for accounts you did not open.

  • A creditor says your Social Security number was used.

  • You see addresses or names on your credit report that are not yours.

A simple card replacement may be enough for one compromised card. New accounts in your name are more serious.

In most cases, you don't pay for confirmed credit card fraud. Federal law generally caps your liability at $50, and many issuers and networks offer $0 liability for qualifying unauthorized charges. The issuer usually handles the refund first, while the merchant may absorb the loss if the transaction is reversed through a chargeback.

The key is to act quickly. Report suspicious charges right away, replace the compromised card, update passwords and check your credit reports for signs of identity theft.


  • Credit card fraud: Unauthorized use of a credit card or credit card number to make purchases, withdraw cash or open accounts.

  • Fair Credit Billing Act: A federal law that limits consumer liability for unauthorized credit card use and gives consumers billing-dispute rights.

  • Chargeback: A transaction reversal that can occur after a cardholder disputes a charge.

  • Unauthorized charge: A credit card transaction made without the cardholder’s permission.

  • Debit card fraud: Unauthorized use of a debit card or debit card number, which can remove money directly from a bank account.

  • Electronic Fund Transfer Act: A federal law that covers many debit card and electronic bank-account transactions.

  • Fraud alert: A free notice on your credit file telling lenders to take extra steps to verify your identity before opening new credit.

  • Identity theft: The misuse of someone’s personal information to commit fraud or open accounts.

Sources:

Summary generated by AI, verified by MoneyLion editors


What is the difference between credit card fraud and identity theft? Credit card fraud is the unauthorized use of an existing card or card number. Identity theft is broader and happens when someone uses your personal information to impersonate you or open new accounts. Credit card fraud can be one type of identity theft, but not all identity theft involves a credit card.

Does credit card fraud affect your credit score? Unauthorized charges should not hurt your credit score once you report them and the issuer removes the disputed amount. To stay protected, check your credit reports from Equifax, Experian and TransUnion for any new accounts you did not open.

How long does a credit card fraud investigation take? Credit card billing-error rules generally require creditors to acknowledge a dispute within 30 days and resolve it within two billing cycles, not more than 90 days. Your issuer may provide a temporary credit while the investigation is open.

Can you go to jail for credit card fraud? Yes. Credit card fraud can lead to criminal charges, fines or prison time, depending on the facts and the laws involved. Penalties can be more serious when the fraud involves identity theft, organized schemes or large dollar amounts.

Who pays for stolen credit card purchases? The card issuer usually covers the fraud upfront and removes the charge from your account if the claim is valid. The merchant may absorb the cost through a chargeback if it cannot prove the transaction was authorized.

How do credit card companies investigate fraud? Issuers review the disputed transaction, your spending patterns, location data, merchant records and proof of authorization. If the issuer cannot verify the charge was legitimate, it may reverse the transaction and refund your account.

Are debit cards protected the same way as credit cards? No. Debit card liability depends more heavily on how fast you report the loss or theft. Under federal rules, liability can be $50, $500 or even unlimited depending on the timing, while credit card liability is generally capped at $50.


Alison Kimberly
Written by
Alison Kimberly
Alison Kimberly is a freelance content writer with a Sustainable MBA, uniquely qualified to help individuals and businesses achieve the triple bottom line of environmental, social, and financial profitability. She has been writing for various non-profit organizations for 15+ years. When not writing, you will find her promoting education and meditation in the developing world, or hiking and enjoying nature.
Joe Evans
Edited by
Joe Evans
Joe is a NACCC Certified Financial Health Counselor™, writer, editor and personal finance expert. He has been part of the GOBankingRates editorial team since 2024. He brings a decade of experience as a digital SEO-focused editor, writer and journalist. Before coming on board the GOBankingRates team, he wrote, edited and created content for niche digital readers in industries like legal cannabis, consumer software, automotive, sports, entertainment, and local news, just to name a few. Joe also holds a Financial Health Counselor Certification™, accredited by the National Association of Certified Credit Counselors (NACCC). When he's not creating and editing financial content, he's spending time with his wife, family and pets, watching sports or enjoying some outdoor activity in beautiful Northeastern Pennsylvania.
Advertisement
Advertisement

This material is for informational purposes only and should not be construed as financial, legal, or tax advice. You should consult your own financial, legal, and tax advisors before engaging in any transaction. Information, including hypothetical projections of finances, may not take into account taxes, commissions, or other factors which may significantly affect potential outcomes. This material should not be considered an offer or recommendation to buy or sell a security. While information and sources are believed to be accurate, MoneyLion does not guarantee the accuracy or completeness of any information or source provided herein and is under no obligation to update this information. For more information about MoneyLion, please visit https://www.moneylion.com/terms-and-conditions/.

MoneyLion does not provide, own, control or guarantee third-party products or services accessible through its Marketplace (collectively, “Third-Party Products”). The Third-Party Products are owned, controlled or made available by third parties (the "Third-Party Providers"). Should you choose to purchase any Third-Party Products, the Third-Party Providers’ terms and privacy policies apply to your purchase, so you must agree to and understand those terms. The display on the MoneyLion website, app, or platform of any of a Third-Party Product or Third-Party Provider does not-in any way-imply, suggest, or constitute a recommendation by MoneyLion of that Third-Party Product or Third-Party Financial Provider. MoneyLion may receive compensation from third parties for referring you to the third party, their products or to their website.