Published: October 1, 2026
12 min read

Who Pays for Credit Card Fraud? Liability Explained

Blog Post Image

In most cases, you pay nothing for credit card fraud. Federal law caps your liability for unauthorized charges at $50, and the FTC says you owe nothing if you report the card lost or stolen before any unauthorized charges are made. Most major issuers go further with voluntary zero-liability policies that erase that $50 entirely. The issuer typically absorbs the loss first and credits your account, then sorts out with the merchant who ultimately eats the cost.


  • You almost never pay for credit card fraud. Federal law caps your liability at $50, and most issuers waive even that.

  • If only your card number was stolen, you owe nothing. The $50 cap only applies when the physical card itself is used.

  • The issuer, the merchant or the payment network absorbs the loss, not you. Who ends up paying depends on how and where the fraud happened.

  • Card-not-present transactions usually cost the merchant. Card-present fraud at a secure, chip-enabled terminal usually falls on the bank instead.

  • A written dispute strengthens your legal protections. A phone call caps your liability, but a follow-up written notice triggers your card issuer's full investigation and reporting obligations.

  • Resolved fraud shouldn't hurt your credit score. The risk comes from a missed payment or identity theft tied to the fraud, not the fraudulent charge itself.

Publisher Logo
MoneyLion

Summary generated by AI, verified by MoneyLion editors


The cardholder rarely pays for credit card fraud. The cost usually falls to one of these parties:

Party

When They May Pay

Card issuer

Often absorbs the fraud loss upfront and credits your account

Merchant

May absorb the loss through a chargeback if the transaction is reversed

Payment network

May help set liability and dispute rules for card transactions

Cardholder

Usually $0, or up to $50 under federal law in limited cases

The FTC says your liability for unauthorized credit card charges is limited to $50. If only your card number is stolen but not the physical card, you aren't responsible for unauthorized use at all.

Credit cards come with stronger federal protections than many other payment methods. The Fair Credit Billing Act (FCBA) limits your liability for unauthorized use and gives you dispute rights for billing errors.

Situation

Your Possible Liability

You report the card lost or stolen before unauthorized charges happen

$0

Your card number is stolen, but your physical card is not

$0

Your physical card is lost or stolen and used before you report it

Up to $50

Your issuer offers $0 liability and the claim qualifies

$0

Even though federal law caps liability, report fraud as soon as possible. Fast reporting stops more charges and speeds up replacement-card access. A phone call caps your liability and freezes the card, but the FCBA's stronger billing-error protections, like a guaranteed investigation timeline, generally require a follow-up written notice too.

Zero-liability policy is a card issuer perk, not federal law. The federal cap limits your liability to $50, but the card issuer can waive that down to $0. American Express, Visa, Mastercard and Discover all maintain voluntary zero-liability policies. The $50 cap itself only applies if your issuer met certain conditions, like disclosing your potential liability and providing a way to report a lost card; if they didn't, your liability drops to $0 regardless of the amount charged.

Whether the bank or the merchant covers a fraud loss usually comes down to one distinction: was your physical card present at the point of sale?

Scenario

Who Usually Pays

Why

In-person transaction at a chip-enabled (EMV) terminal

Bank (issuer)

The merchant used secure technology, so the issuer covers the loss

In-person transaction at an outdated swipe-only terminal

Merchant

The merchant didn't use available chip technology, so liability shifts to them

Online or phone transaction (card-not-present)

Merchant

The physical card can't be verified, so the merchant bears the risk

Counterfeit card used at a chip-enabled terminal

Bank (issuer)

The terminal was secure, so the loss falls back on the issuer

This split exists because of the EMV liability shift, a card-network policy that took effect for most U.S. merchants in October 2015 and, after several delays, for gas station pumps by April 2021. Under this rule, whichever party, bank or merchant, failed to use available chip technology absorbs the resulting loss. Card-not-present transactions can't use a chip reader at all, so merchants bear that risk category by default, which is why online fraud tends to cost merchants more than in-person fraud.


MoneyLion offers a service to help you find personal loan offers. Based on the information you provide, you can get matched with offers for up to $100,000 from our top providers. You can compare rates, terms, and fees from different lenders and choose the best offer for you.


Credit card fraud is one of the most frequently reported forms of identity theft in the U.S. A few figures from 2025 show the scale:

  • The FTC logged more than 1.3 million identity theft reports in 2025, part of roughly 3 million total fraud reports with losses exceeding $15.8 billion.

  • Of those, roughly 598,000 reports specifically involved credit card fraud.

  • 77% of individuals sentenced for credit card and other financial instrument fraud were men, according to the U.S. Sentencing Commission.

When you report credit card fraud, your issuer typically opens an investigation. The issuer may remove the disputed charge, issue a temporary credit and send a replacement card. The process generally looks like this:

  1. You report the unauthorized charge.

  2. The issuer freezes or closes the compromised card.

  3. The issuer investigates the transaction.

  4. The merchant may be asked to provide proof of authorization.

  5. The issuer decides whether the charge was valid.

  6. If fraud is confirmed, the charge is removed.

  7. If the transaction is reversed, the merchant may receive a chargeback.

The CFPB says you should contact your card company right away to dispute a charge on your bill. Under federal billing-error rules, creditors generally must acknowledge a notice within 30 days and resolve the investigation within two billing cycles, not more than 90 days, tied to the written notice requirement mentioned above.

A chargeback is a transaction reversal that can happen after a cardholder disputes a charge. If the issuer finds the transaction was unauthorized, or the merchant can't prove it was valid, the merchant may lose the sale amount and face additional chargeback fees.

A merchant is more likely to absorb the cost if it:

  • Accepted a transaction that turned out to be fraudulent.

  • Can't provide proof of authorization.

  • Failed to follow card-network verification rules.

  • Processed a card-not-present transaction that's disputed as fraud.

  • Faces chargeback deadlines and evidence rules that favor the cardholder.

Not every dispute ends with the merchant paying. In some cases, the issuer absorbs the loss, the claim is denied or the transaction is found valid after all.

Generally, fraudsters don't "pay" in the way victims would prefer, since your losses aren't typically recovered directly from them. But credit card fraud carries serious legal penalties, including restitution, fines and prison time. The U.S. Sentencing Commission reports an average sentence of 28 months for convicted offenders, with 95% sentenced to prison.

Credit card and debit card fraud aren't treated the same way under federal law. With a credit card, a disputed charge is tied to borrowed money the issuer fronted. With a debit card, fraud can pull money directly out of your bank account while the investigation is still pending.

Feature

Credit Card Fraud

Debit Card Fraud

Maximum liability

Usually $0 to $50

$0 if reported before use; $50 within 2 business days; $500 within 60 days of your statement; unlimited after that

Reporting window

Dispute billing errors within 60 days of the statement

Liability tiers above are based on how fast you report

Access to funds during investigation

Your bank account isn't directly drained

Money may leave your account while the claim is reviewed

Governing law

Fair Credit Billing Act

Electronic Fund Transfer Act

Chargeback rights

Strong dispute process through issuer and network rules

Dispute rights exist, but account access can be affected in the meantime

Because debit card fraud can expose you to higher liability and drain real cash from your account, many financial educators recommend a credit card over a debit card for online or unfamiliar purchases when possible.

Card issuers use several signals to evaluate a disputed charge. They may review the transaction, merchant records and your account history, including:

Investigation Factor

What It May Show

Purchase location

Whether the purchase fits your normal pattern

Transaction amount

Whether the charge is unusual for you

Merchant category

Whether the merchant type looks suspicious

Device or account data

Whether the purchase came from a known device or login

Card-present status

Whether the physical card was actually used

Previous spending

Whether the charge matches your usual behavior

Merchant evidence

Receipts, shipping details or authorization records

If the merchant can't produce supporting evidence, the issuer may reverse the charge.

Credit card fraud shouldn't hurt your credit score once the charge is reported, investigated and removed. The real risk comes if it causes a missed payment, pushes your utilization higher, or ties into broader identity theft, any of which could pull your score out of good territory (670 to 739) or fair territory (580 to 669).

To protect your score while a dispute is open:

  • Report the fraud quickly.

  • Keep paying any legitimate charges on the account.

  • Ask your issuer whether the disputed amount will be removed while the investigation is pending.

  • Review your statements closely.

  • Check your credit reports for unfamiliar accounts.

  • Set up transaction alerts going forward.

If someone opened an entirely new card in your name, that's identity theft, and it can affect your credit report differently than a single fraudulent charge. In that case, review all three credit reports and consider a fraud alert or credit freeze, and see our guide on what to do if someone opens a credit card in your name.

You can't prevent every fraud attempt, but you can reduce the risk and catch problems faster:

Prevention Step

Why It Helps

Turn on transaction alerts

Helps you spot unauthorized charges quickly

Use virtual card numbers when available

Reduces exposure of your real card number

Avoid saving cards on unfamiliar sites

Limits where your card data is stored

Use strong, unique passwords

Helps protect your online card accounts

Enable multifactor authentication

Adds another layer of account protection

Check statements weekly

Helps catch small test charges early

Use secure networks

Avoids exposing card data on public Wi-Fi

Freeze or lock cards you don't use

Prevents new purchases on inactive cards

If your information turns up in a data breach, watch your accounts closely and consider credit monitoring or replacing the affected card altogether.

A simple card replacement is usually enough for one compromised card. Consider filing a report at IdentityTheft.gov if the issue goes beyond a single unauthorized charge, such as:

  • Someone opened a new credit card in your name.

  • You see unfamiliar hard inquiries on your report.

  • Your personal information was used for loans or other accounts.

  • You receive bills for accounts you never opened.

  • A creditor says your Social Security number was used.

  • You see addresses or names on your credit report that aren't yours.

New accounts opened in your name are a more serious situation than a single compromised card and generally warrant a full identity theft recovery plan.

Who pays for credit card fraud depends on where and how it happened, but it's very rarely you. Federal law caps your liability at $50, and most issuers waive that entirely, while the issuer, the merchant or the payment network sorts out the loss behind the scenes based on rules like the EMV liability shift and card-not-present risk.

Report fraud immediately, follow up in writing if you want the FCBA's full protections, and don't assume a fraudulent charge will hurt your credit score once it's resolved.


  • Fair Credit Billing Act (FCBA): The federal law that caps consumer liability for unauthorized credit card charges at $50 and sets billing-dispute rights and timelines.

  • Zero-liability policy: A voluntary card issuer policy that reduces your liability for unauthorized charges from the federal $50 cap down to $0.

  • Card-not-present transaction: A purchase made without the physical card being shown, like an online or phone order, which shifts more fraud liability to the merchant.

  • EMV liability shift: The card-network policy that assigns fraud liability to whichever party, bank or merchant, didn't use available chip-card technology.

  • Chargeback: A transaction reversal initiated after a cardholder disputes a charge, which can result in the merchant losing the sale amount.

  • Electronic Fund Transfer Act (EFTA): The federal law governing debit card and other electronic transfer liability, with tiered caps based on how quickly you report fraud.

Summary generated by AI, verified by MoneyLion editors

Summary generated by AI, verified by MoneyLion editors


Here are quick answers to common questions about who pays for credit card fraud.

It depends on how the card was used. For in-person transactions where the merchant used chip-enabled technology, the bank usually absorbs the loss. For online or phone transactions, where the physical card isn't present, the merchant typically bears the cost. In either case, the liability doesn't usually shift to you.

In most cases, yes. Once you report unauthorized charges, your issuer removes the disputed amount, often as a temporary credit, while it investigates. If the charges are confirmed as fraudulent, that credit becomes permanent.

You're generally not responsible for more than $50, and most issuers waive even that under a zero-liability policy. However, if you delay reporting the fraud, or if the issuer can show the delay caused additional losses, you may face somewhat more liability.

Generally, no, once the fraud is reported and removed, it shouldn't affect your credit score. Fraud you ignore or don't get corrected, especially if it leads to a missed payment or a new account you didn't open, is what can actually hurt your score.

For the person committing the fraud, yes, jail time is a real possibility; federal sentencing data shows the vast majority of convicted offenders are sentenced to prison. There's no criminal liability for the victim.

Rudri Bhatt Patel, CFHC™
Written by
Rudri Bhatt Patel, CFHC™
Rudri Bhatt Patel is NACCC Certified Financial Health Counselor™, chief personal finance and retirement expert, writer, editor and educator with over 20 years of experience. She joined GOBankingRates in 2024 as a Senior SEO Financial Writer. - Twenty years ago, she pivoted from her work as an attorney to a freelance writer. She has a JD from Southern Methodist University School of Law, a MA in English and BA in Political Science from the University of Texas at Dallas. - Rudri also holds a Financial Health Counselor Certification, accredited by the National Association of Certified Credit Counselors (NACCC). - Her work and expert advice has been featured in USA Today, MarketWatch, The Washington Post, Forbes, Web MD, Business Insider, Bankrate, Vox and other national outlets.
Joe Evans, CFHC™
Edited by
Joe Evans, CFHC™
Joe is a NACCC Certified Financial Health Counselor™, writer, editor and personal finance expert. He has been part of the GOBankingRates editorial team since 2024. He brings a decade of experience as a digital SEO-focused editor, writer and journalist. Before coming on board the GOBankingRates team, he wrote, edited and created content for niche digital readers in industries like legal cannabis, consumer software, automotive, sports, entertainment, and local news, just to name a few. Joe also holds a Financial Health Counselor Certification™, accredited by the National Association of Certified Credit Counselors (NACCC). When he's not creating and editing financial content, he's spending time with his wife, family and pets, watching sports or enjoying some outdoor activity in beautiful Northeastern Pennsylvania.
Advertisement
Advertisement

This material is for informational purposes only and should not be construed as financial, legal, or tax advice. You should consult your own financial, legal, and tax advisors before engaging in any transaction. Information, including hypothetical projections of finances, may not take into account taxes, commissions, or other factors which may significantly affect potential outcomes. This material should not be considered an offer or recommendation to buy or sell a security. While information and sources are believed to be accurate, MoneyLion does not guarantee the accuracy or completeness of any information or source provided herein and is under no obligation to update this information. For more information about MoneyLion, please visit https://www.moneylion.com/terms-and-conditions/.

MoneyLion does not provide, own, control or guarantee third-party products or services accessible through its Marketplace (collectively, “Third-Party Products”). The Third-Party Products are owned, controlled or made available by third parties (the "Third-Party Providers"). Should you choose to purchase any Third-Party Products, the Third-Party Providers’ terms and privacy policies apply to your purchase, so you must agree to and understand those terms. The display on the MoneyLion website, app, or platform of any of a Third-Party Product or Third-Party Provider does not-in any way-imply, suggest, or constitute a recommendation by MoneyLion of that Third-Party Product or Third-Party Financial Provider. MoneyLion may receive compensation from third parties for referring you to the third party, their products or to their website.