Card fraud: unknown charges and stolen card details

A charge of a few pounds at an unknown merchant, then another, larger one. You bought nothing, yet the money is leaving your account. Card fraud often begins this way, quietly, because your card details are circulating without your knowledge.

How your card details get stolen

Your card number, its expiry date and its security code are enough to pay online. Criminals collect them through several channels.

Skimming involves copying the card track at a tampered cash machine or terminal, sometimes paired with a tiny camera that films your PIN. Online, fake merchant sites and booby-trapped payment pages harvest your details while you think you are settling a purchase. Finally, a data breach at a legitimate retailer can expose thousands of numbers in one go.

The role of 3-D Secure

For an online payment, your bank often triggers strong authentication: a confirmation in the app, a code, sometimes biometrics. This is 3-D Secure. As long as a criminal cannot clear this step, it is hard for them to pay with your number alone.

This is precisely why some scams try to get you to approve the notification yourself, by posing as your bank. Keep this principle in mind: you only approve a transaction if you have just started it yourself.

Watching your statements, the habit that changes everything

Most fraud is spotted too late, because accounts are not checked regularly. Get into the habit of reviewing your transactions every week and turning on payment notifications in your app. An unusual charge spotted within hours is far easier to dispute than a debit discovered a month later.

Be wary of small amounts too: a criminal sometimes tests a card with a tiny charge before attempting a large transaction.

Freezing the card and getting refunded

As soon as you notice a transaction you did not authorise, act without delay.

1. Freeze the card, through your app or the official number printed on the back of it.
2. Report every fraudulent transaction to your bank, in writing if possible, listing dates and amounts.
3. File a report with the police: this is often required to support your dispute.

You have a right to a refund for unauthorised transactions. When the fraud is reported within the time limits and no gross negligence can be attributed to you, the bank must refund the sums taken without your consent. Keep all supporting documents, as they make the process smoother.

In short

A compromised card is not a lost cause: watching your statements catches the anomaly quickly, freezing the card stops the bleeding, and your right to a refund protects you. The decisive reflex remains speed.

To report the facts and get official guidance, visit Action Fraud. And to place this fraud among the other traps targeting your accounts, return to the guide Banking scams.