Someone ran a charge on your credit card that you never made. Your stomach drops, and then the practical question arrives: who pays for this? Federal rules give cardholders real protection, but how much protection you get depends heavily on timing and on how quickly you act.
What you may owe for unauthorized credit card charges
The Consumer Financial Protection Bureau, or CFPB, is the federal agency that writes and enforces many consumer finance rules. Its guidance says that if you report a lost or stolen credit card before anyone uses it, you cannot be held responsible for unauthorized charges on that card. The protection is strongest when your report comes before the first bad transaction. Once a thief has already started spending, the rules change.
If someone uses your card before you report it missing, the most you will owe for unauthorized charges on that card is $50. That is the federal ceiling. Many card agreements go further and say you are not responsible for those charges at all. Your own agreement is the document that tells you what your issuer promises, so it is worth reading before you need it. You can read the CFPB's full guidance on the lost or stolen credit card page.
A thief can also copy your account number without taking your physical card. In that case, you generally have no liability for the unauthorized use. The CFPB's guidance on hacked card data makes a similar point. If you take the right steps, you should not be responsible for unauthorized charges to a credit card even when your card data is stolen while the card itself stays in your wallet. The key phrase there is "take the right steps," and the next section explains what that usually involves.
Why timing and monitoring matter
Fraud does not always show up the day after a theft. Charges can appear months after your information was taken, which means a transaction you do not recognize may trace back to an old data breach rather than a recent loss. That delay can make a charge feel like a mystery. It also means a quiet statement month does not prove your information is safe.
The CFPB recommends checking your accounts often, even if you are not sure your information was compromised. Online access and mobile apps make that easy. If you still get paper statements, open them and read them closely instead of tossing them into a pile. Pay attention to unfamiliar merchant names, especially merchants in places you have never visited. Small charges deserve a second look too. Thieves sometimes run a small amount first to test whether a card still works before attempting larger purchases.
If something looks wrong, the CFPB's advice is to act quickly. Here is a simple order of operations that follows the official guidance:
- Contact your bank or card provider right away.
- If a thief has charged your credit card, ask to cancel the card and get a replacement before more transactions post.
- For debit cards, consider changing your PIN as an added precaution.
Speed matters because every day gives a thief another chance to use the account. A phone call that happens the same day is often easier than an explanation that comes weeks later.
Where the rules come from and how to check your agreement
The federal credit card rules sit in Regulation Z, which is part of Title 12 of the Code of Federal Regulations, or CFR. Section 1026.12 covers special credit card provisions, including limits on cardholder liability for unauthorized use. Section 1026.13 covers billing error resolution, which is the process for disputing errors on a statement. You can read the text of section 1026.12 directly on the CFPB website. The material used to prepare this article only showed the table of contents for these sections, so the exact rule language is not summarized here.
Your card agreement is the other place to look. It explains how your specific issuer handles unauthorized charges. You can usually find it on the card company's website, or you can search the CFPB's Credit Card Agreement Database. Read the section on unauthorized use while your card is still in good shape. That way you are not hunting for it in a hurry.
A few questions can make the review easier. When did you first notice the charge? Did you report the card lost or stolen before anyone used it? What do your agreement's terms say about unauthorized charges? Could the charge appear on a statement you have not reviewed yet and relate to an older theft? Write down your answers. They will help you if you need to talk with your card provider or a qualified professional about your situation.
What the available sources do not cover
The sources behind this article leave some important gaps. They do not explain how to file a dispute, what deadlines apply, or what documentation an issuer may ask you to provide. They also do not walk through the full billing error process under Regulation Z. The Federal Trade Commission, or FTC, has consumer pages on using credit cards and disputing charges, and those pages are the place to start for those steps. The material reviewed for this article did not include usable guidance from those pages, so this article does not summarize them.
The sources also do not confirm whether the $50 limit and the no-liability rules that apply to credit cards also cover debit cards or checking account transactions. Debit card protections are mentioned only briefly. Likewise, the sources do not explain how to report identity theft, what to do after a report, or whether you need to contact the credit bureaus. Finally, they do not say how an unauthorized charge affects a credit report or credit score, and this article does not predict any such outcome. If you are unsure how these rules apply to your account, check official sources or speak with a qualified professional.
Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.
