Credit Card Fraud: What to Do If Your Card Is Used Without Permission (UK)

By QuidRadar Team · Updated 30 October 2026

Seeing a payment you don't recognise on your credit card is unsettling, but credit cards give you strong protection against fraud. Acting quickly matters most. Here's what to do in the first hour, what the rules say about getting your money back, and how to cut the risk of it happening again.

Key takeaways

  • Contact your card provider straight away using the number on the back of your card, in your app, or by calling 159.
  • For unauthorised credit card payments, the FCA says your provider can only refuse a refund if you, or someone with your consent, authorised it or had your card.
  • Refunds for unauthorised payments should normally arrive by the end of the next business day after you report them.
  • Report fraud to Report Fraud (0300 123 2040), which replaced Action Fraud in December 2025. In Scotland, call Police Scotland on 101.
  • If you were tricked into paying a scammer by card, Section 75 or chargeback may help.

This is general information, not financial advice.

What to do straight away

  1. Freeze or block your card in your banking app if you can. Most providers let you do this instantly.
  2. Call your card provider using a number you trust: the one on the back of your card, on your statement or in your app. The Government's Stop! Think Fraud campaign also points to 159, a phone service that connects you safely to many UK banks.
  3. Tell them which transactions you don't recognise. Your provider will cancel the card and send a new one.
  4. Change passwords for your online banking and any shopping accounts that store your card, especially if you think your details were taken online.
  5. Report the fraud to Report Fraud online or on 0300 123 2040 (England, Wales and Northern Ireland), or Police Scotland on 101.

Never give your PIN, full password or one-time passcodes to anyone who calls you, even if they say they're from your bank or the police. Report Fraud notes that banks and the police won't ask for your PIN as a "security check". Caller ID can be faked.

Your right to a refund

Unauthorised payments

An unauthorised payment is one you didn't make or agree to, such as a stolen card being used or your details used online by someone else.

The FCA's guidance says:

  • Tell your provider as soon as you notice, and within 13 months of the payment date.
  • The refund should be in your account by the end of the next business day, including any interest or charges caused by the payment.
  • If your card was lost or stolen and you didn't report it, you may have to pay up to £35, but not if you couldn't have noticed the loss or theft, or if the provider was at fault.

Credit cards have an extra layer of protection. For unauthorised payments on a credit card, the FCA says your provider can only refuse a refund if you, or someone acting for you, authorised the payment, or if the person who used the card had it with your consent. Using your PIN or password isn't, on its own, proof that you authorised a payment.

What if the provider says no?

Ask for the decision in writing and make a formal complaint. If you're not happy with the final response, or you've had no answer after eight weeks, you can take it to the Financial Ombudsman Service, which is free to use.

If you were tricked into paying a scammer

This is different from an unauthorised payment, because you made the payment yourself. For example, you bought something from a fake website or paid a fake holiday company.

If you paid by credit card:

  • Section 75 of the Consumer Credit Act may make your card provider jointly responsible if the item cost more than £100 and up to £30,000. See Section 75 Explained: Your Credit Card Purchase Protection.
  • Chargeback is a card scheme process your provider can use to ask the seller's bank for the money back. It covers amounts under £100 too.

Contact your card provider as soon as you realise. Keep emails, screenshots, receipts and any messages with the scammer.

The Payment Systems Regulator's reimbursement rules for authorised push payment scams cover bank transfers by Faster Payments and CHAPS, not card payments. That's one reason paying by credit card is often safer when you're buying from someone you don't know.

Spotting card fraud early

Report Fraud lists signs to watch for:

  • Your card is declined when you're sure you're within your limit.
  • Transactions you don't remember, including small "test" payments.
  • Cash withdrawals from places you haven't been.

Turning on app notifications for every transaction makes these much easier to spot. Check your statement each month too, even if you pay by Direct Debit.

Checking for identity fraud

If someone had enough of your details to use your card, they may try to open credit in your name. It's worth:

  • Checking your credit reports with Experian, Equifax and TransUnion for applications or accounts you don't recognise. See How to Improve Your Credit Score in the UK: 10 Practical Steps.
  • Considering Cifas Protective Registration, a paid service that flags your name for extra checks when someone applies for credit.
  • Watching for post about accounts you didn't open.

How to protect your card

  • Keep your card in sight when paying, and cover the keypad when entering your PIN.
  • Shop on sites you know, and check web addresses carefully before entering card details.
  • Use mobile wallets such as Apple Pay or Google Pay where you can. They use a device-specific token instead of your card number.
  • Don't save card details on sites you rarely use.
  • Be wary of unexpected calls, texts and emails asking you to "confirm" details or move money.
  • Destroy old cards by cutting through the chip and magnetic strip.

Why a credit card can be safer than a debit card

With a debit card, money leaves your current account immediately, and you wait for a refund. With a credit card, the disputed money is the lender's, not yours, while it's investigated. Section 75 also covers eligible credit card purchases. If you want more purchase protection when shopping, see How to Choose a Credit Card in the UK: A Step-by-Step Guide and compare cards on compare all cards.

Frequently asked questions

Will I get my money back if my credit card is used fraudulently?

In most cases of unauthorised use, yes. The FCA says credit card providers can only refuse if you or someone acting for you authorised the payment, or the person using the card had it with your consent. Report it as soon as possible.

Does credit card fraud affect my credit score?

Fraudulent transactions that are reported and refunded shouldn't harm your score. If someone opened credit in your name, ask the lender and the credit reference agencies to correct your report.

Should I report card fraud to the police?

Yes. In England, Wales and Northern Ireland, report it to Report Fraud online or on 0300 123 2040. In Scotland, call Police Scotland on 101. Your card provider may also give you a reference number.

What is 159?

159 is a phone number that connects you to your bank's fraud team, so you can check whether a call or message is genuine. Not every bank is covered, so use the number on your card if 159 doesn't work for yours.

How long do I have to report a fraudulent payment?

Report it straight away. The FCA says you should tell your provider within 13 months of the payment date, or you may not be able to claim.

This is general information, not financial advice. If you think you're the victim of fraud, contact your card provider immediately.

Sources