When Your Credit Card Issuer Calls About a Suspicious Charge, What You Should Never Reveal

If your phone rings and someone says they are calling from your credit card company’s fraud team, it can sound urgent and believable. The caller may claim a $2,400 purchase was attempted on your account and say they need to confirm your identity before stopping it. They might know your name, correctly identify your bank, and even mention the last four digits of your card. But one warning sign stands out: you did not make the call. Scammers often pose as financial institutions, and a convincing fraud alert can be the first step in a scheme to take over your account.

A matching phone number does not confirm the caller

Your caller ID may show your bank’s name or even the same customer service number printed on your card. That does not prove the call is real. Criminals can fake caller ID using spoofing, and the Federal Trade Commission says they may also use real personal details to make the call seem authentic. Knowing your address, bank name, or part of your account number is not proof that the person on the line works for your financial institution. If someone says your account is in danger, it is safer to call the bank yourself using a verified number.

Do not repeat a verification code

One of the riskiest requests is for a one-time security code sent to your phone. A caller may say the code is needed to cancel a fraudulent purchase or prove you are the cardholder. In reality, the scammer may be trying to log in to your account, reset a password, or approve a transaction. The FTC warns that these codes should never be shared with someone who contacts you unexpectedly. If anyone asks for one, end the call and reach your card issuer through a number you verified on your own.

Never give out your full card details

A real financial institution already has your account records. Even so, an unsolicited caller who asks for your full card number, expiration date, and three-digit security code should raise immediate concern. Those details can be used to make unauthorized purchases or support other fraud. A scammer who already knows part of your information may simply be trying to collect the rest. Do not reveal complete payment information just because the caller says they are investigating suspicious activity.

Your banking password should stay private

Some scammers push further by claiming they need temporary access to your online banking account. They may ask for your username, password, or answers to security questions. Others may try to persuade you to install remote-access software so they can supposedly remove fraudulent charges. Giving them access can expose other accounts, stored credentials, and private financial records. No unexpected fraud review should require turning over your banking login or control of your device.

Be wary of any request to move money

One especially aggressive scam involves a caller saying your account has been compromised and your money must be moved right away. They may tell you to transfer funds to a “safe” account, buy gift cards, or send money through a payment app. Those are not legitimate ways to protect a credit card account. The FTC treats requests to move money for protection as a major sign of a financial impersonation scam. A real bank can investigate suspicious activity without asking you to send your savings elsewhere.

If the charge is real, there is still a safe way to respond

Not every fraud warning is fake, and card issuers do reach out about suspicious transactions. The safest step is to hang up and contact your card company yourself using its official app or the number on your physical card. Ask whether the transaction really exists and whether your account should be locked or replaced. Review recent activity for other unfamiliar charges and update your login information if the bank finds a compromise. Acting on your own lets you handle real fraud without giving control to an impersonator.

Credit cards come with fraud protections

Federal law offers protections against unauthorized credit card charges, though the rules and reporting deadlines matter. Under the Fair Credit Billing Act, liability for unauthorized credit card use is generally limited to $50, and many issuers offer stronger zero-liability protections. The Consumer Financial Protection Bureau also explains credit card rights and billing safeguards. Debit card transactions are handled differently, so fast reporting is especially important when a checking account is involved. Keep records of any disputed charges and follow your issuer’s instructions for reporting suspected fraud.

If you already shared information, act quickly

If you gave a suspicious caller a verification code, password, or card information, contact your financial institution right away. Tell them exactly what you shared so the fraud team can judge the risk. Depending on the situation, the issuer may suggest replacing your card, changing passwords, or protecting other accounts. Keep an eye on your statements and consider a fraud alert or credit freeze if identity theft is a concern. You can also report the incident at ReportFraud.ftc.gov and use IdentityTheft.gov for recovery help.

The safest response starts with hanging up

A call about suspicious credit card activity can be stressful, especially when the caller appears to know your account. Criminals count on that pressure to get information people would normally protect. Never give out verification codes, passwords, full card details, or access to financial accounts during an unexpected call. Instead, contact your card issuer independently and confirm whether the transaction is legitimate. Taking control of the process can protect your money without slowing a real fraud investigation.