I gave a scammer my debit or credit card number. What now?

Do this in the next 10 minutes

1. Call the card company

   Use the number on the back of the card or the bank's official app. Say: "I gave my card number to a scammer. Please cancel this card and issue a new number."

2. Lock the card in the app while you wait

   Many banks let you freeze a card with one tap. It's a good stopgap, but still call.

3. Ask about charges already pending

   Read through recent charges with the agent. Small charges you don't recognize count too.

4. Get a case number

   Write down the name, time, and number. You'll need them if you have to dispute later.

Credit card vs. debit card: how much could you owe?

These limits come from federal law, as explained by the FTC. They apply to charges you didn't make or approve.

• Credit card, only the number was stolen (you still have the card): You aren't responsible for unauthorized charges.
• Credit card, card lost or stolen: At most $50, and $0 if you report it before it's used.
• Debit card, only the number was stolen: You aren't responsible for unauthorized charges if you report them within 60 days after your statement is sent.
• Debit card lost or stolen, reported within 2 business days: At most $50.
• Debit card lost or stolen, reported after 2 business days but within 60 days of the statement: Up to $500.
• Debit, reported more than 60 days after the statement: You could lose all the money taken.

Free recovery checklist

Get the step-by-step plan in your inbox

Email addressEmail me the checklist

The printable C.A.L.M. checklist and who to call. No sales pitch. Or open the checklist now (PDF).

Follow up in writing

The FTC recommends a letter after your call. Include your account number, when you noticed the problem, and when you first reported it. Keep a copy and your call notes.

Send credit card disputes to the billing-dispute address on your statement. Send debit disputes to the bank's address for errors. Both are usually on the back of the statement or on the bank's website.

If you were tricked into making the payment yourself

The protections above cover charges you didn't make. If a scammer talked you into paying them, the card company may see it as a payment you approved. That doesn't mean give up. Call, explain you were deceived, and ask for a dispute. Ask about both card types. See can you get money back? for each payment type.

After the new card arrives

• Update automatic bills and subscriptions that used the old number.
• Check your statements every week for the next two months.
• Turn on purchase alerts in your bank's app, if offered.
• Be wary of anyone who calls offering "credit card loss protection" or asks you to "confirm" your number. The FTC warns this is a scam, since federal law already protects you.
• If you also typed in your Social Security number or date of birth, freeze your credit. See I gave a scammer my Social Security number.
• Report the scam at ReportFraud.ftc.gov.

How card numbers usually get stolen

Most often it's a fake text or email about a package, a toll, or a renewal. The FTC says fake package delivery texts were the most reported text scam of 2024, and toll-text scammers are after card and even Social Security numbers. If you're not sure about a message next time, a screenshot to Call My Owl gives a verdict in about five seconds.

Questions people ask