PanicStation.org
UK USA
uk Money & financial emergencies card added to wallet alert • digital wallet notification • apple pay card added • google wallet card added • google pay card added • card added to unknown device • unauthorised digital wallet • suspicious bank notification • possible card token fraud • payment card compromised • one-time passcode scam • verification code request • bank app approve decline prompt • wallet provisioning attempt • card details stolen • unexpected wallet verification • new device payment alert • card linked without permission • card used via phone wallet • contactless wallet fraud

What to do if…
you get a notification that your card was added to a digital wallet you do not use

Short answer

Don’t approve anything. Freeze/lock the card and contact your bank (use the number on the back of your card, your bank’s app, or dial 159 if you’re unsure you’re speaking to your real bank).

Do not do these things

  • Don’t tap links in the notification/email/text to “secure” your account — open your banking app or type the bank’s website address yourself.
  • Don’t call any phone number provided in the message — use your bank’s app, the number on the back of your card, or 159.
  • Don’t share any one-time passcodes (OTPs), “verification codes”, or in-app approval prompts with anyone — even if they claim to be your bank, Apple, Google, or the police.
  • Don’t keep using the card “until you see fraud” — a digital wallet can be used immediately.
  • Don’t hand your card to a “courier” or anyone offering to “collect it for investigation”.
  • Don’t post screenshots of the alert online (they can include identifying details).

What to do now

  1. Assume it might be real until you’ve checked safely.
    Ignore the notification itself. Open your banking app or online banking and look for:

    • a request to approve/decline adding your card to a wallet
    • any “digital wallet” / “device” / “token” section (some banks show this)
      If you see an approval request and it wasn’t you: decline.

  2. Freeze/lock the card immediately.
    Use your banking app’s freeze/lock feature. If you can’t, call your bank using a trusted route:

    • the number on the back of your card, or
    • your bank’s in-app calling/help, or
    • 159 (if your bank supports it)

  3. Tell the bank “my card was added to a digital wallet I don’t use” and ask for a wallet-token removal.
    Ask them to:

    • remove/disable any digital wallet token(s) linked to your card (they may call it a “token”, “device”, or “provisioned wallet”)
    • block and replace the card number if they believe your card details were compromised
    • confirm whether any wallet verification occurred and how (SMS code, in-app approval, etc.)

  4. Check transactions and pending authorisations right now.
    In the app, review recent spending and any pending items. If anything is unfamiliar, report it as fraud immediately through your bank’s fraud flow or by phone.

  5. Secure the account that might have been used to add it (only via official settings).
    If the alert mentions Apple Pay/Apple Wallet or Google Wallet/Google Pay and you have an Apple/Google account:

    • change your password
    • enable two-factor authentication
    • review signed-in devices and sign out of any you don’t recognise
      If the card appears in a wallet you control, remove it.

  6. If your phone is missing or you think someone has access to it, treat it as higher risk.
    Lock down the phone (screen lock) and use your phone account tools (e.g., Find My / device security) to restrict payment ability, then tell the bank you suspect device access.

  7. If you shared a code or approved an “add to wallet” prompt, say that clearly.
    Tell the bank you entered a code / approved a prompt (if you did). Ask them to cancel wallet tokens and reissue the card.

  8. Make a quick record.
    Note the time/date, what the alert said (Apple/Google), and what the bank confirmed they did (card frozen, token removed, new card issued).

  9. If it was a scam message or you lost money, report it.

    • England, Wales, Northern Ireland: report via Report Fraud (online any time, or by phone during published hours).
    • Scotland: report to Police Scotland via 101.

What can wait

  • You don’t need to decide now whether to replace your phone, close your whole bank account, or change every password you have.
  • You don’t need to contact Apple/Google support before you’ve frozen the card and spoken to your bank.
  • You don’t need to argue with the sender/caller. Stop contact and use trusted channels.

Important reassurance

This alert commonly appears in card-fraud and phishing situations. Freezing the card and getting your bank to remove any wallet token(s) is the right first move and usually stops further harm quickly.

Scope note

This is first steps only: immediate containment, safe verification, and getting the right organisations involved. Later recovery steps depend on whether any transactions happened and what your bank finds.

Important note

This guide is general information, not legal or financial advice. If anything feels uncertain, slow down and use trusted routes (your bank’s official app, the number on the back of your card, or 159) before taking any action.

Additional Resources
Support us