PanicStation.org
UK USA
uk Money & financial emergencies card details compromised • card details stolen • unauthorised card payments • small test charges • penny test transactions • card not present fraud • mystery merchant descriptor • micro charges on statement • suspicious pending authorisation • verification charge confusion • continuous payment authority • recurring card payment scam • unknown subscription charge • bank fraud phone call • fake bank text message • asked for one-time passcode • card added to digital wallet • replace bank card • freeze card in app • stop future card payments

What to do if…
your card details are compromised and you keep seeing small “test” charges

Short answer

Freeze/lock the card immediately, then call your bank/card provider using a trusted number to cancel and replace the card and stop further payments.

Do not do these things

  • Don’t ignore “small” charges — they can be a test before bigger fraud.
  • Don’t assume it’s a harmless “verification” hold if you don’t recognise the merchant — treat unknown activity as fraud until your provider confirms otherwise.
  • Don’t click links or call numbers from unexpected texts/emails about “fraud” — use the number on the back of your card or inside your official banking app.
  • Don’t share one-time passcodes, PINs, or online banking passwords with anyone.
  • Don’t hand your card to a “courier” or anyone who turns up to “collect it”.

What to do now

  1. Freeze/lock the card and stop using it.
    Use your banking app to freeze/lock the card straight away. If you can’t, don’t make further payments with it.

  2. Call your card provider’s fraud team (trusted number only).
    Use the number on the back of the card or inside the official app/website. Say you’re seeing repeated small “test” charges and you want:

    • the card cancelled and replaced (new number)
    • the suspicious merchant(s) blocked
    • them to check for any pending authorisations and advise what will drop off vs what is actually captured

  3. Ask them to remove any “tokenised” versions of the card too.
    Ask the provider to check whether your card was added to any digital wallet (on any device) and to revoke/suspend any wallet tokens and other stored-card tokens linked to the compromised card.

  4. Report each transaction you don’t recognise as unauthorised and ask about the refund timing.
    Generally, for unauthorised card payments your provider should refund you promptly (and no later than the end of the next business day after they become aware), unless they reasonably suspect fraud by you. Ask them to confirm what they’ll refund now vs later, and how they’ll contact you.

  5. If it’s a recurring payment, cancel it via the card provider and withdraw consent.
    Tell them clearly: “I withdraw consent for this recurring card payment and want it stopped.” Ask them to:

    • cancel the continuous payment authority/recurring card payment
    • block future attempts from that merchant
    • confirm what to do if the merchant retries

  6. Lock down the accounts that might have stored the card details.
    After the card is frozen and you’ve spoken to the provider:

    • check email and banking alerts for “card added” / “new device”
    • remove saved card details from major shopping/subscription accounts you control
    • change passwords for your email and any account that stores payment details; turn on two-step verification

  7. Save a quick record.
    Screenshot or note the dates, amounts, and merchant descriptors for every “test” charge (and whether it shows as pending or completed). Keep any texts/emails you received.

  8. If you want an official crime report reference, use the right reporting route for where you live.

    • England, Wales, Northern Ireland: report fraud via Action Fraud (including the official Report Fraud service).
    • Scotland: report to Police Scotland (101).

What can wait

  • Updating legitimate subscriptions with the new card details (do this after the new card arrives and the fraud has stopped).
  • Checking your credit file for knock-on identity fraud (important later, not in the first 10 minutes).
  • Formal complaints/escalations unless your provider refuses to act.
  • Deciding whether to switch banks.

Important reassurance

Repeated tiny charges are a common fraud pattern. Freezing the card and speaking to the provider’s fraud team quickly is usually enough to stop escalation and get the refund/dispute process moving.

Scope note

These are first steps to stop further card payments and start the refund/dispute process. If this expands into identity fraud (new accounts, letters you didn’t request), you may need additional protections.

Important note

This is general information for urgent first steps, not legal or financial advice. Processes can vary by provider, so follow your card issuer’s fraud team instructions and keep your notes.

Additional Resources
Support us