PanicStation.org
UK USA
uk Money & financial emergencies card issuer flagged purchase • suspicious transaction alert • card payment declined fraud check • bank says verify identity now • urgent identity check request • fraud department call • bank text about suspicious spend • unexpected verification code • one-time passcode request • approve notification scam worry • card security check message • card temporarily frozen • issuer wants extra checks • possible bank impersonation • vishing bank call • phishing link from bank • send id photo to bank • upload id for card check • card added to digital wallet

What to do if…
your card issuer flags a purchase as suspicious and demands immediate identity checks

Short answer

End any unexpected contact and verify it’s really your card issuer by contacting them through a trusted route (the number on the back of your card or your banking app). Don’t share one-time passcodes or approve prompts you didn’t start.

Do not do these things

  • Don’t stay on an incoming call just because they sound convincing or “urgent”.
  • Don’t read out a one-time passcode, app code, or card-reader code to anyone.
  • Don’t click a link in a text/email to “verify now” unless you independently confirm it’s genuine.
  • Don’t send photos/scans of ID or a “selfie” by email, text, or messaging apps because someone asked you to.
  • Don’t install any remote-access/screen-sharing app or let anyone “talk you through” steps on your phone.
  • Don’t share your full PIN, online banking password, or full security details.
  • Don’t move money to a “safe account” or hand over cards/cash to anyone because of this message/call.
  • Don’t assume the phone number shown is real (caller ID can be spoofed).

What to do now

  1. Stop and separate “verification” from “contact”. If this is a call, say you’ll call back and end it. If it’s a text/email, don’t reply or tap anything yet.
  2. Contact your issuer via a trusted route (choose one):
    • Call the number on the back of your card, or use the contact option inside your official banking app.
    • If you’re unsure about a call claiming to be your bank, you can hang up and dial 159 (it won’t call you). If 159 doesn’t connect you to your bank, use the number on your card instead.
  3. Confirm what’s actually happened. Ask:
    • Is there a flagged/declined transaction right now?
    • Has my card been temporarily blocked/frozen by you?
    • What identity check do you need, and what will you not ask me to share?
  4. Do identity checks only through official channels you reached safely. If they need ID documents, ask for the option to upload in the banking app/secure portal you opened yourself, or to complete checks in-branch (if your provider offers it). Avoid sending ID by email or via a link you didn’t initiate.
  5. Lock down the card while you verify. If your app allows it, freeze/lock the card until you’ve completed verification on the trusted channel.
  6. Treat unexpected codes/prompts as a red flag. If you received a passcode or a push notification you weren’t expecting, do not approve it. Tell the issuer you got an unsolicited code/prompt and ask whether someone is trying to log in or add your card to a digital wallet.
  7. Check recent transactions (last 7–30 days) and act on anything you don’t recognise. If anything looks unauthorised, report it on the verified call and ask what they’re doing next (replacement card, new card number, dispute steps).
  8. If you think this was a scam attempt, make quick reports (optional but useful):
    • Forward scam texts/calls to 7726 (free) to help your mobile provider investigate.
    • Forward suspicious emails to report@phishing.gov.uk.
    • To report fraud/cyber crime: Report Fraud (England/Wales/Northern Ireland) online, or call 0300 123 2040. In Scotland, report to Police Scotland via 101.

What can wait

  • You don’t need to decide right now whether it’s “definitely fraud” or “definitely legitimate” — your priority is moving the conversation onto a trusted channel.
  • You don’t need to write a full timeline immediately. Just note the basics (time, what they asked for, any reference numbers/messages).
  • You don’t need to contact the merchant unless your issuer specifically tells you to.

Important reassurance

Fraud flags are common and often mean your issuer’s systems are working. Feeling rattled is normal — scams rely on urgency, so slowing down and calling back safely is a strong move.

Scope note

These are first steps only to reduce harm and avoid irreversible mistakes. If there are unauthorised transactions or signs of identity misuse, you may need additional follow-up after things are stable.

Important note

This is general information, not legal, financial, or professional advice. Processes vary by issuer and account type. If anything feels off, end contact and use the number on your card or your official banking app.

Additional Resources
Support us