PanicStation.org
UK USA
us Money & financial emergencies new authorised user on account • unknown authorized user added • someone added to my credit card • extra card i did not request • strange name on my account • authorized user appeared suddenly • credit card account takeover • new user on my credit account • suspicious account access • card account permissions changed • identity theft warning sign • unfamiliar person on card account • credit report shows new account • unexpected card issued • credit freeze after fraud • disputing unauthorized charges

What to do if…
a new authorised user appears on one of your credit accounts

Short answer

Assume account takeover: immediately contact the card issuer/lender’s fraud department to remove the user, cancel any extra cards, secure the account, and review/dispute any unauthorized activity.

Do not do these things

  • Don’t ignore it or “monitor for a few days” — speed matters for stopping charges and preventing new accounts.
  • Don’t confront whoever you suspect using your usual phone/email if you think your accounts could be compromised.
  • Don’t post screenshots of the account page (they often reveal sensitive details).
  • Don’t close the account before talking to the issuer — you may lose a clear dispute trail and replacement options.
  • Don’t apply for new credit “to test if it works” until you’ve locked your credit down.

What to do now

  1. Lock the account and secure your login.

    • Use the issuer’s app/site to lock/freeze the card if that feature exists.
    • Change the password for the card account and the email account tied to it (email is the reset key).
    • Turn on multi-factor authentication where offered. Check your email for unfamiliar forwarding rules or unknown devices.

  2. Call the card issuer/lender’s fraud department (use the number on the back of your card or their official site). While on the phone, ask them to:

    • Remove the authorized user and cancel any cards issued to them.
    • Confirm the date/time and method the user was added, and any related changes (address, phone, email, alerts, linked accounts, credit limit).
    • If there’s any sign of compromise, replace the card number (not just send a replacement card).
    • Add extra protections if available (for example a verbal password or heightened verification).

  3. Review charges and start disputes immediately.

    • Go line-by-line through recent transactions and mark anything you didn’t authorize.
    • Ask what can be stopped immediately (pending items, merchant blocks, card number replacement) and begin the issuer’s unauthorized charge/billing error process right away.
    • If the issuer requires anything in writing for certain disputes, ask exactly what they need and how to submit it securely.

  4. Check your credit reports for new accounts or inquiries (use the official channel).

    • Get your reports through AnnualCreditReport.com (the official federally authorized site) and look for: new accounts, unfamiliar addresses, hard inquiries, or name variations you don’t recognize.
    • Dispute any fraudulent entries with both the credit bureau and the company that furnished the information.

  5. Stop new credit from being opened in your name.

    • Place a credit freeze with each nationwide credit bureau: Equifax, Experian, and TransUnion (you must contact each one separately; it’s free).
    • If you can’t freeze immediately, place at least an initial fraud alert with one bureau (they notify the others).

  6. Create an official identity theft record (useful for disputes).

    • File an identity theft report at IdentityTheft.gov and save/download your report and recovery plan.
    • If a creditor asks for specific documentation, use the IdentityTheft.gov plan and keep a folder of case numbers, letters, and dates.

  7. Quick check for how they got in (to prevent re-entry).

    • Check your mobile carrier account for signs of SIM swap/number porting (unexpected texts about changes, loss of service, new login notices).
    • Update passwords for any financial apps that share the same email/password pair, starting with email, banking, and payment apps.

What can wait

  • You do not need to decide today whether to permanently close accounts or switch banks.
  • You do not need to purchase paid credit monitoring in the first hour to take effective protective steps.
  • You can wait to do a full “password reset of everything” once the issuer account, your email, and your credit files are protected.

Important reassurance

This is scary, but it’s a common pattern of fraud (and sometimes an issuer mistake) that issuers and credit bureaus handle every day. Acting quickly (issuer fraud team → credit reports → freeze/alert → IdentityTheft.gov report) usually limits damage and creates a clean paper trail.

Scope note

This guide covers first steps to stabilize the situation and reduce immediate harm. Longer disputes, documentation requests, and credit-file corrections may take follow-up with the issuer, bureaus, and (sometimes) formal complaints.

Important note

This is general information, not legal advice. If you suspect ongoing access, prioritize securing your issuer account and email, and contact the issuer’s fraud department immediately.

Additional Resources
Support us