PanicStation.org
UK USA
us Money & financial emergencies retailer called about an order • high-value order you didn’t place • unexpected order verification call • unauthorized online purchase • fake customer support call • order confirmation you didn’t make • card-not-present fraud • retail account takeover • shipping address changed • scam order cancellation request • asked for one-time code • payment card used without permission • suspicious merchant contact • phishing about an order • package sent in your name • unexpected purchase alert • “did you place this order” • high value transaction check

What to do if…
a retailer contacts you to confirm a high-value order you did not place

Short answer

Assume the contact could be a scam and don’t confirm anything. Verify the order using the retailer’s official website/app or a known phone number, and if any payment might be involved, contact your card issuer/bank right away.

Do not do these things

  • Don’t click links or call back numbers provided in the message/voicemail.
  • Don’t give one-time passcodes, verification codes, or approve “security prompts” in your banking app.
  • Don’t share full card details, PINs, or online banking login information.
  • Don’t pay a “verification fee” or “cancellation fee” to stop an order.
  • Don’t let someone pressure you with urgency (“we can only cancel in the next 5 minutes”).
  • Don’t ignore it if you see any matching transaction on your accounts.

What to do now

  1. Stop and verify independently. Say: “I can’t verify anything on an incoming call/message. I’ll contact the company through its official customer service channel.”
  2. Check if the order is real (without using their link).
    • Open the retailer’s app or type the retailer’s web address yourself.
    • Check order history, saved payment methods, saved addresses, and account profile changes.
  3. Contact the retailer through a trusted route.
    • Use the contact info from the retailer’s official website/app or a past known-genuine receipt/email.
    • Ask them to cancel the order, remove any unfamiliar addresses or payment methods, and flag the account for suspected fraud.
    • Ask them what they can do using minimal identifying info (avoid giving sensitive data).
  4. Check your bank/card accounts immediately.
    • Look for pending charges or new transactions that match the retailer/order value.
    • If you see anything suspicious or you’re unsure, call the number on the back of your card (or your bank’s official number) and ask to block/replace the card and start the dispute process.
  5. Secure the accounts that can reset everything else.
    • Change your email password first (email is often the password-reset doorway).
    • Then change the retailer password and enable multi-factor authentication where available.
    • Review the retailer account for new addresses/phone numbers and remove anything you don’t recognize.
  6. If you suspect identity theft beyond this one order, start the official recovery track.
    • Use the US government identity theft recovery site run by the FTC (IdentityTheft.gov) to make a report and get a step-by-step recovery plan.
  7. Add credit protections (pick the fastest option you can manage).
    • Consider placing a credit freeze (generally stronger) or a fraud alert with the three nationwide credit bureaus: Equifax, Experian, and TransUnion.
    • Check your credit reports at AnnualCreditReport.com (this is the official site). If you’re worried about ongoing misuse, you can check reports more frequently (including weekly) to spot changes sooner.
  8. Reduce delivery-related risk if shipping is involved.
    • If you can see legitimate tracking info from your own account, ask the retailer (via verified channels) whether they can stop shipment or return to sender.
    • If a package shows up that you didn’t order, you can often refuse delivery. If someone appears to collect a package and you feel unsafe, don’t engage—call local authorities (911 if there’s immediate danger).

What can wait

  • You don’t need to decide right now whether to pay for monitoring services or identity products.
  • You don’t need to contact every agency at once; focus first on retailer cancellation and bank/card protection.
  • You don’t need to file a police report unless your recovery plan or financial institution specifically recommends it for documentation, or there’s an immediate safety risk.
  • You don’t need to change every password today—prioritize email + retailer + banking.

Important reassurance

Retailers sometimes reach out because their systems flagged something unusual—so the contact isn’t proof you did anything wrong. It’s reasonable to refuse to verify details on an inbound call/message and to insist on contacting them through official channels.

Scope note

These are first steps to prevent losses and limit repeat attempts. If you find new accounts, repeated transactions, or ongoing misuse of your identity, follow the official identity theft recovery plan after you’ve secured payments and logins.

Important note

This guide is general information, not legal or financial advice. If money has been taken or accounts are at risk, your bank/card issuer and the retailer are the best immediate points of contact.

Additional Resources
Support us