What to do if…
you are charged for an expensive purchase you did not make but it is still “pending”
Short answer
Lock/freeze the card immediately and contact your card issuer or bank (use the number on the back of the card or the official app) to report an unauthorized pending transaction and ask how to prevent it from posting.
Do not do these things
- Don’t assume a pending charge is harmless — it can still post/settle.
- Don’t call phone numbers or click links included in texts/emails about the charge.
- Don’t share screenshots publicly (they can expose account identifiers).
- Don’t unfreeze the card to “test” it or keep shopping as normal.
- Don’t wait for the monthly statement if it’s a large amount.
- Don’t delete alerts/emails/texts showing the transaction details.
What to do now
- Do a quick check for a common authorization hold (but don’t talk yourself out of action).
Hotels, rental cars, gas stations, and some online orders can place pending authorizations. If you can’t clearly match it to something you did, treat it as unauthorized. - Lock/freeze the card now and secure digital wallets.
Lock the card in your bank/issuer app. If you use Apple Pay/Google Pay/other wallets, remove the card from any device you don’t recognize (or ask the issuer to disable wallet tokens tied to the card). - Call the issuer/bank (official number only) and use the key words.
Say: “This charge is unauthorized and it’s pending.” Ask them to:- block the card and issue a replacement,
- decline/void the authorization if possible and prevent it from posting,
- add fraud notes and set up alerts (text/email/push) for new attempts.
- If it’s a debit card and you need the money, say so.
A pending hold can reduce your available balance. Ask what they can do to reduce harm (for example, whether the hold can be released, and whether they can help you avoid fees or failed essential payments). Sometimes only the merchant can release a hold — your bank should tell you what’s realistic. - Document what you see right now.
Screenshot or write down the amount, date/time, merchant descriptor, location (if shown), and any transaction/reference number, plus when you first noticed it. - Secure likely entry points.
- Change your email password first and enable multi-factor authentication.
- Then update passwords for shopping accounts you’ve used recently and your issuer login if you suspect compromise.
- Watch for order confirmations, shipping notices, or “new login/device” alerts.
- If you can safely identify the real merchant, try to cancel/void.
Use a verified website/app you navigate to yourself (not the descriptor phone number). Ask them to cancel the order and void the authorization. - If it posts, dispute it immediately using your issuer’s process.
Ask your issuer exactly how they want you to report it (app/phone/written dispute) and what to submit. If they won’t help through normal support channels, a CFPB complaint is an optional escalation.
What can wait
- You don’t need to file a police report today unless your bank asks or you see broader identity theft.
- You don’t need to do a full identity-theft workflow unless there are additional red flags (multiple accounts affected, mail changes, new credit you don’t recognize).
- You don’t need to close every account right now — start by locking the card and securing email and key logins.
Important reassurance
A big, unfamiliar pending charge is genuinely scary — and it’s easy to feel urgency and confusion at the same time. Locking the card and calling the issuer quickly is the most effective “damage control” move, even before anything posts.
Scope note
These are first steps to prevent an unauthorized pending charge from turning into a completed loss and to reduce knock-on harm (like funds being tied up). If it posts, you may need to follow your issuer’s formal dispute steps and provide documentation.
Important note
This is general information, not legal or financial advice. Protections and procedures differ for credit vs debit cards and by issuer. In general, U.S. federal rules limit liability for unauthorized credit card use (often referenced as up to $50), and unauthorized debit/EFT situations have time-sensitive reporting rules—so report as soon as you notice anything suspicious and follow your issuer’s instructions.
Additional Resources
- https://consumer.ftc.gov/articles/using-credit-cards-and-disputing-charges
- https://www.consumerfinance.gov/ask-cfpb/how-do-i-get-my-money-back-after-i-discover-an-unauthorized-transaction-or-money-missing-from-my-bank-account-en-1017/
- https://www.consumerfinance.gov/rules-policy/regulations/1026/12
- https://www.consumerfinance.gov/rules-policy/regulations/1005/6
- https://www.fdic.gov/consumers/consumer/news/october2018.html
- https://www.identitytheft.gov/