What to do if…
you notice a transfer or payment pending that you did not authorise
Short answer
Lock the card/account immediately (in-app if possible) and contact your bank or card issuer’s fraud department right away to stop the pending transaction and secure your access.
Do not do these things
- Don’t assume “pending” means it will fix itself — treat it as urgent until the bank confirms what it is.
- Don’t click links or call numbers from texts/emails about the payment; use the number on the back of your card or your bank’s official app/website.
- Don’t share one-time codes, passcodes, or “verification” details with anyone who contacted you unexpectedly.
- Don’t send money to “verify” your account or move funds to a “safe account” because someone told you to.
- Don’t wipe your phone/computer or delete evidence yet; keep screenshots and messages.
What to do now
- Open the pending item and capture details. Screenshot or write down the amount, date/time, merchant/recipient name, and whether it’s a card charge, ACH, wire, P2P (for example, Zelle), or bill pay.
- Use your bank’s app to secure things immediately (if available).
- Lock/freeze the card.
- Turn off card-not-present or international transactions if your bank offers quick toggles.
- Review recent logins/devices and sign out of anything you don’t recognize.
- Call the bank/card issuer using a trusted number.
- Use the number on the back of the card, or your bank’s official app/website.
- Say clearly: “This is an unauthorized transaction and it is pending. Please block it and secure my account.”
- Ask for the specific action that matches the payment type.
- Card payment: ask them to block the authorization (if possible), issue a replacement card, and open a fraud dispute.
- ACH / bank transfer: ask for an immediate stop/reversal attempt and an “unauthorized electronic transfer” claim.
- Wire: ask about urgent recall/trace procedures (wires can move fast).
- P2P payment (for example, Zelle): report immediately. These transfers are often difficult or impossible to reverse once sent, but your bank can tell you what (if anything) can be done and can lock down access.
- Protect your timelines by reporting promptly.
- For unauthorized electronic transfers from a bank account, notify your bank as soon as possible and within 60 days after the statement reflecting the transfer was sent, to protect your rights under federal rules.
- For credit card billing errors, to protect certain rights you generally must send a written billing error notice to the card issuer within 60 days of the first statement showing the error, and send it to the address for billing inquiries (not the payment address).
- Change the “reset chain” first, then the bank.
- First: change your email password (and enable 2-step verification) so thieves can’t reset banking access.
- Then: change your bank/password manager passwords and update security questions (avoid real-answer questions where possible).
- If you suspect identity theft (not just one charge): file an identity theft report and lock down credit.
- Create a report and recovery plan at IdentityTheft.gov.
- Consider placing a fraud alert or credit freeze with the major credit bureaus if you see signs of broader compromise (new accounts, multiple attempts, mail missing, etc.).
- If the bank won’t act or you’re stuck in loops: submit a complaint to the Consumer Financial Protection Bureau (CFPB), keeping your timeline, screenshots, and any case/reference numbers together.
What can wait
- You don’t need to figure out exactly how it happened right now — focus on stopping the payment and securing access.
- You don’t need to contact the merchant/payee first; the bank’s fraud team is the priority while it’s pending.
- You don’t need to file multiple reports everywhere today; start with your bank/card issuer and IdentityTheft.gov if identity theft is likely.
- You don’t need to make big decisions (closing all accounts, changing banks) until the immediate risk is contained.
Important reassurance
A “pending” transaction can sometimes be stopped or blocked before it fully posts — and even when it posts, there are established dispute processes. Acting quickly and keeping a clear record improves your chances of a clean resolution.
Scope note
This is first steps only for the first minutes/hours. Next steps (investigations, provisional credits, and ongoing monitoring) depend on the payment type and your bank’s procedures.
Important note
This is general information, not legal advice. Rules and timelines vary by product (debit, credit, ACH, wire, P2P). If you’re unsure, report it immediately using your bank/card issuer’s official fraud channels.
Additional Resources
- https://www.consumerfinance.gov/rules-policy/regulations/1005/6
- https://www.consumerfinance.gov/ask-cfpb/how-do-i-dispute-a-charge-on-my-credit-card-bill-en-61/
- https://consumer.ftc.gov/articles/using-credit-cards-and-disputing-charges
- https://www.consumerfinance.gov/rules-policy/regulations/1026/13
- https://www.identitytheft.gov/
- https://www.consumerfinance.gov/complaint/