PanicStation.org
UK USA
us Money & financial emergencies card details compromised • card info stolen • unauthorized card charges • small test charges • penny test transactions • card not present fraud • unknown merchant descriptor • micro charges on statement • pending authorization confusion • verification charge confusion • credit card billing error • written dispute within 60 days • debit card reg e timing • bank fraud phone call • fake fraud alert text • asked for verification code • card added to digital wallet • replace compromised card • stop recurring card charges • identity theft first steps

What to do if…
your card details are compromised and you keep seeing small “test” charges

Short answer

Lock the card and call the card issuer/bank using a trusted number to replace the card, block the merchant, and start disputes immediately.

Do not do these things

  • Don’t ignore “small” charges — they’re often a test before larger fraud.
  • Don’t assume it’s a harmless “verification” hold if you don’t recognize the merchant — treat it as fraud until your issuer confirms otherwise.
  • Don’t click links or call numbers from unexpected “fraud alert” texts/emails — use the number on the back of your card or the official app.
  • Don’t share one-time passcodes, PINs, or online banking credentials with anyone.
  • Don’t move money “to protect it” because a caller told you to.

What to do now

  1. Lock/freeze the card and stop using it.
    Use your issuer’s app or website to lock/freeze the card if available.

  2. Call the issuer’s fraud department (trusted contact only).
    Use the number on the back of the card or inside the official app/website. Tell them you’re seeing repeated small “test” charges and ask them to:

    • close and replace the card (new number)
    • block the suspicious merchant(s)
    • tell you which items are pending authorizations vs completed charges

  3. Ask them to disable any tokenized versions of the card.
    Ask the issuer to check whether the card was added to a digital wallet (on any device) and to revoke/suspend wallet tokens and other stored-card tokens tied to the compromised card.

  4. Dispute every charge you don’t recognize, and keep a written trail.

    • Dispute in the app/phone right away.
    • If it’s a credit card, also send a written billing-error dispute so it reaches the issuer within 60 days after the first statement showing the charge. Keep copies and proof you sent it.

  5. If it’s a debit card (or the charges hit your checking account), report fast and don’t miss statement deadlines.
    Debit/EFT protections can depend on how quickly you notify the bank. Report as soon as you notice, and make sure the bank is notified no later than 60 days after the statement was sent that shows the unauthorized transfer (ask the bank what they need from you).

  6. Stop any “recurring” version of the fraud at the issuer level.
    If the descriptor looks like a subscription/recurring payment, say: “These are unauthorized recurring charges — I need a stop/block on this merchant and any future payments.” Ask what will happen if the merchant retries.

  7. Lock down likely access points.
    After the card is locked and you’ve contacted the issuer:

    • check email and issuer alerts for “card added” / “new device”
    • remove saved payment methods from major shopping/subscription accounts you control
    • change passwords (start with email), and turn on multi-factor authentication

  8. If you see signs of broader identity theft, start the federal identity theft process.
    If there are other warning signs (new accounts, credit inquiries, missing mail), create an IdentityTheft.gov report and then place a fraud alert or credit freeze.

What can wait

  • Updating legitimate subscriptions with the new card number (do it after the old card is closed and disputes are underway).
  • Deep-diving every place you’ve ever used the card — focus on stopping charges first.
  • Choosing credit monitoring services.
  • Filing extra reports beyond your issuer dispute unless you see wider identity theft.

Important reassurance

This “tiny test charge” pattern is common. Acting quickly — locking the card and contacting the issuer — usually stops escalation and gets the dispute process moving.

Scope note

This guide covers first steps to stop additional charges and begin disputes. If it expands into identity theft, you may need credit freezes/alerts and additional paperwork.

Important note

This is general information for urgent first steps, not legal advice. Steps and timelines can vary by issuer and whether the card is credit or debit, so follow your issuer’s instructions and keep records of what you report.

Additional Resources
Support us