What to do if…
your card issuer flags a purchase as suspicious and demands immediate identity checks
Short answer
Treat it as potentially real or a scam: end any unexpected contact and verify by calling your issuer using the number on the back of your card or the official app. Don’t share verification codes or approve prompts you didn’t initiate.
Do not do these things
- Don’t keep talking just because they say it’s “urgent” or “your account will be closed.”
- Don’t read a one-time passcode/“verification code” to someone who contacted you.
- Don’t click “verify now” links in texts/emails until you’ve independently confirmed they’re legitimate.
- Don’t send photos/scans of ID or a “selfie” by email/text/message app because someone asked you to.
- Don’t install remote-access/screen-sharing apps or let anyone take control of your phone/computer.
- Don’t share your PIN, online banking password, or full security details.
- Don’t move money, buy gift cards, crypto, or “secure” funds because of a fraud alert.
- Don’t trust caller ID — it can be spoofed.
What to do now
- Break the urgency loop. If it’s a call, hang up. If it’s a text/email, don’t reply or click.
- Call your card issuer back using a trusted number.
- Use the number on the back of your card, or open your issuer’s official app and use the help/contact option there.
- If you reached them via a link or unknown number, stop and restart using the trusted number.
- On the verified line, confirm two things:
- “Is there a fraud alert or suspicious transaction on my account right now?”
- “What identity checks do you need, and what will you never ask me to share?”
- Do identity checks only through official channels you opened yourself. If they need ID documents, ask to complete it via the issuer’s app/secure portal you accessed independently, or another official method they provide. Avoid links you didn’t initiate.
- Lock down the card while you verify. If your app allows it, freeze/lock the card temporarily, then unfreeze once you’ve completed verification safely.
- Treat unexpected codes/prompts as a red flag. If you received a code or a push notification you didn’t request, do not approve it. Tell the issuer you got an unsolicited code/prompt and ask if someone is trying to log in or add your card to a digital wallet.
- Review recent transactions immediately. Check recent charges and pending authorizations. If anything is unauthorized, report it and follow your issuer’s dispute steps (replacement card/new card number, etc.).
- If you shared personal info, codes, or moved money, add these quick protections (optional but often worth it):
- Report the scam at ReportFraud.ftc.gov.
- If you suspect identity theft, go to IdentityTheft.gov to build a personal recovery plan.
- Consider placing a free credit freeze and/or a one-year fraud alert with the nationwide credit reporting agencies.
- If it was online/phishing/account-takeover related, consider a second report (optional):
- You can also report cyber-enabled fraud to the FBI’s Internet Crime Complaint Center (IC3).
What can wait
- You don’t need to prove whether it was a scam right now — your priority is switching to a verified contact method.
- You don’t need to contact the merchant unless your issuer specifically tells you to.
- You don’t need to make big account changes in panic. First confirm what happened and stop any ongoing access.
Important reassurance
Fraud flags are common and often mean your issuer’s systems are working. Feeling pressured or shaky is normal — slowing down and calling back safely is exactly the right move.
Scope note
These are first steps only to reduce harm and avoid irreversible mistakes. If there are unauthorized transactions or signs of identity theft, you may need additional follow-up after things are stable.
Important note
This is general information, not legal or financial advice. Policies and verification methods vary by issuer. If anything feels off, end contact and use the number on your card or the official app.
Additional Resources
- https://consumer.ftc.gov/consumer-alerts/2024/06/got-call-about-fraud-activity-on-your-bank-account-it-could-be-scammer
- https://reportfraud.ftc.gov/
- https://www.identitytheft.gov/
- https://www.ftc.gov/news-events/news/press-releases/2018/09/starting-today-new-federal-law-allows-consumers-place-free-credit-freezes-yearlong-fraud-alerts
- https://www.occ.gov/topics/consumers-and-communities/consumer-protection/fraud-resources/credit-card-and-debit-card-fraud.html
- https://www.ic3.gov/
- https://www.consumerfinance.gov/about-us/blog/beware-of-new-cfpb-imposter-scams/