Credit Card Stolen? What to Do, Step by Step, and What You Owe

If your credit card is stolen, lock it in your issuer's app, report it to the issuer immediately and flag charges you did not make. Federal law caps your liability for unauthorized credit card charges at $50, or $0 if you report the loss before the card is used, and Visa and Mastercard zero-liability policies can remove even that. If your ID or Social Security number went with the card, add a fraud alert or credit freeze too.

What should you do first if your credit card is stolen?

Lock the card, then report it to the issuer; the rest can wait an hour. Work through these steps in order.

1. Lock or freeze the card in your issuer's app. Most issuer apps let you block new purchases in seconds. This is a stop-gap if you are not yet sure whether the card is lost or stolen.
2. Report it to the issuer. The FTC advises calling, or reporting through the mobile app, as soon as possible. If the card is gone, find the number on the issuer's website or a paper statement. The issuer will close the card number and send a replacement.
3. Review recent transactions with the representative. Point out every charge you do not recognize so it is handled as unauthorized. Pending charges count too.
4. Follow up in writing. The FTC recommends sending a letter or secure message with your account number, when you noticed the card was missing and when you reported it. Keep a copy.
5. Update anything that bills the old card. Subscriptions, phone and utility autopay, ride-hailing apps and digital wallets will all need the new number.
6. Take stock of what else was taken. A stolen wallet often means other cards, a driver's license or checks. Report each card to its issuer.
7. Protect your identity if documents were taken. If your ID or Social Security number is gone, place a fraud alert or credit freeze, covered below.
8. Check your credit reports. Look for accounts or inquiries you do not recognize. Reports from all three bureaus are free every week at AnnualCreditReport.com.
9. Keep watching your statements. The FTC suggests checking statements and reporting any fraudulent charge as soon as you see it, for several months afterward.

How much are you liable for if your credit card is stolen?

For a credit card, no more than $50, and nothing at all if you report the card missing before anyone uses it. Regulation Z limits your liability for unauthorized use to the lesser of $50 or the amount charged before you notified the issuer, and you can notify it by phone, in person or in writing. If only your card number was stolen and the card itself is still with you, the FTC says you are not responsible for charges you did not authorize.

Card network policies usually take the remaining $50 off the table:

• Visa Zero Liability says you will not be held responsible for unauthorized charges made with your account or account information. It excludes certain commercial card transactions, anonymous prepaid cards and transactions not processed by Visa. Visa says issuers replace funds taken through an unauthorized transaction within five business days of notification, but that credit can be withheld, delayed or limited for gross negligence, fraud, a delay in reporting or pending investigation.
• Mastercard Zero Liability covers unauthorized purchases in stores, online, by phone and by mobile device, as long as you used reasonable care to protect your card and promptly reported its loss or theft. It does not apply to commercial cards or unregistered prepaid cards such as gift cards.

Debit cards are a different story. They fall under the Electronic Fund Transfer Act, and your liability depends on how fast you report the loss:

There is also a practical difference. With a debit card, stolen money leaves your checking account while the bank investigates. With a credit card, you dispute a charge on money you have not yet paid. That is one reason to use a credit card for online shopping and travel. Our guide to comparing credit cards covers other protections worth checking.

Should you place a fraud alert or freeze your credit?

If only the card was taken, you usually need neither, because the issuer closes the stolen number. If your ID, Social Security number or other personal details went with it, place a fraud alert at minimum and consider a credit freeze. The three tools do different jobs.

Both fraud alerts and freezes are free. The CFPB says a freeze does not affect your credit scores, a bureau must place it within one business day of an online or phone request, and it must lift it within one hour when you ask online or by phone. You can freeze your file at Equifax, Experian and TransUnion. Remember to lift the freeze temporarily before you apply for new credit.

What if the thief opened new accounts in your name?

Treat it as identity theft and start at IdentityTheft.gov, the FTC's site, which builds a recovery plan based on your situation. From there, contact the fraud department of each company where an account was opened, dispute the fraudulent accounts with the credit bureaus, and consider an extended fraud alert, which lasts seven years. If the theft came through a scam call, text or email, you can also report it to the FTC at ReportFraud.ftc.gov.

Will a stolen credit card hurt your credit score?

Not by itself. Charges you report as unauthorized are not your debt, and replacing a card does not count as a late payment or a new application. A replacement card normally carries your account history forward, but ask the issuer if it plans to open a new account instead, since a brand-new account would be younger than the old one.

The one thing to watch is timing. If fraudulent charges are still on your balance when the statement closes, that higher balance can be reported before the charges are removed, which can briefly raise your utilization. Ask the issuer to remove disputed charges promptly and check your reports afterward. Our guide to understanding your credit score explains why balances matter.

What should you do if your card is stolen while traveling?

Report it exactly as you would at home, using the issuer's app or the phone number on its website for calls from abroad. Then switch to a backup card, ideally one on a different network kept in a separate bag, so one theft does not leave you without a way to pay. If you travel often, carrying at least one card that charges no foreign transaction fee keeps the backup from costing extra; see foreign transaction fees explained and our guide to travel credit cards.

How do you avoid the scams that follow a stolen card?

Never give a code, PIN or card number to someone who contacts you, even if they say they are your bank's fraud team. Scammers often follow a real theft with calls or texts that look official. Hang up and call the number on the back of your card or on the issuer's website instead.

• Turn on alerts for every transaction, so you see a fraudulent charge within minutes.
• Carry only the cards you need, and keep a list of each issuer's phone number somewhere other than your wallet.
• Treat calls asking you to "activate" or "verify" a replacement card with suspicion; our card activation hub lists official activation methods by issuer.
• Be wary of anyone who asks you to settle a debt or fix a fraud problem with gift cards. Our gift card hub covers how those scams work.