If you suspect a card was compromised, contact the issuer through a verified channel promptly. You do not need to prove how the information was stolen before reporting an unauthorized transaction or suspicious terminal.
01
Record observations without investigating the equipment
The FBI describes skimming as theft of card information through compromised payment equipment. If a terminal looks unusual or a card is not returned, stop using it and contact the responsible institution. Do not dismantle equipment or confront a suspected offender. Note location, approximate time and what you observed without photographing other customers’ card details.
02
Separate the transaction record from assumptions
List unfamiliar transactions, amounts, dates and merchant descriptions exactly as they appear. A descriptor you do not recognize may have an explanation, so ask the issuer to investigate rather than publicly accusing a business of theft. Follow its process for securing or replacing the card and reporting disputed activity. Applicable protections and deadlines depend on the account and jurisdiction.
- Use the issuer’s official app or a known contact number.
- Keep report references and correspondence.
- Review related accounts for additional suspicious activity.
03
Protect the business response if customers raise concerns
For example, a customer may report an unfamiliar charge after visiting your store. Escalate to the payment provider and authorized security contact, preserve the relevant transaction record and avoid claiming there was no compromise before review. A factual acknowledgment and a clear investigation route are more useful than speculation about a customer’s behavior.
Frequently asked questions
Will a bank automatically reimburse every disputed charge?
Do not assume an outcome. Report promptly and follow the institution’s process; eligibility and obligations need case-specific review.
Should I share my PIN with someone offering to investigate?
No. Verify the organization independently and never give a PIN or authentication code to an unexpected caller.
Continue with your next step
Related guides on this topic
Sources and policies
Check the current policy before submitting a request.
You do not have to figure out the next step alone.
Share the URLs and explain your concern. We will review the context and explain which options are worth assessing.
Request a confidential reviewOr call (307) 429-2531Educational information, not legal advice. Outcomes depend on the facts and decisions made by third parties.