To prove credit card fraud, you need to show your card issuer that specific charges on your account were not authorized by you, and you need to do it through the channels and within the deadlines federal law sets out. That means calling the issuer the moment you spot a suspicious charge, following up in writing within 60 days, signing a fraud affidavit, and backing the whole thing with a paper trail: statements with the disputed charges marked, proof of where you actually were, a log of every call, and, where appropriate, a police report and an FTC identity theft report. Do those things and the Fair Credit Billing Act does most of the heavy lifting for you.
What Actually Counts as Evidence
Proving fraud is a documentation exercise. Card issuers investigate claims internally, and they resolve them faster and more favorably when you hand them a clean record. The pieces that matter:
- The statement itself, with each disputed transaction identified by date, amount, and merchant name.
- Anything that places you somewhere other than where the charge occurred: travel receipts, work timesheets, timestamped photos, transit records.
- A written log of every contact with the issuer, including the date, the representative’s name, what was said, and any case or reference number.
- Copies of emails, letters, and any forms you submit.
- A signed fraud affidavit from the issuer.
- Where relevant, a police report number and an FTC identity theft report.
None of this is optional if the dispute drags on or the issuer’s first decision goes against you. A dispute you can document is a dispute you can escalate.
Call the Issuer First, and Write It Down
The first call to your issuer’s fraud department does two jobs at once. It freezes or cancels the compromised card so no further fraudulent charges can post, and it opens the formal investigation. Write down the date and time of the call, the name of the representative, and the case or reference number they issue. That log is now part of your evidence.
Small test charges under $5 are a common early sign that a card has been compromised, since fraudsters often check whether a card works before running larger purchases. Unfamiliar merchant names, charges from cities you haven’t visited, and subscriptions you never signed up for are the other patterns to look for. Checking transactions weekly through the issuer’s app catches these faster than waiting for the monthly statement.
Send the Written Dispute Within 60 Days
The phone call freezes the card. The written dispute preserves your rights under the Fair Credit Billing Act. You have 60 days from the date the issuer sent the statement containing the fraudulent charge to notify them in writing, and the notice has to go to the address the issuer designates for billing inquiries, not the payment address. Your letter should include your name, account number, the specific charges you’re disputing, and why you believe they’re unauthorized.1Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors
Missing the 60-day window doesn’t automatically mean you owe the money, but it strips away the FCBA’s procedural protections and leaves you relying on the issuer’s discretion and the card network’s zero-liability policy. Don’t miss it.
The Fraud Affidavit
Most issuers will send you a fraud affidavit to complete. It’s a signed statement declaring that you didn’t authorize the disputed charges, and it typically asks for your account number, the list of contested transactions, and the date you discovered them.2Consumer Financial Protection Bureau. 12 CFR 1022.3 – Definitions The affidavit is often the single most important document in the file because it’s sworn. Fill it out carefully. Inconsistencies between what you write on the affidavit and what appears in your other documentation, like different dates or different transaction amounts, will slow the investigation and give the issuer a reason to push back.
Police and Federal Reports
Third-party reports strengthen a fraud claim, and in some situations they’re required to unlock certain protections.
File a police report with your local department if you suspect identity theft or know who committed the fraud. Some issuers and credit bureaus specifically ask for a police report number before granting an extended fraud alert or resolving certain disputes. The report doesn’t need to result in an arrest to be useful.
Report the fraud at IdentityTheft.gov. The FTC generates a personalized recovery plan and produces an official identity theft report that credit bureaus and card issuers will accept.3Federal Trade Commission. Report Identity Theft If the fraud was cyber-enabled, the FBI’s Internet Crime Complaint Center accepts reports as well.4Internet Crime Complaint Center. Internet Crime Complaint Center
Consider placing a fraud alert on your credit file at the same time. You only need to contact one of the three major credit bureaus; that bureau is required to notify the other two. An initial alert lasts one year. With an FTC identity theft report or a police report in hand, you can request an extended alert lasting seven years. A credit freeze goes further by blocking new accounts entirely, and by federal law bureaus must place a freeze within one business day of a phone or electronic request, at no cost.5GovInfo. 15 USC 1681c-1 – Identity Theft Prevention and Credit History Restoration
What the Issuer Has to Do
Once your written dispute lands, the issuer has to acknowledge receipt within 30 days and resolve the dispute within two complete billing cycles, capped at 90 days total.1Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors For a card on monthly billing, expect roughly 60 days. Most issuers post a provisional credit for the disputed amount during the investigation so the balance doesn’t sit on your account. If the investigation confirms fraud, the credit becomes permanent. If the issuer sides against you, it reverses the credit and sends a written explanation.
While the dispute is open, the issuer cannot report the disputed amount to the credit bureaus as delinquent. If the two of you still disagree after the investigation and the issuer decides to report it, it must also report that the amount is in dispute and give you the name and address of every party it’s reporting to.6GovInfo. 15 USC 1666c – Rights of Creditor – Reports by Creditor on Delinquent Amounts in Dispute Your credit score is protected while the fight is still live.
What You Actually Owe If You Prove It
Federal law caps your liability for unauthorized credit card charges at the lesser of $50 or the total charged before you notified the issuer, provided the issuer gave you notice of your potential liability and a way to report fraud.7Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card Every mainstream consumer card meets that condition, so the $50 ceiling is the legal floor for what you might owe.
In practice, most cardholders owe nothing. Visa’s zero-liability policy covers unauthorized transactions in stores, online, and on mobile devices.8Visa. Visa Zero Liability Policy Mastercard offers the same under its own policy.9Mastercard. Mastercard Zero Liability Protection Policy Both networks exclude certain commercial cards and anonymous prepaid products. For a personal Visa or Mastercard, proven fraud almost always means $0 out of pocket.
If the Issuer Denies Your Claim
Denials happen, and they aren’t always final. Ask for the specific reason in writing. Sometimes the problem is fixable, like a missing signature on the affidavit or a mismatched transaction date, and a corrected resubmission is enough.
If the issuer stands by its denial and you believe the charges were unauthorized, file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint. Include the key dates, amounts, and copies of your correspondence. The CFPB forwards the complaint to the company, which generally responds within 15 days, with up to 60 days for complex cases. You then have 60 days to review and respond to that response.10Consumer Financial Protection Bureau. Submit a Complaint Complaints enter a public database, and issuers take them seriously.
For larger disputed amounts, a consumer protection attorney is worth considering. The Fair Credit Billing Act lets consumers sue creditors who fail to follow the dispute procedures, and prevailing plaintiffs can recover actual damages plus attorney’s fees. The prospect of that fee-shifting alone often gets denied claims a second review.