If your debit or credit card is stolen, use the card issuer’s official app to lock it if that option is available, then contact the issuer immediately and report the theft. Do not wait to see whether the thief tries to use it.
Review recent transactions, identify anything you did not authorize, and ask the issuer to replace the card. Keep the report number, follow any written dispute instructions, and update automatic payments after the replacement arrives.
The difference between debit and credit matters. A stolen debit card gives someone access to money in your bank account, and your potential responsibility for unauthorized transfers can increase when reporting is delayed. Credit card losses are generally limited more strongly under federal law, but you should still act quickly.
A temporary card lock is useful while you search the sofa cushions. Once you know the card was stolen, treat it as stolen.
Report it.
What to do in the first 15 minutes
You do not need to complete every recovery step at once. Start with the actions that can prevent more transactions.
- Lock or freeze the card through the official banking app, if available.
- Call the issuer using the number in the app, on a statement, or on its verified website.
- Tell the issuer the card was stolen rather than merely misplaced.
- Review recent and pending transactions.
- Report every transaction you did not make or authorize.
- Ask whether the card, PIN, digital wallet tokens, or underlying account need to be replaced.
- Write down the date, time, employee name, and case number.
The FTC advises consumers to call or use the issuer’s mobile app and report a lost or stolen credit, ATM, or debit card as soon as possible. Unauthorized transactions completed after you report the loss generally are not your responsibility under federal law.
Use an official contact method
A thief who steals your card may also trigger fake fraud alerts designed to collect your login information, PIN, or one-time verification code.
Do not call a phone number from an unexpected text message. Do not click a link saying your account has been locked.
Open the banking app yourself, type the issuer’s verified website address, or use a number from a previous statement. IdentityTheft.gov recommends using a phone number or website address you already know is genuine rather than following links in unexpected messages.
Be clear that the card was stolen
If you tell the bank that the card is temporarily missing, it may place only a temporary lock on it.
If you know someone took it, say:
“My card was stolen. Please block it permanently and replace it.”
Also explain whether your wallet, phone, driver’s license, checkbook, or written PIN was stolen. The issuer’s response may be different when the thief has more than one piece of account or identity information.
A card lock is not the same as reporting the theft
Many mobile banking apps let you lock a card with one button. This is useful when you think the card may be at home, in your vehicle, or inside another bag.
A lock should not become a reason to delay a formal report.
When a temporary lock makes sense
Use it immediately when:
- You cannot find the card
- You may have left it at a store
- You want to stop transactions while contacting the bank
- You need a few minutes to check your wallet or home
When the card should be replaced
Ask for a replacement when:
- You know it was stolen
- Someone may have photographed it
- The PIN may have been seen
- An unauthorized transaction has appeared
- The card was recovered from an untrusted person or place
A thief does not need to keep the physical card forever. They may copy the number, expiration date, and security code before returning or discarding it.
Finding the card later does not make those details private again.
Review the account while speaking with the issuer
Look through recent, pending, and declined transactions.
Do not focus only on large purchases.
Check for small test transactions
A thief may begin with a small purchase to see whether the card works before attempting a larger transaction.
Look for:
- Small unfamiliar purchases
- ATM withdrawals
- Online transactions
- Charges from another city or country
- Several declined attempts
- Digital wallet transactions
- Cash transfers or cash-like transactions
A $2 charge is still worth reporting when you did not authorize it.
Ask other account users before disputing a purchase
On a joint account, another cardholder may recognize a merchant that looks unfamiliar.
A restaurant, fuel station, hotel, app, or small retailer may also appear under its parent company’s name.
Check quickly, but do not spend several days investigating while the card remains active. If nobody recognizes the charge, include it in the report.
Check more than one account
If the stolen wallet contained several cards, contact every issuer separately.
One bank cannot cancel a card issued by another company.
Also review any checking account connected to the stolen debit card and every credit account connected to cards in the wallet.
Debit card theft requires especially fast action
A debit card draws money from your deposit account. An unauthorized withdrawal can reduce the money available for rent, groceries, utilities, and other bills while the bank investigates.
Federal Regulation E uses reporting timelines that can affect your potential responsibility for unauthorized transfers made with a lost or stolen debit card.
Report within two business days
If you notify the bank within two business days after learning that the debit card or access code was lost or stolen, your potential liability is generally limited to the lesser of $50 or the amount of unauthorized transfers made before you reported it.
That does not mean you will automatically lose $50. Many banks provide protections that go beyond the federal minimum.
It means you should not wait.
Waiting can increase the possible loss
If you wait more than two business days, your potential liability can rise to as much as $500 when the bank can show that earlier notice could have prevented additional unauthorized transfers. Further losses may become possible when activity shown on a statement is not reported within the applicable 60-day period.
Here is the practical version:
- Notice the card is stolen on Monday
- Report it immediately on Monday
- Do not decide to “keep an eye on the account” until the weekend
Your quick report can stop later withdrawals and preserve stronger legal protections.
What if you still have the debit card?
Sometimes the card is still in your wallet, but its information was copied and used online or loaded into another payment method.
When the physical card was not lost or stolen, CFPB guidance says to notify the bank promptly and no later than 60 days after the statement showing the unauthorized transfer was sent. Reporting later can expose you to losses from additional transactions that occur after the 60-day period.
Do not use 60 days as a waiting allowance.
Report the transaction as soon as you see it.
Credit card theft has different protections
A stolen credit card does not immediately remove money from checking. The thief uses the card issuer’s credit line, and you dispute the unauthorized charges.
That does not make theft harmless. It can still interfere with available credit, automatic payments, travel reservations, and your ability to use the account.
Report the card before it is used
If you report the credit card missing before any unauthorized use, federal law does not allow the issuer to hold you responsible for later unauthorized charges.
Federal liability is generally capped at $50
If someone uses the card before you report it missing, the most you generally owe under federal law for unauthorized use is $50. Many card agreements provide zero liability, which is more protective than the federal maximum.
Check the issuer’s current agreement and fraud policy.
Even with zero-liability language, you still need to report the theft and cooperate with the investigation.
Credit card disputes should be documented
Call the issuer immediately to report unauthorized transactions.
To preserve federal billing error rights, the CFPB advises sending a written billing error notice within 60 calendar days after the issuer sent the statement on which the disputed charge first appeared. Send it to the billing dispute address, which may be different from the address used for payments.
Include:
- Your name
- The account number or last four digits
- The unauthorized transaction date
- The transaction amount
- The merchant name
- A statement that you did not make or authorize it
- The case number from your phone report
Keep a copy and proof of delivery.
Ask how the investigation will work
Do not end the call with only “We will look into it.”
Ask what happens next.
Questions for a debit card investigation
- Has the stolen card been permanently canceled?
- Which transactions are included in the claim?
- Do I need to submit written confirmation?
- When will the investigation begin?
- Will provisional credit be provided?
- Can I use the account while the claim is open?
- Will automatic bank payments continue?
- Do I need a new checking account number?
After receiving notice of an unauthorized electronic transfer, a financial institution generally has 10 business days to investigate. When it needs additional time, Regulation E may allow a longer investigation if the institution follows rules that can include providing provisional credit and giving the consumer access to those funds during the investigation.
Questions for a credit card investigation
- Has the card been canceled and replaced?
- Are the charges marked as disputed?
- What amount must I pay while the dispute is open?
- Is written notice required?
- Where should I send it?
- Will interest or fees related to the disputed amount be removed?
- When should I expect the decision?
When a proper written billing error notice is received, you generally do not have to pay the disputed charge or related charges while the issuer investigates, but you remain responsible for paying the undisputed portion of the bill on time.
Keep a simple theft record
Create one note or folder containing:
- Date and approximate time of theft
- Where the card was last seen
- Date and time the issuer was contacted
- Name or identification of the representative
- Case or claim number
- Transactions reported
- Replacement card delivery estimate
- Letters, emails, and screenshots
- Police report number, if applicable
Stress makes small details surprisingly easy to forget.
Decide whether the card or the whole account needs changing
A stolen card does not always mean the underlying bank or credit card account must be closed.
Usually, the issuer cancels the card number and sends a replacement connected to the existing account.
A replacement card may be enough
Replacing the card may solve the problem when:
- Only the physical card was stolen
- The bank has blocked its number
- No checking account details were exposed
- No wider account takeover occurred
Ask about a new bank account number when more information was stolen
A new checking account may be worth discussing when the thief also obtained:
- Checks containing the routing and account numbers
- Online banking credentials
- Account statements
- Your phone while the banking app was unlocked
- Information allowing access through another payment service
Changing a checking account number creates additional work. Payroll, automatic bank debits, bill payments, and transfers may all need updating.
Do it when the risk justifies the disruption, not automatically and not reluctantly.
Do not close a credit card impulsively
A replacement card can usually preserve the existing credit account while blocking the stolen card number.
Closing the entire account may affect your available credit, rewards, account history, and automatic payments. Ask the issuer whether replacing the card is sufficient before requesting account closure.
Replace the PIN when it may be exposed
Tell the bank if the thief may have seen or obtained your debit card PIN.
This includes situations where:
- The PIN was written in the wallet
- The theft happened shortly after an ATM visit
- Someone watched you enter it
- Your phone contained an unsecured note with the number
- Unauthorized ATM withdrawals appeared
Use the bank’s approved method for choosing a new PIN.
Do not reuse a PIN based on your birthday, phone number, street address, or another number found in the stolen wallet.
Remove the stolen card from digital wallets
A replacement card does not mean you should ignore phones, watches, tablets, browsers, and payment apps.
Ask the issuer whether the card’s digital payment tokens have been suspended.
Check every device
Review:
- Mobile wallets
- Smartwatches
- Payment apps
- Retailer accounts
- Food delivery apps
- Ride-sharing services
- Browser-stored payment methods
If your phone was also stolen, tell the bank and payment providers. CFPB guidance recommends notifying the bank or payment provider when a phone containing a payment app is lost or stolen.
Secure a stolen phone
Use the device provider’s remote-locate and remote-lock features when available.
Change passwords for:
- Online banking
- Payment apps
- Your mobile carrier account
- Any password manager accessible from the phone
Your email deserves immediate attention because it may be used to reset financial account passwords.
Update automatic payments after the replacement arrives
A new card will usually have a different number, expiration date, and security code.
Some recurring payments may continue. Others may fail.
Do not guess which companies will receive updated details.
Make a recurring payment list
Review recent statements for:
- Streaming services
- Phone and internet
- Insurance
- Gym memberships
- Software subscriptions
- Childcare
- Transport apps
- Utility payments
- Online retailers
The CFPB advises customers receiving a replacement card with a new number to update automatic payments linked to that card.
Prioritize essential payments
Update insurance, utilities, transportation, childcare, and other necessary services before less urgent subscriptions.
A failed movie subscription is annoying.
A failed insurance premium may create a more serious problem.
Watch for payments that continue unexpectedly
Replacing the card does not necessarily cancel your contract with a merchant.
If you no longer want a subscription, cancel it through the company’s stated process. Changing the card is not a reliable cancellation strategy.
Protect access to money while waiting for a debit card
A stolen credit card removes one borrowing method.
A stolen debit card may remove your main way to reach your own money.
Ask about immediate alternatives
Your bank may offer:
- A temporary card at a branch
- A replacement added to a digital wallet
- Cardless ATM access
- Cash withdrawal with identification at a branch
- Expedited card delivery
Availability and fees vary. Ask before paying for rushed delivery.
Protect upcoming bills
If unauthorized withdrawals reduced the account balance, list payments due before the investigation or provisional credit is completed.
Contact the bank about:
- Overdraft fees caused by the theft
- Returned automatic payments
- Late fees connected to missing funds
- Temporary access to provisional credit
Also contact essential bill providers before the due date when a payment may fail.
Explain the problem and ask what short extension or alternative payment method is available.
Take additional steps when the whole wallet was stolen
A wallet may contain enough information for problems beyond card transactions.
Consider what else was taken.
Driver’s license or identification
Contact the issuing state agency and follow its replacement process.
A thief with your name, address, photograph, and date of birth may attempt other forms of identity fraud.
Social Security card or number
A missing Social Security card creates a wider identity theft risk than a stolen payment card.
Use IdentityTheft.gov to create a recovery plan based on what was taken.
Checks
Contact the bank immediately when blank or completed checks were stolen.
The card replacement will not prevent someone from using the routing and account information printed on a check.
Account passwords or recovery information
Change affected passwords and recovery settings.
Start with email and financial accounts. Use unique passwords and multi-factor authentication.
Consider a credit freeze when identity information was stolen
A stolen debit or credit card alone does not automatically mean someone can open a new credit account in your name.
The risk increases when the thief also has your driver’s license, Social Security number, tax documents, or other identifying information.
What a credit freeze does
A credit freeze restricts access to your credit report, which can make it harder for an identity thief to open a new credit account in your name.
Freezes are free to place and remove through Equifax, Experian, and TransUnion. They do not prevent someone from using an existing stolen card, so the issuer still needs to be contacted immediately.
What a fraud alert does
A fraud alert asks businesses checking your credit to take additional steps to verify your identity.
It can be useful when you believe identity information was exposed but do not want to freeze the reports.
A freeze generally provides the stronger restriction.
Decide whether to make a police report
Call emergency services when the theft involved violence, threats, or immediate danger.
For a non-emergency theft, report it through the appropriate local police process when the circumstances support doing so.
A police report may help document the event
Record:
- Where and when the theft occurred
- Which cards and documents were taken
- Unauthorized transactions
- Descriptions of the property
- Relevant witnesses or video locations
The card issuer may not require a police report for every stolen card claim. Still, it may become useful when the wallet contained identity documents, several accounts were affected, or a larger identity theft problem develops.
Do not delay the card report while waiting for police
Contact the issuer first.
You can provide the police report number later if needed.
Watch for follow-up scams
After a theft, you may be more willing to believe a message claiming to come from the bank’s fraud team.
Scammers use that stress.
The bank does not need your PIN
Do not tell an incoming caller your PIN, password, or full one-time code.
A scammer may say the code is needed to cancel a transaction. The code may actually authorize a new login, wallet setup, or transfer.
Do not move money to a “safe account”
A caller may claim the stolen card exposed your bank account and instruct you to transfer the balance somewhere safe.
End the call and contact the bank through an official number.
Legitimate fraud support does not protect your money by asking you to send it to a stranger’s account, cryptocurrency wallet, or payment app.
Be careful with replacement card messages
A fake delivery text may claim that a fee must be paid or your address must be confirmed before the replacement card can arrive.
Check delivery details through the issuer’s official app or customer service.
What to do if the issuer rejects your claim
Read the decision carefully.
Ask why the transaction was considered authorized and request the documents the institution relied on, where applicable.
Check whether information is missing
The issuer may need:
- Written confirmation
- A signed dispute form
- A list of individual transactions
- Proof that the card was reported stolen
- Additional identity verification
Send requested documents through the issuer’s secure process and keep copies.
Escalate the issue inside the institution
Ask for:
- A supervisor
- The fraud department
- The billing error department
- A formal appeal or reconsideration
- A written explanation
Submit a complaint when necessary
The CFPB accepts complaints involving checking and savings accounts, credit cards, prepaid cards, money transfers, and other consumer financial products. The complaint is generally sent to the company for a response.
Include a clear timeline, copies of correspondence, transaction details, and the resolution you are requesting.
How to prepare before a card is ever stolen
A little preparation makes a stressful event much easier to manage.
Save official issuer contact details
Keep a secure list showing:
- Issuer name
- Card type
- Last four digits
- Official fraud number
- Where the account is accessed online
Do not store full card numbers, PINs, and security codes in an unprotected note.
Turn on transaction alerts
Useful alerts include:
- Every ATM withdrawal
- Every online purchase
- Transactions above a chosen amount
- International transactions
- New device logins
- Contact detail changes
An alert can reveal card use before the monthly statement arrives.
Carry only the cards you need
If you use two cards regularly, carrying seven creates more calls and replacements after a stolen wallet.
Leave unnecessary cards in secure storage.
Keep a backup payment method separately
While traveling, do not keep every card in the same wallet.
A backup card stored securely elsewhere can cover food, transport, and accommodation while the stolen cards are being replaced.
Common mistakes after a card is stolen
Waiting to see whether the thief uses it
Your report can stop later transactions and preserve stronger legal protections.
Using only the temporary lock
A stolen card should usually be permanently canceled and replaced.
Calling a number from a suspicious text
Use the official app, statement, or verified website.
Checking only large transactions
Small purchases may be used to test the card.
Assuming replacing the card cancels subscriptions
Update essential recurring payments and cancel unwanted services directly.
Ignoring the stolen phone
A phone may provide access to digital wallets, email, banking apps, and password resets.
Closing the entire credit account immediately
Ask whether replacing the card is enough before closing a long-standing account.
Throwing away case numbers and correspondence
Keep one organized record until every transaction and fee is resolved.
Frequently asked questions
Should you lock or cancel a stolen card?
Lock it immediately if the app allows it, then report the theft and ask the issuer to cancel and replace it.
A temporary lock is better suited to a card that may be misplaced rather than one known to be stolen.
Will the bank refund money stolen through a debit card?
Federal protections may limit your responsibility for unauthorized electronic transfers, but reporting deadlines matter. Notify the bank immediately, complete its dispute process, and provide any requested written confirmation.
Are credit cards safer than debit cards after theft?
Credit card theft generally does not remove money directly from checking, and federal liability for unauthorized credit card use is generally capped at $50, with many issuers offering zero-liability policies. Debit card protections can depend more heavily on fast reporting.
How long does a replacement card take?
Delivery times vary by issuer and location.
Ask about standard delivery, expedited delivery fees, branch-issued temporary cards, and access through a digital wallet.
Will your PIN remain the same?
The issuer decides whether a new PIN is required or whether you may choose one.
Ask for a new PIN when the old one may have been exposed.
Do you need to change every automatic payment?
Review every payment connected to the stolen card. Some may continue and others may fail after replacement.
Update essential services using the new card details and monitor future statements.
Should you cancel a stolen credit card account?
Usually, replacing the card number is enough.
Ask the issuer whether the broader account was compromised before closing it. Closing the account can affect rewards, recurring payments, available credit, and account history.
What if a stolen card is returned?
Do not reactivate or use it after the issuer has canceled it.
Destroy it securely once the bank confirms that it is no longer valid.
What if you notice theft while overseas?
Use the issuer’s international contact number, report the card immediately, and ask about emergency replacement or cash access.
Contact every affected issuer and keep a secure backup payment method separate from the stolen wallet.
Does a stolen card mean your identity was stolen?
Not necessarily.
The risk is greater when identification, your Social Security number, checks, statements, or an unlocked phone were also stolen. Use IdentityTheft.gov for a recovery plan when personal information may be misused.
The bottom line
Act immediately when a debit or credit card is stolen.
Lock the card through the official app if possible, contact the issuer through a verified channel, report every unauthorized transaction, and ask for a replacement. Save the case number and complete any written dispute requirements.
Be especially quick with a stolen debit card. Federal protections use short reporting timelines, and unauthorized withdrawals can remove money needed for ordinary bills while the investigation continues.
Then secure the rest of the system.
Change an exposed PIN, remove the card from digital wallets, update important automatic payments, protect a stolen phone, and consider identity theft steps when the wallet also contained personal documents.
A stolen card creates enough stress on its own.
Fast action keeps it from becoming a stolen paycheck, missed insurance payment, or month-long argument with transactions you did not make.