E-Commerce Charge on Your Statement: Identify, Dispute, Cancel

An e-commerce charge on your statement is simply an online purchase, and the reason it looks unfamiliar is almost always the merchant descriptor: the 20-to-30-character line your card network sends to your bank rarely matches the storefront where you actually clicked “buy.” Before assuming fraud, it’s worth decoding the descriptor. If the charge really is unauthorized, federal law gives you a defined dispute path, and the rules are meaningfully different for credit cards than for debit cards.

Why the Merchant Name Looks Wrong

The descriptor is the short text your card issuer receives from the merchant’s payment processor. It has to fit inside tight character limits, which is why so many arrive truncated or abbreviated. Several ordinary business practices push it further from what you’d recognize:

A store may process payments under its parent company or legal entity name rather than its brand.
Merchants using platforms like Stripe, Square, or PayPal sometimes surface the processor’s name instead of their own.¹
The “soft” descriptor that appears while a charge is still pending can differ from the final one that posts after the transaction settles.²
Recurring charges from free trials that converted to paid plans, annual memberships, or auto-renewals are among the most common sources of “I don’t recognize this.”

When a descriptor lacks a recognizable URL or phone number, people are more likely to assume fraud even when the charge is legitimate. The reverse also happens: a familiar-looking name can mask a real problem. Working through the descriptor before calling your bank saves time either way.

How to Identify the Charge Before You Dispute

A few steps usually resolve the mystery:

Copy the descriptor exactly as it appears, including numbers and symbols, and search it in quotation marks. Community forums and descriptor databases often surface the underlying merchant.¹
Search your email inbox and spam folder for the exact dollar amount. Confirmation receipts often surface a subscription or purchase you’d forgotten.
Check the “post date” against your activity from two or three days earlier. Posted dates lag the actual transaction.¹
Ask any authorized users on your account whether they made the purchase.³
If the descriptor contains a phone number or URL, call it. A billing department can usually confirm a charge from the last four digits of your card.

Some patterns point toward genuine fraud rather than a forgotten purchase. Multiple tiny charges under a couple of dollars from generic-sounding merchants often indicate “card testing,” where thieves verify a stolen number before attempting larger purchases. Charges tied to places you’ve never been are another warning sign.¹

Disputing a Credit Card Charge

Federal protections for credit card users come from the Fair Credit Billing Act, codified at 15 U.S.C. §§ 1666–1666j, and its implementing regulation, Regulation Z at 12 CFR § 1026.13.⁴ The law defines a “billing error” broadly. It covers unauthorized charges, charges for the wrong amount, charges for merchandise never delivered as agreed, the issuer’s failure to credit a payment, and computational errors.⁵

To use those protections:

Call the number on the back of your card first, then send written notice to the address your issuer designates for billing inquiries. That address is not the same as the payment address.⁶
Get the written notice to the issuer within 60 days after the first statement showing the error was sent to you.⁵
Include your name, account number, and a clear description of the error, including the type, date, and amount. Send copies of any supporting documents and keep the originals.⁶

Once a proper notice arrives, the issuer must acknowledge it in writing within 30 days and resolve the dispute within two billing cycles, capped at 90 days.⁵ While the investigation is open, you don’t have to pay the disputed amount or related finance charges, and the issuer can’t report the account as delinquent, close it, or try to collect on the disputed portion.⁶

If the issuer confirms the error, it must correct the account and remove the associated charges. If it sides against you, it must explain in writing and give you a grace period to pay. You can push back by writing within 10 days and filing a complaint with the Consumer Financial Protection Bureau.⁶

On top of federal law, the major card networks run zero-liability policies. Visa, Mastercard, American Express, and Discover all state that consumers won’t be held responsible for unauthorized charges on consumer credit cards when the cardholder used reasonable care and reported the problem promptly.⁷⁸ Federal law caps liability at $50 for credit card fraud; the network policies typically absorb even that.

Disputing a Debit Card Charge

Debit cards look identical at the checkout page but carry weaker protections. The Electronic Fund Transfer Act and Regulation E at 12 CFR § 1005.6 tie your maximum liability directly to how quickly you report the problem:⁹

Report within two business days and liability is capped at $50, or the amount of unauthorized transfers before you reported, whichever is less.
Report after two business days but within 60 days of the statement, and liability can rise to $500.
Report after 60 days, and you could be on the hook for the full amount of unauthorized transfers that occur after the 60-day window closes and before you notify the bank.

The bank carries the burden of proving that a transfer was authorized. Consumer negligence, such as writing a PIN on a debit card, can’t be used to impose liability beyond what Regulation E allows.¹⁰ Banks also can’t require you to file a police report or contact the merchant before starting their investigation.¹¹

Under Regulation E’s error resolution procedures, the bank must investigate within 10 business days. If it needs more time, it can extend to 45 days but must issue a provisional credit to your account within the initial 10 days. For point-of-sale debit transactions, that extended window runs to 90 days.¹² The practical point is simple: with a debit charge, every day you wait can cost you more.

When the Charge Is a Subscription You Forgot or Can’t Cancel

Recurring charges from forgotten subscriptions, free-trial conversions, and negative-option billing are one of the most common flavors of unexpected online charge. FTC complaints on these practices rose from an average of 42 per day in 2021 to nearly 70 per day in 2024.¹³

The FTC’s “Click-to-Cancel” rule, finalized in October 2024, would have required sellers to make cancellation as easy as enrollment. The Eighth Circuit Court of Appeals vacated it on July 8, 2025, in Custom Communications, Inc. v. Federal Trade Commission, finding that the FTC hadn’t published a required preliminary regulatory analysis after it became clear that compliance costs would exceed $100 million annually.¹⁴ The agency issued an Advance Notice of Proposed Rulemaking in March 2026 to try again.

The Restore Online Shoppers’ Confidence Act (ROSCA) remains the FTC’s primary tool. It requires sellers to clearly disclose all material terms, obtain express informed consent before charging, and provide a working cancellation mechanism.¹⁵ In September 2025, the FTC secured a $2.5 billion settlement against Amazon over Prime enrollment and cancellation practices, including a $1 billion civil penalty and $1.5 billion in refunds to roughly 35 million consumers.¹⁶

About 30 states have their own automatic-renewal or negative-option laws, and several strengthened them recently. California’s amended Automatic Renewal Law, effective July 1, 2025, requires businesses to obtain express affirmative consent, allow cancellation through the same medium used for enrollment (so online sign-ups must be cancelable online), and send annual reminders disclosing charges and cancellation methods. Price changes require notice at least 7 and no more than 30 days in advance.¹⁷ Massachusetts regulations effective September 2025 require pre-renewal notices 5 to 30 days before any subscription term over 31 days renews. New York requires advance consent for price increases and allows cancellation with a pro-rata refund within 14 days. Minnesota bars “save” offers during cancellation unless the consumer affirmatively agrees to hear them.¹⁸

If a merchant is stonewalling a cancellation, disputing the charge with your card issuer under the FCBA or Regulation E is often faster than fighting the subscription flow. Keep records of every attempt to cancel; they support the dispute.

Reporting Fraud Beyond Your Bank

If a charge is genuinely fraudulent, several channels take reports in addition to your card issuer:

Call the issuer or bank first. Ask for the card to be blocked or replaced and open a formal dispute.
File a report with the FTC at ReportFraud.ftc.gov.¹⁹
Report internet-related financial crimes to the FBI’s Internet Crime Complaint Center at ic3.gov. Reported losses through that channel totaled over $50 billion between 2020 and 2024.²⁰
If your bank or card issuer isn’t handling the dispute properly, file a complaint with the CFPB at consumerfinance.gov. Companies generally respond within 15 days.²¹
Place a fraud alert with one of the three major credit bureaus (Equifax, Experian, or TransUnion). The alert lasts one year and can be extended.²²

If the underlying problem is identity theft rather than a single stray charge, IdentityTheft.gov provides a guided recovery plan and generates pre-filled letters and forms for creditors and bureaus.²² Reports to local law enforcement and your state attorney general can also strengthen fraud claims with financial institutions and credit bureaus.²¹

1
Airwallex. What Is This Charge on My Credit Card
2
Chargebackgurus. Merchant Descriptor
3
Discover. What Is This Charge on My Credit Card
4
FTC. Fair Credit Billing Act
5
CFPB. Regulation Z – Section 1026.13
6
FTC. Using Credit Cards and Disputing Charges
7
Mastercard. Zero Liability Protection
8
Experian. What Is Zero Liability Fraud Protection
9
Cornell Law Institute. 15 U.S. Code Section 1693g
10
CFPB. Regulation E – Section 1005.6
11
CFPB. Electronic Fund Transfers FAQs
12
CFPB. Regulation E – Section 1005.11
13
FTC. Federal Trade Commission Announces Final Click-to-Cancel Rule
14
U.S. Court of Appeals for the Eighth Circuit. Opinion, Nos. 24-3137, 24-3388, 24-3415, 24-3442
15
FTC. Amazon.com, Inc. (ROSCA), FTC v.
16
FTC. FTC Secures Historic $2.5 Billion Settlement Against Amazon
17
California Legislature. AB 2863
18
Wiley. Automatic Renewals and Risks – State Negative Option Legislation and Enforcement Is Trending
19
FTC. Payments You Didn’t Authorize Could Be a Scam
20
IC3. Internet Crime Complaint Center
21
CFPB. Submit a Complaint
22
OCC. Credit Card and Debit Card Fraud