You can block a credit card in under a minute through your issuer’s mobile app, online banking site, or the phone number on the back of the card. Before you do, decide whether you want a temporary lock (the card is misplaced and might turn up) or a permanent cancellation (it was stolen or the number was used fraudulently). Federal law caps your liability for unauthorized charges at $50, and both Visa and Mastercard reduce that to zero for cardholders who report promptly, so move quickly but you don’t need to panic.
Lock or Cancel: Pick the Right One
These are two different actions, and choosing the wrong one creates real headaches.
A temporary lock freezes new purchases at registers and online checkouts, but your account stays open with the same card number. Recurring autopayments like subscriptions and monthly bills typically continue to process while the lock is active. Find the card three days later, unlock it, and everything goes back to normal.
A permanent cancellation closes that card number for good and generates a new one on a replacement card. Every merchant storing your old number for recurring billing will start getting declines. Your account history stays on your credit report, but cancelling a card you’ve held for years can shorten your average account age and nudge your score down. Pick permanent when you’re confident the card was stolen or the number was compromised. Pick a temporary lock when it’s simply misplaced.
Blocking the Card Through the App
The app is the fastest route. Open your issuer’s mobile banking app, go to the card management or account services section, and look for a toggle labeled “lock card,” “freeze card,” or something similar. Sliding it disables new purchases immediately. Fifteen seconds, start to finish.
For a permanent cancellation, the app usually points you to a separate “report lost or stolen” option that starts the replacement process. Some apps put both options on the same screen, so read the labels before you tap. You don’t want to accidentally cancel a card you only meant to pause.
Blocking Through Online Banking
Log into your issuer’s website and open the card’s detail page. The lock or freeze option lives under a security, services, or card management tab. Submitting the request updates the card network within seconds, and the card stops working at checkout right away.
For a permanent block, the site has a separate link to report the card as lost or stolen. You’ll confirm your identity, pick a reason, and the issuer will begin sending a replacement. Save the confirmation screen.
Blocking by Phone
Call the number on the back of the card or on your most recent billing statement. If you don’t have the card, find the fraud line on your issuer’s official website. The automated system verifies you with your account number, the last four of your Social Security number, or your ZIP code. A temporary lock can usually be finished inside the automated menu.
For a permanent block, you’ll be transferred to a live representative who can cancel the card, order a replacement, and walk through recent transactions with you. Phone is the best channel when you’ve spotted actual fraud, because the representative can flag specific charges while you’re on the line and start a dispute right there.
What You Owe for Unauthorized Charges
Federal law caps your maximum liability for unauthorized credit card charges at $50, and that cap only applies to charges made before you reported the card missing.1Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card For the cap to apply, your issuer must have given you a way to report the loss and a way to identify authorized users on the account.2eCFR. 12 CFR 1026.12 – Special Credit Card Provisions Every major issuer meets those conditions, so in practice you’re covered.
On top of the statutory cap, Visa and Mastercard run zero-liability programs that erase even the $50 exposure for cardholders who report promptly.3Visa. Visa Zero Liability Policy4Mastercard. Zero Liability Protection The practical takeaway: you’re almost certainly not on the hook for fraudulent charges, and the faster you report, the simpler the resolution.
The 60-Day Written Notice Rule
To preserve your full dispute rights, send written notice of an unauthorized charge to your card issuer within 60 days of the statement date on which it appeared.5Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors The CFPB advises calling first to get the card blocked, then following up in writing to lock in your legal protections.6Consumer Financial Protection Bureau. How Do I Dispute a Charge on My Credit Card Bill? Miss that 60-day window and you lose significant leverage over the investigation.
Disputing Charges That Already Went Through
Blocking the card stops future damage. It does not reverse charges already posted. Those need a formal dispute. Once the issuer receives your written notice, it has 30 days to acknowledge it and must resolve the investigation within two complete billing cycles, up to a maximum of 90 days.7GovInfo. 12 CFR 1026.13 – Billing Error Resolution While the investigation runs, the issuer cannot try to collect the disputed amount or report it as delinquent.
Your written dispute should include your name, account number, the specific charges you’re contesting, and a brief explanation of why you believe they’re unauthorized. Send it to the billing inquiries address on your statement, not the payment address. Certified mail with a return receipt gives you proof that the letter arrived and when.
Authorized Users and Recurring Payments
A block on the primary account usually disables every authorized user card tied to it, since they share the same credit line. Warn your authorized users before or right after you lock the card so they aren’t stuck at a register.
Recurring payments split by the choice you made earlier. A temporary lock generally allows scheduled autopayments to keep processing, because the card network treats them as pre-authorized rather than new purchases. A permanent cancellation produces a new card number, and any merchant trying to charge the old one will get declined. Streaming services, utilities on autopay, gym memberships, and payment apps will need manual updates once your replacement arrives.
There is a partial safety net. Visa and Mastercard both run account updater services that automatically push new card details to participating merchants when an account number changes.8Visa. Visa Account Updater Overview9Mastercard Developers. Automatic Billing Updater Overview Not every merchant participates. Make a list of everything charging your card before the replacement arrives and update each one manually to avoid late fees or service cutoffs.
Replacement Cards and Digital Wallets
Delivery times vary widely. Standard shipping takes anywhere from three to fourteen days depending on the bank. Some issuers, including American Express and Chase, offer free expedited delivery in one to three days; others charge around $15 for faster shipping, and a few don’t offer expedited options at all. If you need a working card immediately, check whether your issuer lets you add the new card to a digital wallet before the physical plastic arrives.
Activate the replacement through the app or the phone number on the activation sticker. Digital wallets like Apple Pay and Google Pay often update automatically through the card network’s tokenization system, which keeps stored card details current when the account number changes.10Mastercard. Tokenization Explained: Protecting Sensitive Data and Strengthening Every Transaction If your wallet doesn’t refresh on its own, remove the old card and add the new one manually.
Fraud Alerts and Identity Theft
If the card was stolen rather than just misplaced, the person who took it may have enough personal information to try opening new accounts in your name. A fraud alert on your credit report makes that much harder. Contact any one of the three major credit bureaus (Equifax, Experian, or TransUnion) and that bureau is legally required to notify the other two.11Office of the Law Revision Counsel. 15 USC 1681c-1 – Identity Theft Prevention; Fraud Alerts The initial alert lasts one year and is free.
If you’ve confirmed identity theft beyond the card charges themselves, file a report at IdentityTheft.gov. The FTC’s recovery tool walks you through an Identity Theft Affidavit and a step-by-step plan for closing fraudulent accounts, disputing charges, and cleaning up your credit. Pull your free reports at AnnualCreditReport.com and check for accounts or inquiries you don’t recognize.
Watch for Scams During the Replacement Window
The gap between blocking your card and receiving the replacement is prime hunting time for scammers. Fraudsters send texts and emails impersonating your bank’s security department, asking you to “verify your identity” or “activate your new card” through a link. The FCC warns that these smishing messages are designed to look like they come from your actual bank, and clicking the link or calling the number in the message hands your information straight to the scammer.12Federal Communications Commission. Avoid the Temptation of Smishing Scams
Your bank will not ask you to confirm your full card number, PIN, or Social Security number through a text message link. If a suspicious message arrives about your replacement card, ignore the link and call the number on your issuer’s official website or your most recent statement. That two-minute detour is the difference between recovering from one fraud and walking into a second one.