To prove credit card fraud, you notify your card issuer as soon as you spot the charge, put the dispute in writing within 60 days of the statement that listed it, and back your claim with a signed fraud affidavit and supporting documentation showing the transactions weren’t yours. Federal law caps your liability at $50 under the Truth in Lending Act, and Visa and Mastercard’s zero-liability policies usually bring that down to nothing once the charges are confirmed as unauthorized.1Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card2Visa. Visa Zero Liability Policy3Mastercard. Mastercard Zero Liability Protection Policy The work of proving it is really the work of building a clean, documented case the issuer can’t easily deny.
Call the Issuer and Start the Paper Trail
The first call to your card issuer’s fraud department does two things at once. It freezes or cancels the compromised card so no more charges post, and it opens the formal investigation file that every later step will reference.
Write down the date and time of the call, the representative’s name, and the case or reference number they give you. That log is the first piece of evidence in your file, and it establishes the exact moment you notified the issuer. That timestamp matters because your liability cap under federal law is measured against unauthorized charges made before notification.
Build the Evidence File
Card issuers investigate faster and rule in your favor more often when you’ve assembled the proof yourself instead of leaving it to them.
Start with the statement. Pull up each disputed charge and record the date, amount, and merchant name exactly as they appear. Screenshots or highlighted PDFs work well because they preserve the issuer’s own formatting. If several charges are in dispute, list them in one place rather than referring to them scattered across the statement.
Next, gather anything that puts you somewhere other than where the charges occurred. Travel receipts, work timesheets, badge-in logs, hotel folios, and timestamped photos all establish that you couldn’t have made the purchase in person. For online fraud, the equivalent is showing that the shipping address, IP address, or device on the transaction isn’t yours. Your issuer’s fraud team can often pull that data on their end once you flag it.
Keep the paper trail growing with every contact. Log each call the same way you logged the first. Save emails and any letters the issuer sends. If the dispute drags on or the initial decision goes against you, this record is what you’ll use to escalate.
Complete the Fraud Affidavit
Most issuers will send you a fraud affidavit to sign, and this document is the centerpiece of your claim. It’s a sworn statement listing the charges you’re contesting and declaring that you didn’t authorize them. The form typically asks for your account number, the specific transactions in dispute, the date you discovered them, and your signature.4Consumer Financial Protection Bureau. 12 CFR 1022.3 – Definitions
Fill it out carefully. Inconsistencies between the affidavit and the rest of your documentation, such as a different transaction date or a missed charge, give the investigator a reason to slow down or question the claim. Cross-check the amounts and dates against your statement before signing.
File Official Reports That Back Up the Claim
Your issuer runs the financial investigation, but reports filed with law enforcement and federal agencies create an independent record that strengthens your position and satisfies procedural requirements for certain protections.
File a police report with your local department if you suspect identity theft or know who used the card. Some issuers and credit bureaus specifically ask for a police report number before granting extended fraud alerts or resolving larger disputes. The report doesn’t need to result in an arrest to be useful in your file.
Report the fraud to the Federal Trade Commission at IdentityTheft.gov. The site generates a personalized recovery plan and produces an official identity theft report that credit bureaus and issuers accept.5Federal Trade Commission. Report Identity Theft If the fraud happened online, the FBI’s Internet Crime Complaint Center takes reports on cyber-enabled crime.6Internet Crime Complaint Center. Internet Crime Complaint Center
Send a Written Dispute Under the Fair Credit Billing Act
A phone call freezes the card, but a written dispute is what triggers the legal protections of the Fair Credit Billing Act. Both belong in your process.
You have 60 days from the date your issuer sent the statement listing the fraudulent charge to notify them in writing. Send the letter to the address the issuer designates for billing inquiries, not the payment address. Include your name, account number, the charges you’re disputing, and why you believe they’re unauthorized.7Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors Attach copies (never originals) of your evidence, including the signed fraud affidavit and any police or FTC report numbers.
What Happens During the Investigation
Once the issuer receives your written notice, it must acknowledge receipt within 30 days. It then has up to two complete billing cycles to investigate and resolve the dispute, with an outer limit of 90 days.7Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors For most monthly-cycle cards, the process wraps up in roughly 60 days.
During the investigation, the issuer usually posts a provisional credit so the disputed amount isn’t sitting on your balance. If the investigation confirms fraud, the credit becomes permanent. If the issuer concludes the charges were legitimate, it reverses the credit and sends a written explanation.
Your credit report is protected while the dispute is open. The creditor cannot report the disputed amount as delinquent to the credit bureaus during the investigation. Even after the investigation closes, if you still disagree, the issuer may report the amount as delinquent only if it also reports that the amount is in dispute and tells you the name and address of every party receiving that report.8GovInfo. 15 USC 1666c – Rights of Creditor – Reports by Creditor on Delinquent Amounts in Dispute
If the Issuer Denies Your Claim
Denials happen, and they’re not the end of the road. Ask for the specific reason in writing. Sometimes the problem is a fixable paperwork issue, like a missing signature on the affidavit or a transaction date that didn’t match, and resubmitting cleans it up.
If the issuer stands by its decision and you believe the charges were unauthorized, file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint. Include the key dates, amounts, and copies of your communications with the issuer. The CFPB forwards the complaint directly to the company, which generally responds within 15 days, though complex cases may take up to 60 days for a final response. You then have 60 days to review and provide feedback.9Consumer Financial Protection Bureau. Submit a Complaint Complaints become part of a public database, and the CFPB has enforcement authority, so companies tend to take a second look.
For larger amounts, a consumer protection attorney is worth considering. The Fair Credit Billing Act allows consumers to sue creditors that fail to follow the dispute procedures, and prevailing plaintiffs can recover actual damages plus attorney’s fees. That exposure alone often prompts issuers to revisit a denied claim.
A Note on Debit Card Fraud
The steps above apply to credit cards. If the fraud hit a debit card, a different statute governs and the liability rules are less forgiving because the money has already left your bank account. Under the Electronic Fund Transfer Act, your liability is capped at $50 only if you report within two business days of learning of the loss. Reporting after that but within 60 days of your statement raises the cap to $500, and reporting after 60 days can leave you responsible for the full amount of transfers that happened after the 60-day window.10Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability Banks must extend these deadlines for legitimate reasons like hospitalization or extended travel. The proof-gathering steps are similar; the timelines and stakes are not.
Business credit cards are also worth flagging briefly. The $50 federal cap still applies to an employee cardholder’s liability on a company card.11Office of the Comptroller of the Currency. Does the Truth in Lending Act Apply to Business Credit Cards But business cards don’t always carry the Fair Credit Billing Act’s billing-error dispute protections, so resolving fraud on a business card typically involves more negotiation with the issuer and fewer guaranteed timelines.