To report Apple Pay fraud, lock the compromised card in your bank’s mobile app, then call the fraud line for the bank or card issuer that issued the card — not Apple. Apple doesn’t reverse charges; your card issuer does. If the unauthorized activity is on your Apple Cash balance, the dispute goes through Green Dot Bank at 877-233-8552, because Apple Cash is a prepaid account Green Dot manages, not a product of your regular bank.1Apple Support. If Your Apple Cash Account Is Restricted or Locked Timing decides how much of the loss you eat, especially on a debit card, so treat this as a same-day task.
Freeze the Card Before You Call Anyone
Open your bank or card issuer’s app and use the “lock card” toggle. That blocks new transactions instantly, including any that try to run through the token stored in Apple Pay. Every minute the card stays active is another minute the thief can spend on it, and freezing takes seconds, while a fraud call can take twenty minutes to connect.
Then scroll your recent activity carefully. Fraudsters often run a small test charge, sometimes under a dollar, before attempting anything larger. Write down the date, amount, and merchant name for every transaction you don’t recognize. You’ll read these back to the fraud agent, and a missed charge is money you won’t get refunded.
Change your Apple ID password and turn on two-factor authentication if it isn’t already on. If that password appears anywhere else — email, another banking app — change those too. A compromised Apple ID gives a thief the keys to every card in your Wallet, so this step matters as much as the card freeze itself.
Call Your Bank or Card Issuer’s Fraud Line
The bank or card issuer that issued the card is the entity that investigates the fraud and returns your money. The charge went through Apple Pay, but the financial liability sits with the card issuer. Call the dedicated fraud number on the back of the card or in the app, not the general customer service line. Fraud departments handle the statutory reporting and can flag the account faster than a general agent transferring you around.
Have your documentation ready before you dial. The agent will want the exact dollar amount of each fraudulent charge, the merchant name as it appears on the statement, the dates the transactions posted, and confirmation that your physical card is still in your possession. Mention any small test charges you spotted; they’re part of the same pattern and strengthen the case.
The bank will assign a dispute or claim number. Write it down and keep it somewhere you can find it. That number tracks the case through every stage of the investigation, and you’ll need it if the claim gets denied and you have to escalate.
Contact the Merchant First for a Posted Charge
If the charge has already posted and it’s a smaller error or a wrong amount, Apple suggests contacting the merchant first.2Apple Support. If You Have an Issue With an Apple Cash Transaction That works when the transaction went to a real retailer whose system got exploited, and it’s often faster than a formal dispute. If the merchant is a shell operation or won’t cooperate, the bank dispute is your fallback, and you should file it regardless to protect your rights under the federal deadlines below.
Report to Apple to Shut Down the Digital Side
Reporting to Apple isn’t how you get refunded, but it stops the bleeding. Apple can suspend the tokens that let Apple Pay use your card, flag your Apple ID for monitoring, and help you remove payment credentials from a lost device.
If the iPhone is missing, use Find My on another Apple device or sign in to your Apple Account in a browser. Select the missing device and choose Remove Items under Wallet & Apple Pay to deactivate every card stored on it.3Apple Support. Remove Cards and Passes in Wallet on iPhone You can also call each card issuer to have them suspend the digital token on Apple’s side. For fraud that appeared while the device was still in your possession, contact Apple Support through the Wallet and Apple Pay channel so they can check whether your Apple ID shows signs of compromise.
Apple Cash Uses a Different Number and Different Rules
Apple Cash is a prepaid debit account managed by Green Dot Bank, not your regular bank.1Apple Support. If Your Apple Cash Account Is Restricted or Locked When fraud hits your Apple Cash balance, the dispute goes through Green Dot — not Chase, not Bank of America, not whoever issued your other cards.
To report unauthorized Apple Cash transactions, call an Apple Cash Specialist at Green Dot Bank at 877-233-8552.2Apple Support. If You Have an Issue With an Apple Cash Transaction That’s the right line whether the unrecognized charge is a person-to-person payment, a merchant transaction, or an Apple services charge. Green Dot investigates and issues a decision.
How Much You Can Be Liable For
Federal law caps your out-of-pocket exposure, but the caps look very different for credit cards versus debit cards, and one deadline decides which tier applies.
Credit Card Fraud
The Fair Credit Billing Act limits your liability for unauthorized credit card charges to $50, and only for charges that occurred before you notified the issuer.4Office of the Law Revision Counsel. 15 US Code 1643 – Liability of Holder of Credit Card In practice, you’ll almost never pay even that. Visa and Mastercard both maintain zero-liability policies covering unauthorized transactions in full, provided you report promptly.5Visa. Zero Liability You have 60 days from the date the issuer sends the billing statement to dispute the charge as a billing error.6Consumer Financial Protection Bureau. 1026.13 Billing Error Resolution
Debit Card Fraud
Debit card fraud is governed by the Electronic Fund Transfer Act and Regulation E, which sets a three-tier liability structure based on how fast you report:7eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Within 2 business days of learning about the loss, your maximum liability is $50 or the amount of the unauthorized transfers, whichever is less.
- Between 2 and 60 days after your statement is sent, the cap jumps to $500.
- After 60 days from the statement date, you can be liable for the full amount of any unauthorized transfers that occurred after the 60-day window, with no cap.
The middle tier is where most people get burned. Two business days isn’t much time if you don’t check your account daily, and the jump from $50 to $500 is steep. If a debit card is compromised, report it the same day.
What Happens After You File
Once the dispute is filed, the bank has 10 business days to investigate and resolve the error. If it can’t finish in that window, federal rules require the bank to provisionally credit your account for the disputed amount while the investigation continues.8eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors The bank can hold back up to $50 from that provisional credit if it has reason to believe an unauthorized transfer occurred and you bear some liability under the reporting tiers.
With the provisional credit issued, the bank gets up to 45 days total from the date it received your notice to complete the investigation. For point-of-sale debit card purchases, cross-border transfers, and transactions within 30 days of a new account’s first deposit, that extends to 90 days.8eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors If the investigation confirms the fraud, the provisional credit becomes permanent. If the bank decides the charges were authorized, it can revoke the credit and must send a written explanation within three business days of finishing.
If the Bank Denies the Claim
Banks deny fraud claims more often than most people expect, and a denial isn’t the end of it. When a bank concludes “no error occurred,” it has to send a written explanation and tell you that you can request the documents it relied on. Ask for those documents.9Consumer Financial Protection Bureau. 1005.11 Procedures for Resolving Errors The reasoning often reveals what evidence was missing from your initial report.
If you still believe the denial was wrong, file a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov/complaint. The CFPB forwards your complaint directly to the bank, which generally must respond within 15 days.10Consumer Financial Protection Bureau. Submit a Complaint It isn’t a guaranteed fix, but banks treat CFPB complaints seriously because the responses become part of a public database. Complex cases can take up to 60 days for a final response.
For smaller amounts, small claims court is a last resort worth weighing. Filing fees vary by jurisdiction but generally fall below a few hundred dollars, and you don’t need a lawyer.
Document Everything and File the Supporting Reports
Strong documentation is what separates claims that succeed from claims that drag on. Keep a log of every phone call: date, time, representative’s name, what was discussed. Save confirmation emails, secure messages, and every case number from both the bank and Apple Support.11Office for Victims of Crime. Steps for Victims of Identity Theft or Fraud
If a device was stolen or the loss is substantial, file a police report. Some banks require one before finalizing a large reimbursement. Your local department will want the bank’s dispute reference number and copies of the fraudulent transactions.
If the fraud looks like broader identity theft, file at IdentityTheft.gov. The FTC generates an official Identity Theft Report and a personalized recovery plan with pre-filled letters.12Federal Trade Commission. Identity Theft The FTC doesn’t investigate individual cases or recover your money directly, but the Identity Theft Report is a recognized document some banks and creditors require when processing disputes.13Federal Trade Commission. Businesses Must Provide Victims and Law Enforcement With Transaction Records Relating to Identity Theft
For internet-based fraud — phishing, account takeovers, online scams — file with the FBI’s Internet Crime Complaint Center at ic3.gov.14Internet Crime Complaint Center (IC3). Home Page IC3 uses these reports to build cases against organized fraud networks. Like the FTC report, it won’t recover funds directly, but it creates an additional official record that strengthens your file if you need to escalate.15Federal Bureau of Investigation. Cyber
When You Sent the Money Yourself
One boundary worth knowing before you report: money you personally sent to a scammer sits in a different legal category from money a thief took from you. Under Regulation E, an “unauthorized” transfer is one initiated by someone other than you without your permission. If a thief obtained your credentials through a phishing attack and initiated the transfer, that still counts as unauthorized under Regulation E even though deception started it.16Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs The gray area is when you opened the app and tapped Send yourself under false pretenses. Many banks treat that as an authorized transfer, and Apple’s own guidance is direct: “If you pay someone using Apple Cash for something that you haven’t received, you might not be able to get your money back.”17Apple Support. Avoid Scams When You Use Apple Cash
Report it anyway. Call Green Dot at 877-233-8552, file with your bank, and submit reports to the FTC and IC3. Some institutions review these cases on the merits even without a clear legal obligation to refund. Set realistic expectations while doing everything the process allows.