An SH Stripe charge on your bank or credit card statement is almost always a purchase from an online store that runs its storefront on Shopify and processes payments through Stripe. The “SH” is a prefix for the Shopify merchant; “STRIPE” is the payment processor that moved the money. Neither company sold you anything directly. Some independent retailer did, and these two handled the plumbing.
Before you assume fraud, work through a few quick checks. Most of these charges turn out to be a forgotten order, a subscription renewal, or a free trial that converted.
Why the Merchant Name Looks Garbled
Card payment descriptors are capped at 22 characters total, including the prefix, an asterisk, and the space between the prefix and the merchant’s chosen suffix. A store called “Mountainside Organic Coffee Roasters” might appear as “SH STRIPE* MOUNTAINSI” by the time it reaches your statement. Stripe truncates anything over the limit before sending it to your bank.1Stripe Documentation. Statement Descriptors
That truncation is the single biggest reason the charge looks unfamiliar. The “SH” prefix eats characters that would otherwise show the store name, and banks sometimes reformat the descriptor further by adding their own codes. The result reads like gibberish even when the purchase was perfectly real.
How to Identify the Charge
Try these in order.
Search Your Email for the Exact Amount
Open your email and search for the dollar amount shown on the statement, down to the cent. Online stores send order confirmations, and matching the amount to a receipt is usually the fastest way to connect the charge to a purchase. Also try “order confirmation,” “receipt,” and “Shopify” around the date the charge posted. If someone in your household shares the card, check their inbox too.
Use Stripe’s Charge Lookup Tool
Stripe runs a free lookup tool for consumers who don’t recognize a charge. You’ll need three pieces of information from your statement: the exact charge amount, the charge date, and the last four digits of the card.2Stripe. Charge Lookup Enter those and the tool returns information about the merchant behind the transaction. The amount has to match to the cent, or the search fails.
If the result is a name you don’t recognize, search it online. Plenty of brands operate under a different legal business name than the one on their website.
Check for Subscriptions and Free Trials
Recurring SH Stripe charges are frequently tied to subscription boxes, software, wellness products, or digital memberships that process through Shopify and Stripe. If the charge repeats monthly, that’s a strong signal. Log into any accounts you’ve opened with online stores recently. Many Shopify merchants offer a customer portal where you can view billing history and cancel active subscriptions.3Stripe Documentation. Cancel Subscriptions Automated subscription emails usually include a “manage your subscription” link as well.
How to Get Your Money Back
If you’ve worked through the steps above and still can’t identify the charge, or if you’ve confirmed it’s unauthorized, you have two paths.
Contact the Merchant First
If Stripe’s lookup returned merchant contact details, reach out to that business directly. Most small retailers would rather issue a refund than deal with a chargeback, which costs them a processing fee on top of losing the sale. Explain what happened and ask for a refund. Give them a few business days to respond before escalating.
Going to the merchant first also protects you if the charge turns out to be legitimate. Filing a chargeback over a misunderstanding can get your account suspended or closed by a business you actually use.
File a Dispute With Your Card Issuer
When the merchant doesn’t respond or the charge is genuinely fraudulent, federal law gives you tools, and the specific protections depend on which type of card was charged.
For credit cards, the Fair Credit Billing Act gives you 60 days from the date the statement was sent to notify your issuer in writing about a billing error. The issuer must acknowledge the dispute within 30 days and resolve it within two billing cycles, no more than 90 days. During the investigation, it cannot try to collect the disputed amount or report it as delinquent.4Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors Your maximum liability for an unauthorized credit card charge is $50.5Consumer Financial Protection Bureau. Regulation Z 1026.12 – Special Credit Card Provisions
Most issuers let you file through their app or website. Sending written notice to the billing address on your statement still has value: it creates a paper trail that formally triggers the issuer’s statutory obligations.
Credit Card vs. Debit Card Protections
This distinction matters more than most people realize, and it affects how quickly you need to act.
Credit cards fall under Regulation Z. Your liability caps at $50 for unauthorized charges regardless of when you report them, and most major issuers go further than the law requires with zero-liability policies.
Debit cards fall under the Electronic Fund Transfer Act, and the rules are harsher. Report within two business days of discovering the unauthorized charge and your liability caps at $50. Wait longer than two business days but report within 60 days of the statement date and your exposure jumps to $500. Miss the 60-day window entirely and the law imposes no cap at all: you could lose everything the thief takes from your account after that deadline.6Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
The practical difference is worse than the liability numbers suggest. A fraudulent credit card charge doesn’t touch your cash. A fraudulent debit card charge pulls money straight from your checking account, which can trigger bounced payments and overdraft fees while the bank investigates. If an SH Stripe charge looks suspicious and it hit your debit card, report it the same day.
When It Looks Like More Than One Charge
A single unrecognized charge is usually a billing error or a forgotten purchase. Multiple unfamiliar charges, or charges on a card you haven’t used recently, point to something bigger.
Place a Fraud Alert
Contact any one of the three major credit bureaus (Experian, Equifax, or TransUnion) to place a fraud alert on your credit file. Under federal law, that bureau must notify the other two, so one call covers all three. An initial fraud alert is free, lasts one year, and requires lenders to verify your identity before opening new accounts in your name. Placing the alert directly with the bureau rather than through a third-party service is the safest approach.
File an Identity Theft Report
The FTC runs IdentityTheft.gov as the federal government’s central resource for reporting and recovering from identity theft.7Federal Trade Commission. Report Identity Theft The site walks you through a guided process that generates a personalized recovery plan, sample letters to send to creditors, and an official identity theft report. That report serves as formal documentation when you’re dealing with banks, creditors, and the credit bureaus.
Consider a Credit Freeze
A fraud alert asks lenders to verify your identity. A freeze goes further by locking your credit report entirely, so no one can open new accounts in your name until you lift it. Freezes are free, last indefinitely, and can be temporarily lifted when you need to apply for credit. The tradeoff is that you have to contact each bureau individually to place and manage a freeze, unlike the one-call process for fraud alerts.