SP Rescue Charge Explained: Tracing, Fraud Signs, and Disputes

An “SP” charge on a credit card statement is a purchase processed through Shopify Payments, the built-in payment system used by online stores that run on Shopify. The letters “SP” appear as a prefix before the merchant’s name — for example, “SP JONES CANDLE CO.” If the name after the SP looks unfamiliar, the charge almost certainly came from an online order placed with a small or independent retailer whose website is powered by Shopify.¹

Shopify hosts thousands of storefronts, so the brand you bought from and the descriptor that shows up on your statement often don’t match. That mismatch is the most common reason an SP charge looks suspicious even when it isn’t.

Why the Charge Shows Up as “SP”

Shopify used to automatically add “SP*” to every merchant’s name on customer statements. In April 2022 it disabled that automatic prefix and let merchants set their own Customer Statement Description, which must include the shop name, the legal entity name, a “doing business as” name, or the store’s URL.²³

Even so, many charges still land with the SP prefix, and Shopify’s own consumer help page describes purchases from Shopify-powered stores as appearing on statements as “SP” followed by the store name.¹ The exact format varies by card network, issuing bank, and merchant configuration. Some banks truncate or rearrange the text, which can make even a routine purchase hard to place.

One other quirk: what you see while a charge is still pending — the “soft” descriptor — sometimes differs from the “hard” descriptor that appears after the transaction settles. A name that looks strange today may read differently in a day or two.

How to Trace an Unfamiliar SP Charge

Before treating an SP charge as fraud, work through the identification steps. Billing descriptors are short — roughly 20 to 25 characters — and businesses are supposed to use a name customers recognize, but abbreviations often strip out the context you’d need.

Search the exact text from your statement in a search engine. Even an odd or abbreviated name usually turns up the store’s website or social media.
Search your email — including spam and promotions folders — for the transaction date and amount. Online stores nearly always send an order confirmation.
Ask anyone authorized on the account. A partner, family member, or additional cardholder may have placed the order and forgotten to say so.⁴
Use Shopify’s lookup page at shopify.com/charge. If the charge is a direct Shopify subscription fee (billed to a store owner), it will show up as “SHOPIFY*” followed by a nine-digit bill number. If it’s a purchase from a Shopify-powered store, the page directs you back to your receipts and to the merchant.¹

If you can identify the store, contacting the merchant directly is often the fastest route to a refund or explanation. Legitimate sellers generally prefer to resolve a billing question themselves rather than face a formal chargeback from your bank.

When a Small SP Charge Is a Fraud Warning

Not every mystery SP charge is a forgotten purchase. In mid-2024, consumers globally reported small unauthorized charges — often exactly $1 — with descriptors tied to “Shopify-charge.com.” Cybersecurity researchers described the pattern as “card testing” fraud: a tiny charge run against a stolen card number to confirm the account is active before an attacker attempts larger transactions.⁵

Cards from Discover, Capital One, Visa, and Monzo were affected, and some cardholders reported charges on cards they had already deactivated. Shopify confirmed that Shopify-charge.com is a legitimate domain it operates, yet many affected consumers said they had never bought anything from a Shopify store. A phone number tied to some of the transactions was traced to a debt collection firm, Halsted Financial, and a physical address associated with the charges appeared to be non-existent.⁵

Treat a small SP charge you’re certain you didn’t make — especially a round $1 amount — as a possible sign your card number has been compromised, not a billing quirk.

Disputing an Unauthorized SP Charge

Federal law gives you strong protection here. The Fair Credit Billing Act caps your liability for unauthorized credit card charges at $50, and both Visa and Mastercard offer zero-liability policies that cover unauthorized transactions in full when you used reasonable care with your card and reported the problem promptly.⁶⁷

Move through these steps in order:

Call the number on the back of your card. Report the charge as fraudulent and ask for it to be reversed. If you think your card number has been stolen, request a lock or replacement.⁸
Follow up in writing within 60 days of the statement date on which the charge appeared. Send the dispute to the issuer’s billing-inquiry address, not the payment address, and include your name, account number, the amount and date of the charge, and a description of the error. Certified mail with a return receipt gives you proof of delivery.⁹
Wait for the investigation. The issuer must acknowledge the dispute in writing within 30 days and resolve it within 90 days or two billing cycles, whichever is shorter. You can withhold payment on the disputed amount and any related finance charges during that time, and the issuer cannot report you as delinquent on the disputed amount.¹⁰
Review the outcome. If the issuer rules in your favor, the charge and any related interest or fees come off. If it finds the charge valid, it must explain why in writing and tell you what you owe; you then have 10 days to respond with additional evidence or objections.¹¹

If the Problem Looks Bigger Than One Charge

A single unauthorized SP charge is a card problem. If someone has used your personal information to open accounts or make purchases beyond that one transaction, that’s identity theft, and the response is different. File a report at IdentityTheft.gov and consider a fraud alert or credit freeze with Equifax, Experian, and TransUnion.

A credit freeze blocks anyone from opening new credit accounts in your name and is free to place and lift. A fraud alert is lighter: you contact one bureau, it notifies the other two, and creditors are prompted to verify your identity before extending new credit. An initial fraud alert lasts one year, and an extended alert — which requires an identity theft report — lasts seven years.¹²

1
Shopify. Unrecognized Charges
2
Shopify Community. Why Are My Customers Not Seeing SP on Their Card Statements
3
Shopify Help Center. Configuring Shopify Payments
4
Discover. What Is This Charge on My Credit Card
5
CybersecurityAsia. Shopify Scam Small Charge Stir Global Worry
6
Visa. Personal Security
7
Mastercard. Zero Liability Protection
8
FTC. What To Do if You Were Scammed
9
FTC. Using Credit Cards and Disputing Charges
10
Fairfax County. Understanding the Fair Credit Billing Act
11
California Attorney General. Credit Cards – Dispute a Charge
12
FTC. Credit Freezes and Fraud Alerts