A URL on a bank statement is the web address of the merchant or payment processor behind a charge, and it usually shows up because the purchase happened online or through a subscription rather than at a store with a physical address. If you don’t recognize it, the URL is a clue you can trace, but it deserves some caution before you type it into a browser.
Why a Web Address Shows Up Instead of a Store Name
Every card transaction carries a billing descriptor, the short text your bank uses to identify who charged you. A brick-and-mortar store’s descriptor is typically a business name and city. For an online purchase, a URL often takes the place of the city because there’s no storefront to name. The exact format depends on the merchant’s payment processor and what the merchant registered when opening the account.
There are also two versions of that descriptor. A pending transaction shows a temporary label set by the processor at the moment of authorization. Once the charge settles, a permanent descriptor replaces it. That’s why a line may first read “STRIPE.COM” or “SQ*COFFEE SHOP” and later change to something you recognize. Checking a statement mid-cycle can show you a label that isn’t the final one.
Third-party processors are the single most common reason a URL looks unfamiliar. A small online shop might sell candles, but the statement shows Stripe, Square, or PayPal instead of the shop. This is the number-one cause of “I don’t recognize this charge” calls to banks.
Reading the Rest of the Line
Alongside the URL, statements usually include abbreviations that describe how the transaction was processed. They can help narrow down the source:
- POS: point of sale, an in-person card swipe, tap, or chip insert.
- ACH: Automated Clearing House, used for bank-to-bank transfers, direct deposits, bill payments, and recurring subscription debits.
- EFT: electronic funds transfer, a broad label covering most digital money movements.
- CR or CRE: credit, meaning money coming into your account, such as a refund.
- DR or DBT: debit, meaning money leaving your account.
- CHK: a check transaction, either a deposit or a payment.
A line reading “POS DEBIT SHOPIFY.COM” tells you a card was run through a Shopify-powered store. “ACH DEBIT NETFLIX.COM” means Netflix pulled a recurring payment. Those prefixes narrow the search when the URL alone doesn’t ring a bell.
How to Trace an Unfamiliar Charge
Before you call the bank or file a dispute, spend a few minutes investigating. Most “unauthorized” charges turn out to be a forgotten subscription, a purchase by a family member with access to the card, or a merchant whose billing name differs from its storefront name.
Start by typing the URL into a search engine, not directly into your browser’s address bar. Searching the URL alongside the exact charge amount often turns up other consumers who had the same confusion, and those threads frequently identify the merchant. If the URL clearly belongs to a processor like Stripe or PayPal, search the processor’s name with the dollar amount and date.
If searching doesn’t help, log into any subscription services you use and check your purchase history. Look at email confirmations from the charge date. Check whether a spouse, partner, or child has a linked card or access to a shared account. Many banks also let you tap a transaction in their app to see extra details, including a merchant phone number or a category code.
Merchant category codes are four-digit numbers that payment networks assign to classify a business by what it sells. Your bank app may show something like a grocery-store code or a digital-goods code. The code won’t name the specific merchant, but it can tell you whether the charge came from a restaurant, a software company, or a streaming service, which often jogs your memory.
When the URL Itself Might Be a Trap
Typing an unfamiliar URL directly into a browser carries real risk. Most descriptors point to legitimate merchants, but a fraudulent charge could display a URL built to harvest login credentials or push malware. Searching the URL first is safer than visiting it.
A few signs suggest a URL isn’t legitimate: it uses HTTP instead of HTTPS, it contains misspellings of a known brand, it redirects through several pages before landing, or it immediately asks for sensitive information like your Social Security number or full card number. No legitimate merchant lookup page needs your Social Security number to identify a transaction.
If you suspect outright fraud, skip the URL entirely and contact your bank using the number on the back of your card. Don’t call any phone number listed on a suspicious website.
Disputing a Credit Card Charge
Your protections depend on whether the charge posted to a credit card or a debit card, and credit cards are stronger. Under the Fair Credit Billing Act, you can dispute a billing error by sending written notice to your card issuer within 60 days of the statement date on which the charge appeared.1Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors The notice must go to the issuer’s billing inquiry address, not the payment address. Include your name, account number, the amount you believe is wrong, and why you think it’s an error.
Once the issuer receives that notice, it must acknowledge the dispute in writing within 30 days and resolve the investigation within two full billing cycles, which can’t exceed 90 days.1Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors During the investigation, you don’t have to pay the disputed amount, and the issuer can’t charge you interest or late fees on it. The issuer also can’t report the disputed amount as delinquent to credit bureaus while the investigation is open.2Office of the Law Revision Counsel. 15 USC 1666a – Regulation of Credit Reports
You still owe the undisputed portion. If a statement shows a $200 mystery charge and $800 in charges you recognize, keep paying the $800 or risk a late mark on your credit report. Most issuers let you dispute charges through their app or website, which is faster than mailing a letter, though certified mail with a return receipt creates a paper trail if things escalate.
Disputing a Debit Card Charge
Debit cards fall under Regulation E, which covers electronic fund transfers including debit purchases, ATM withdrawals, and ACH debits. Your liability for unauthorized charges depends on how fast you report them:3eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Within 2 business days: your loss is capped at $50 or the total unauthorized amount, whichever is less.
- After 2 business days but within 60 days of your statement: your loss can reach up to $500.
- After 60 days: you could be liable for the full amount of any unauthorized transfers that happen after the 60-day window, with no cap.
That third tier is where people get burned. Credit card liability is capped at $50 regardless of timing. Debit card liability isn’t. If you see an unfamiliar URL on a debit card statement, report it right away. Every day of delay increases your exposure.
What Happens During the Investigation
For a debit card dispute, your bank must investigate and determine whether an error occurred within 10 business days of receiving your report. If it needs more time, it can extend the investigation to 45 days, but only if it provisionally credits your account within those first 10 business days.4Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors The bank may withhold up to $50 of that provisional credit if it reasonably believes the transfer was unauthorized. Once the investigation ends, the bank has three business days to report its findings.
If the bank sides with the merchant, it can reverse the provisional credit, but it must send written notice explaining why and give you at least five business days to cover any resulting negative balance before reporting it. For credit cards, the issuer sends a written explanation of its findings. If the issuer concludes you owe the amount, you get the standard billing cycle to pay before interest accrues.
Disputing a charge itself shouldn’t damage your credit score. For credit card disputes, the law prohibits the issuer from reporting the disputed amount as delinquent during the investigation.2Office of the Law Revision Counsel. 15 USC 1666a – Regulation of Credit Reports Your credit report may show a temporary notation that the account is disputed, but the flag isn’t supposed to affect your score and drops off once the dispute resolves. The real credit risk is failing to pay the undisputed balance on time while focusing on the disputed charge.
Documentation Worth Including
You don’t need a stack of evidence to file a dispute, but documentation speeds up the bank’s investigation and improves your odds. Useful items include:
- Screenshots of the transaction line from your statement, including the URL, date, and amount.
- Search results, if your investigation of the URL turned up a processor with no clear merchant link.
- Communication records from the merchant, such as emails or chat transcripts, especially if you got no response or an unsatisfactory answer.
- Cancellation confirmations for recurring charges you already cancelled. These are the fastest way to win a dispute.
Keep originals and send copies to the bank. If you reported the issue by phone first, follow up in writing so there’s a dated record. Clean documentation moves disputes through the queue with fewer delays.
If the Dispute Doesn’t Go Your Way
If your bank sides with the merchant, you still have options. For credit card disputes, you can escalate by filing a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov or with the FTC at reportfraud.ftc.gov.5Federal Trade Commission. Using Credit Cards and Disputing Charges Neither agency resolves individual disputes, but complaints create regulatory pressure and can prompt a second look from the issuer.
For smaller amounts, small claims court is another route. Filing limits vary by state but generally range from roughly $6,000 to $20,000, and small claims court doesn’t require a lawyer. Before going that far, one more call to the bank’s dispute department, referencing the specific statute that applies to your situation, often produces a different result than the first attempt.