Weird Charge? How to Identify, Dispute, and Report It

An unknown charge on your credit card usually has one of three explanations: a legitimate purchase billed under a name you don’t recognize, a subscription you forgot about, or fraud. Work through them in that order. Most “weird” charges turn out to be the first, but if you can’t identify the merchant within a few minutes of checking, treat it as unauthorized and dispute it with your card issuer — federal law caps your liability at $50 for credit cards, and often at zero, but only if you act inside the deadlines.

Identify the Charge Before You Call

The short string of text on your statement is called a merchant descriptor. Descriptors are cryptic by design: card networks cap them at roughly 20 to 25 characters, so brand names get truncated, and many businesses bill under a legal or holding-company name rather than the storefront you know.¹ Payment services such as Apple Pay may add their own prefix, and small businesses that use aggregators like Stripe or Square sometimes show the aggregator’s name on your statement instead of the actual merchant.²

Two more sources of confusion are worth ruling out. Hotels, gas stations, and rental-car companies place pre-authorization holds that don’t always match the final purchase amount. And a free trial you started weeks ago may have quietly converted into a paid subscription.

A few quick checks resolve most of these:

Search the exact descriptor string in quotation marks. Forums and lookup databases catalog cryptic codes.²
Search your email, including spam, for the exact dollar amount. Automated receipts often land there.
Check your card app for the four-digit merchant category code, which identifies the type of business.
If the descriptor mentions Stripe, use Stripe’s dedicated lookup to identify the underlying business. Brex runs a similar searchable index of descriptors.³⁴
Ask anyone else on the account whether they made the purchase.

A Tiny Charge Is Not Automatically Harmless

A charge for a few cents or a dollar with no recognizable merchant is a red flag for card-testing fraud, in which criminals run small transactions against batches of stolen numbers to see which cards are still active. The ones that go through get used for larger purchases or resold.⁵ The Office of the Comptroller of the Currency treats small-dollar test authorizations as a fraud warning sign and advises contacting your issuer, blocking or replacing the card, and considering a new account number entirely.⁶ Report it no matter how small.⁷

Disputing an Unauthorized Credit Card Charge

Credit card holders have the strongest federal protections available under the Fair Credit Billing Act, an amendment to the Truth in Lending Act, and its implementing regulation, Regulation Z.⁸

Your Maximum Liability

Federal law caps your liability for unauthorized credit card use at $50, and that ceiling applies only if the issuer gave you notice of the limit and a way to report loss or theft.⁹ For unauthorized charges made by phone, online, or by mail — where the physical card wasn’t lost or stolen — your liability is zero.¹⁰

Visa and Mastercard both maintain voluntary zero-liability policies that eliminate even the $50 exposure for virtually all unauthorized transactions on their networks, including in-store, online, phone, and ATM transactions. Both require you to have used reasonable care with the card and to report unauthorized use promptly, and neither policy covers certain commercial or unregistered prepaid cards.¹¹¹²

The Formal Dispute

To lock in full FCBA rights, send a written dispute to the card issuer’s billing-inquiry address — not the payment address — within 60 days of the date the first statement containing the error was mailed to you.¹³ Include your name and account number, the date and amount of the disputed charge, and why you believe it’s an error.¹⁴ Certified mail with a return receipt creates a paper trail. Most issuers also accept disputes online or by phone, and many banking apps let you tap the transaction and file within seconds; the written letter still matters when you want the statutory clock and protections to be unambiguous.

Once the issuer receives your notice, it must acknowledge the dispute in writing within 30 days unless it resolves the matter sooner, and it must complete its investigation within two billing cycles, capped at 90 days.¹⁵ During that window, the issuer cannot try to collect the disputed amount, charge interest on it, report your account as delinquent because of the unpaid disputed amount, or close or restrict your account for exercising your rights.¹⁶ Keep paying the undisputed portion of the bill.

If the issuer finds an error, it must correct the account and refund any related fees or interest. If it concludes the charge was valid, it must explain in writing and, on request, send you copies of the documents it relied on. You then have 10 days to challenge that outcome.¹⁷ If you’re still unsatisfied, file a complaint with the Consumer Financial Protection Bureau.

If the Charge Was on a Debit Card

Debit card protections come from the Electronic Fund Transfer Act and Regulation E, not the FCBA, and they are less forgiving because timing controls how much money you can be on the hook for.¹⁰ Your liability rises the longer you wait:

Report within two business days of learning of the loss or theft: liability is capped at the lesser of $50 or the amount taken before you notified the bank.¹⁸
Report after two business days but within 60 days of the statement: liability can rise to $500.¹⁹
Report after 60 days: potentially unlimited liability for transfers the bank can show a timely report would have prevented.²⁰

When the card number was stolen but the physical card wasn’t, your liability is zero as long as you report within 60 days of the statement.¹⁰ The bank carries the burden of proving a transfer was authorized. Negligence like writing a PIN on the card does not raise the statutory caps.¹⁸

After you notify the bank, it generally has 10 business days (20 for accounts open less than 30 days) to investigate.²¹ It can take up to 45 calendar days total — 90 days for point-of-sale debit transactions, international transfers, and new accounts — but only if it provisionally credits your account (minus up to $50) within the initial 10-day window.²² You have use of that provisional credit during the investigation. The bank must report results within three business days of finishing, correct errors within one business day, and if it reverses a provisional credit, honor checks and preauthorized payments for five business days after notice.²³

Charges From Subscriptions You Don’t Remember Signing Up For

A recurring charge with no theft behind it still isn’t necessarily yours to pay. Charging someone for products or services they didn’t order is illegal under FTC guidance, and unordered merchandise can be kept as a free gift with no obligation to pay for it or return it.²⁴

The Restore Online Shoppers’ Confidence Act makes it unlawful to bill a consumer through a negative-option feature — automatic renewals, continuity plans, trial-to-paid conversions — unless the seller clearly discloses all material terms before collecting billing information, obtains express informed consent, and provides a simple way to stop recurring charges.²⁵ ROSCA also bans “data pass,” where one merchant hands your billing information to a third-party seller without your knowledge.

In October 2024 the FTC finalized an update to its 1973 Negative Option Rule, known as the “click-to-cancel” rule. It was published in the Federal Register on November 15, 2024, with key provisions effective May 14, 2025, and it requires sellers to make cancellation at least as simple as sign-up, disclose all material terms before taking billing information, and get unambiguous affirmative consent before charging.²⁶ The rule reaches negative-option programs in every medium.

State law sometimes goes further. California’s Automatic Renewal Law requires clear, conspicuous renewal terms, affirmative consent (pre-checked boxes don’t count), and a post-purchase confirmation with cancellation instructions. If you signed up online, the business must let you cancel online without having to call a live person or navigate unnecessary steps.¹⁴ Goods or services delivered under an improperly authorized subscription are treated as an unconditional gift. Amendments effective July 1, 2025, added reminder notices before free trials convert and advance written notice before price increases.

Charges Routed Through PayPal or Venmo

Digital wallet disputes work differently. PayPal takes reports of unauthorized activity through its Resolution Center or the “Report a Problem” feature in the app and commits to an update within 10 days.²⁷ Venmo’s Purchase Protection reimburses the full payment when an item never arrives or is significantly different from its description, but it covers only certain transaction types: purchases from business profiles, Venmo Debit Card transactions, in-app purchases, and peer-to-peer payments the sender manually tagged as “goods and services.” A standard person-to-person transfer isn’t covered.²⁸ Because money leaves a linked debit account immediately, provisional credits don’t arrive as fast as they might through a traditional bank dispute.

Steps to Take Once You’re Sure It’s Fraud

Call the number on the back of the card or use the issuer’s app right away. For debit cards, reporting within two business days is what keeps liability at $50.²¹
Ask for a new card or account number if the card looks compromised.⁶
Follow the phone call with a written dispute to the billing-inquiry address to preserve the full FCBA or Regulation E timeline. Keep copies, and send by certified mail if you can.¹³
Turn on real-time transaction alerts so any follow-up fraud shows up immediately.

When It Looks Bigger Than One Charge

A single strange charge is often an isolated compromise, but several unfamiliar charges — or new accounts you didn’t open — point toward identity theft. IdentityTheft.gov is the federal reporting site and generates a step-by-step recovery plan with sample letters.²⁹

Placing a fraud alert with any one of the three nationwide credit bureaus — Equifax, Experian, or TransUnion — is free, and the bureau you contact must notify the other two. An initial fraud alert lasts one year and is renewable. Confirmed victims with a police report or FTC Identity Theft Report can request an extended fraud alert lasting seven years.³⁰ A security freeze, also free, blocks new creditors from pulling your report at all, though it won’t stop fraud on accounts you already have.

Where to Escalate if the Issuer Won’t Cooperate

The Consumer Financial Protection Bureau takes complaints about banks, credit card issuers, and other financial companies, and companies respond to more than 99% of forwarded complaints on time.³¹ The FTC takes fraud reports at ReportFraud.ftc.gov.²⁹ State attorneys general offer another route: their consumer protection divisions mediate disputes, investigate companies, and enforce state deceptive-practices statutes.³²

1
Chargebacks911. Statement Descriptors
2
Airwallex. What Is This Charge on My Credit Card
3
Stripe. Charge You Don’t Recognize From Stripe
4
Brex. Charge Finder
5
Mastercard. Card Testing Fraud Explained
6
OCC. Credit Card and Debit Card Fraud
7
Equifax. How to Help Prevent Credit Card Fraud
8
Discover. Fair Credit Billing Act
9
CFPB. Regulation Z Section 1026.12
10
FDIC. Are You Protected From Fraud
11
Visa. Visa Zero Liability Policy
12
Mastercard. Zero Liability Protection
13
FTC. Using Credit Cards and Disputing Charges
14
California Attorney General. Credit Cards – Dispute a Charge
15
CFPB. Regulation Z Section 1026.13
16
NYC Bar. Billing Error Disputes
17
Investopedia. Fair Credit Billing Act
18
CFPB. Regulation E Section 1005.6
19
Cornell Law Institute. 15 U.S.C. Section 1693g
20
Consumer Compliance Outlook. Consumer Liability Under Regulation E
21
CFPB. How Do I Get My Money Back After an Unauthorized Transaction
22
Consumer Compliance Outlook. Error Resolution Under Regulations E and Z
23
CFPB. Regulation E Section 1005.11
24
FTC. What to Do if Youre Billed for Things You Never Got
25
Office of the Law Revision Counsel. 15 U.S.C. Chapter 110 – ROSCA
26
Federal Register. Negative Option Rule – 89 FR 90476
27
PayPal. How Do I Report an Unauthorized Transaction
28
Venmo. Purchase Protection
29
FTC. Report Identity Theft
30
Equifax. Credit Fraud Alerts
31
CFPB. Consumer Response Annual Report
32
NAAG. Consumer Protection