A “toy shop” charge on your credit card statement — usually showing up as “THE TOY SHOP” or “ToyShop,” often with a Pyatt, Arkansas location and an amount of a few cents or even zero dollars — is almost certainly card-testing fraud, not a purchase you forgot about. Call your card issuer now, report the charge as unauthorized, and ask for a new card number before larger charges follow.
How to Recognize the Charge
The merchant descriptor typically reads “THE TOY SHOP” or “ToyShop,” with Pyatt, Arkansas listed as the location. The dollar amounts are tiny: $0.00, $0.68, and similar sums. Consumer reporting databases show every user who flagged this charge marked it suspicious, and none confirmed it as a legitimate purchase. Reports go back to December 2014 and have continued as recently as May 2026.
One other detail is worth checking. The charge is categorized under a merchant category code for “Medical Services and Health Practitioners Not Elsewhere Classified,” even though the merchant name suggests a toy retailer. Visa’s rules require that a merchant’s assigned category code “most accurately describes the Merchant’s business,” and when the name and code don’t match, extra identifying information is supposed to appear so cardholders aren’t confused.1Visa. Visa Merchant Data Standards Manual A toy shop coded as a medical provider fails that test, and payment processors treat exactly this kind of mismatch as a fraud signal.2LegitScript. Merchant Category Codes
Why It’s Almost Certainly Card Testing
Tiny charges like these are the signature of card testing. Fraudsters who have obtained stolen card numbers — through data breaches, phishing, or criminal forums — need to find out which numbers are still active before trying anything expensive. They push small transactions, often under a dollar, through a merchant account they control or have compromised. Charges under $1 are chosen specifically because they tend not to trigger fraud alerts and tend not to be noticed by the cardholder.3Sift. What Is Card Testing Fraud
A $0.00 charge works as an authorization check. The payment system sends a zero-dollar request to the issuing bank to confirm the card number is valid and the account is open.4Square. Why Are Some of My Customers Seeing a $0 Charge Once a card passes the test, the validated number is used for larger unauthorized purchases or resold.5Visa Canada. What You Need to Know About Card Testing Fraud
The Office of the Comptroller of the Currency identifies small-dollar authorizations as a warning sign of fraud, used to test an account before higher-value fraudulent activity.6OCC. Credit Card and Debit Card Fraud A 68-cent “toy shop” charge is the beginning of the problem, not the end of it.
What to Do Right Now
Speed matters. The faster you cut off the tested card, the less a thief can do with it.
- Call your card issuer using the number on the back of the card or in your banking app. Report the charge as unauthorized, ask the issuer to block the card, and request a replacement with a new account number. This stops the validated number from being used for larger purchases.
- Scroll back through recent statements for other small or unfamiliar charges. Testers sometimes run several small transactions under different merchant names before escalating.
- Turn on transaction alerts in your banking app so every future charge pings your phone in real time.
- Place a fraud alert with one of the three major credit bureaus: Equifax (1-800-525-6285), Experian (1-888-397-3742), or TransUnion (1-800-680-7289). An alert placed with one is shared with the other two.6OCC. Credit Card and Debit Card Fraud
- File a report with the FTC at ReportFraud.ftc.gov, and if the fraud involved the internet, with the FBI’s Internet Crime Complaint Center at ic3.gov.7FTC. Report Fraud
- Report the merchant to the card network. Visa accepts reports through its rules violation form, and Mastercard through its contact portal.8U.S. Bank. How to Report a Merchant to Visa or Mastercard
Your Liability Depends on Credit vs. Debit
Federal law caps what you can be stuck with, but the rules are different for credit and debit cards, and the debit clock is tight.
Credit Cards
The Fair Credit Billing Act caps your liability for unauthorized credit card charges at $50, and most major issuers go further with zero-liability policies.9FTC. Using Credit Cards and Disputing Charges To preserve your full rights, send written notice of the disputed charge to the issuer’s billing inquiry address within 60 days of the statement date. The issuer must acknowledge the dispute within 30 days and resolve it within 90.10CFPB. How Do I Dispute a Charge on My Credit Card Bill While the investigation runs, you don’t have to pay the disputed amount or related finance charges, and the issuer can’t report you delinquent on that balance.
Debit Cards
Protections under the Electronic Fund Transfer Act are less generous. Report within two business days of discovering the unauthorized charge and your liability is capped at $50. Wait up to 60 days after the statement was sent and the cap rises to $500. After 60 days, you can be liable for the full amount of unauthorized transfers that happen after that window closes.11FDIC. Are You a Victim of Fraud Debit protections also don’t cover quality disputes over goods or services — only unauthorized transfers and processing errors.12Federal Reserve Bank of Philadelphia. Credit and Debit Card Issuers Obligations When Consumers Dispute Transactions If the “toy shop” charge hit a debit card, the two-business-day window is the one to beat.