Credit Card Fraud

How thieves get your card number — from skimmers at gas pumps to phishing — and how the law protects you when fraud happens.

How the Scam Works

Credit card fraud is the most common form of identity theft in the United States. Thieves obtain card numbers in many ways:

•Data breaches: Massive corporate breaches (Target, Equifax, etc.) release millions of card numbers onto the dark web.
•Skimming devices: Small electronic readers installed on gas pumps, ATMs, or store card readers capture your card number.
•Phishing: Emails or texts tricking you into entering card information on a fake website.
•Phone scams: "Customer service" calls asking you to "verify" your card.
•Mail theft: Stealing new or replacement cards from mailboxes.
•Restaurant or store insider theft: Dishonest employees swipe your card twice — once to charge you, once on a personal device.
•"Card not present" fraud: Using a stolen card number online or by phone where the physical card isn't needed.

Once they have your card number, thieves either make purchases directly or sell the numbers on the dark web. Lower-value cards sell for $5–$15; cards tied to high-credit-limit accounts can sell for $100 or more.

Good news for victims: Federal law (The Fair Credit Billing Act) limits your liability for unauthorized credit card charges to $50 — and most card issuers waive even that. You are protected as long as you report fraud promptly. Debit cards have weaker protections — that's why credit cards are generally safer for everyday purchases.

Real-World Example

💳 Real Case

A 68-year-old retiree in New Jersey used his debit card at a gas pump in March 2024. The pump had a skimmer attached to the credit card reader. Within 48 hours, thieves used his card information to make $4,200 in purchases — gift cards from Walmart, a TV from Best Buy, and three sets of car tires. Because it was a debit card (linked directly to his checking account), his bank initially refunded only $1,800 of the $4,200, citing his "responsibility" for delayed reporting. He had to file a written complaint with the CFPB to recover the rest.

Warning Signs

•Charges you don't recognize on your statement — even small ones (thieves "test" cards with $1 charges first).
•A card reader feels loose, wobbles, or looks oddly shaped. Skimmers are usually overlay devices.
•Unexpected calls or texts asking you to "verify" recent purchases.
•A bill for a new credit card you didn't apply for.
•Missing mail — could mean thieves took your bills or a new card.
•A charge that occurs while you're holding your card in a different city or country.

How to Protect Yourself

✓Use credit cards instead of debit cards for everyday purchases. The fraud protections are stronger.
✓Set up transaction alerts with your card issuer — get a text/email for every purchase over $X.
✓Check statements monthly. Even small unfamiliar charges should be disputed.
✓Inspect card readers before use. Wiggle the reader — skimmers often come loose.
✓Pay inside at gas stations when possible — skimmers are most common at outdoor pumps.
✓Use chip and tap-to-pay instead of swiping the magnetic stripe whenever possible.
✓Freeze your credit at all three bureaus to stop thieves from opening new cards in your name (free at Equifax, Experian, TransUnion).
✓Use virtual card numbers for online shopping (offered by many card issuers — a temporary number that can't be reused if stolen).
✓If you're a victim: Call the card issuer immediately (use the number on the card). Dispute fraudulent charges in writing within 60 days. Report to IdentityTheft.gov.

Think Your Identity Is Compromised?

Use our free Scam Checker to instantly analyze any phone number, email, or website for known scam patterns.