Fraudulent charges on card - how do I find out if this is more serious?

June 19, 2024 6:23 AM

Someone got my debit card info and used it to make big purchases last night. I've put a lock on the card and I'm currently on hold with Chase -- but what are my next steps?

How do I find out just how serious this is? Do I just need to cancel this card and get a new one, or do I have to do All The Things (including governmental)? For example, how do I know if they have my social security number, or my address, or info about my credit cards or access to my medical records, etc.?

posted by tzikeh to Work & Money (5 answers total)

I'd try the AARP fraud helpline. You don't have to be a member, or even retired, to call them.
posted by bunderful at 6:31 AM on June 19

I have experience with Chase. If they determine (however they do) that fraud is involved, they will automatically cancel and replace the card. In other words, this will not be your decision.

I cannot speak authoritatively to your concerns about other information being revealed. I would suspect, however, that if a PIN (or other authenticating information) is required to use the debit card, whoever used the debit card likely has that information.
posted by John Borrowman at 7:05 AM on June 19 [1 favorite]

There's no way to know if whoever it is has your other info. Usually what happens is that your card data is skimmed somewhere local or stolen in one of the big data breaches. Then it's often sold to someone, or whoever has it locally tries to use it. They often run a couple small purchases to test the card, then go for big stuff. Some people go for big stuff right away. Someone once had an exciting shopping spree at Nike and Apple on my card. Someone else ordered like 3 Instacart deliveries.

In any case, next steps are to detail the fraudulent purchases to Chase, which will open a fraud dispute case. They will probably also close the card immediately and send you a new one. Change any autopay stuff that's linked to that card, if you trust it. If you think you might have used the card somewhere shady recently, don't use the new card there anymore. That's about it!

Oh, and look yourself up on Have I Been Pwned. That will tell you more about which companies might have lost your card data.
posted by limeonaire at 7:09 AM on June 19 [2 favorites]

If you are in the US - check all three of your credit reports and put a freeze on your credit. Report the fraud to the credit bureaus, too - this will be available to future potential lenders, and will forestall someone who DOES have your personal information from opening accounts in your name.

If you do online shopping from a laptop, run a full virus scan. Consider getting a browser plug-in that will automatically block you from going to fraudulent sites. Consider changing the password and email account you use to access your Chase account online.

This stuff sucks. Sorry you have to go through this.
posted by Silvery Fish at 9:45 AM on June 19

Unless you have some indication that something else is going on (like inquiries on your credit report), it is unlikely that someone has access to any of the other things you mentioned, especially medical records. Credit cards/debit cards get stolen or cloned every day--it is extraordinarily common. If someone did steal all of that other info, they likely would have tried to open a new account in your name instead of using an existing account because there's less chance you would notice or notice as quickly.

And unless you have reason to believe your hospital/doctor's office got hacked (or you use the same password for multiple sites), none of this would have anything to do with your medical records.
posted by tubedogg at 12:21 PM on June 19 [2 favorites]