Duplicate charge or unknown charge: two problems, two different first moves

Who this applies to

Consumer credit, debit, and prepaid cards issued in the United States. Which sort you hold decides your deadline, your first phone call, and whether the money is out of your account while the argument runs.

Business and corporate cards commonly sit outside the consumer protections entirely and follow whatever the card agreement says.

Working out which one you have

Two questions, and they are not the same. Is this charge mine at all? And if it is, are two similar postings really two charges? The first three checks answer the first; the last two answer the second.

• Read the descriptor rather than glancing at it. Processors set it, so it often shows a legal entity you have never heard of, an aggregator prefix, and their billing city rather than where you shopped. Search the exact string.
• Search your email for the amount and the surrounding dates, then account for charges that are yours but do not feel like it: authorised users, a partner's second card, a child with the number saved to a console, an annual renewal, a converted trial.
• Watch for the card-testing shape — a very small charge from a merchant you have never used, often followed within hours by a much larger one. A trivial sum is a reason to act faster, not slower.
• For two postings that look alike, check whether one is pending and one posted. A pending line is an authorisation the merchant has reserved but not settled, and one transaction caught mid-flight looks exactly like a duplicate.
• Then check the ordinary causes of two real postings: hotels and car hire authorise more than they eventually charge, a tip posts as its own later line, a re-run of a declined first attempt leaves two authorisations when only one will settle, plenty of sellers bill per parcel rather than per order, and two people on one account can renew the same subscription.

Timing

For a credit-card billing error the federal process runs on a 60-day clock: written notice must reach the issuer's designated billing-inquiries address within 60 days after it sent the first statement showing the error. Not 60 days from the purchase, and not from when you noticed. Our guide to credit-card billing errors covers what the issuer must then do.

On a debit or prepaid card the clock that costs you money is not the error-notice window but the liability tiers for unauthorised use, which step upward from the day you learn the card was compromised. The section below sets out their shape.

Both clocks run while you are being courteous to a merchant, so fix your deadline on the day you find the charge. The one thing worth waiting on is a suspected duplicate where a line is still pending: a day or two while both settle saves you disputing something that was never going to be charged twice.

If you do not recognise the charge: the issuer goes first

1. Call the number printed on the back of your card — not one from a text, an email, a search result, or the descriptor itself. Those are the channels used to turn a small fraud into a large one.
2. Say plainly that you did not authorise the charge, ask what else has been attempted recently including declines, and ask whether the card should be blocked and reissued. Declines you never saw tell you more than the charge that got through.
3. Follow up in writing, through the channel your statement names for billing enquiries. The federal billing-error process is built around notice sent to the address the issuer designates, and some issuers now designate an online or in-app channel instead. Keep proof of sending.
4. Change the password on any account holding the card, turn on transaction alerts, and check where else the number is stored.
5. If the issuer decides against you, ask in writing for the documents it relied on. A CFPB complaint comes next: it is routed to the issuer, which is expected to respond through the portal, usually within about a fortnight, and the filing creates a record. Beyond that the regulator depends on the issuer — the OCC for national banks, a state banking department for state-chartered banks, the NCUA for federal credit unions.

If it is a duplicate of something you did buy: the merchant goes first

Raising a duplicate with the merchant is usually quicker than going to your bank, though how fast varies enormously, and any credit still has to settle before it shows on your balance. Starting there does not pause your deadline with the issuer, and do not run both routes at once — a merchant refund landing on top of a chargeback can be reversed or double-credited and then corrected.

1. Write to the merchant with both postings set out precisely: dates, amounts, the last four digits of the card, and any authorisation or order reference on each. Ask them to void or refund the second specifically.
2. If they say one line is an authorisation rather than a charge, ask for that in writing with a date by which it will fall away, then diarise the date rather than trusting it.
3. If they refuse, ask for the decision and the reason in writing. A merchant unwilling to put that in writing is telling you something useful.
4. Take it to your issuer as a billing error if the merchant refuses or goes quiet — before the notice window closes, not after.

Evidence to keep

• A screenshot of the line while it is pending and another after it posts. Descriptors often change on settlement, and the pending version sometimes carries the detail that identifies the merchant.
• The descriptor string copied exactly, prefix and city included.
• For a duplicate, both postings side by side in one image, plus the receipt for the genuine purchase.
• The date the statement showing the charge was sent to you, not only the date of the charge.
• A dated log of every call: who you spoke to, the reference number, and what you were told would happen next.
• Any message claiming to be from your bank about this charge. Keep it as evidence and do not act on anything in it.

Debit cards: the liability tiers and provisional credit

A debit charge has already left your account, and debit and prepaid disputes fall under a different federal regime — the Electronic Fund Transfer Act and Regulation E. Its error-notice window is comparable to the credit-card one; what is harsher is the liability for unauthorised use, which rises in steps. Report within two business days of learning the card or number was compromised and the rule caps your loss at $50. Report later than that but within 60 days of the statement being sent and the cap rises to $500. Past 60 days from that statement, transfers made after that point can fall on you with no cap. So report by phone at once and confirm in writing the same day.

Those figures and day counts sit in Regulation E, and a bank's own policy is often more generous than the floor the rule sets. Confirm the current ones in the CFPB's guidance on debit-card and prepaid-card errors — not the credit-card sources linked below, which do not cover this regime.

Provisional credit is misunderstood more than anything else here. Where an investigation runs past the short initial period, generally ten business days from your notice, the rule requires the bank to credit the disputed amount back temporarily while it works. It is conditional rather than automatic: a bank can require written confirmation of a phone report first, and the periods run longer for new accounts and for some point-of-sale and foreign transactions. Ask your bank whether it applies to your dispute and by when, rather than assuming it will land.

It is also reversible. If the investigation goes against you the money can be taken back out. Protections around what happens immediately afterwards exist but are narrow, so check the CFPB's debit-card error-resolution guidance rather than assuming either that you are covered or that every resulting fee is yours. Do not spend it, and if rent or a direct debit falls due while the dispute runs, say so when you report the charge.

Exceptions and limits

• A charge you made and forgot is not fraud. Reporting your own transaction as unauthorised is treated seriously and can cost you the account, so identify the merchant before you use the word.
• Spending by someone you added as an authorised user is usually treated as authorised, and disputing it as fraud rarely goes anywhere. Where authority was withdrawn, or the use went well past what you allowed, the position is less clear-cut — raise it with the issuer and describe what happened rather than reaching for the word.
• A merchant trading under a different legal name is not a fraud case. It is a merchant conversation, and often not even a dispute.
• Card-network chargeback rules are private contracts between issuers, acquirers, and merchants. They are not consumer law and they generally give you nothing you can enforce directly. The law gives you a process and deadlines, not a result.
• App-store and platform-billed subscriptions are charged by the platform, so the refund request goes to the platform, not the developer.
• If the same number keeps being hit after a reissue, or you find accounts you did not open, that is identity theft rather than one bad charge. It has its own federal reporting and recovery process on a dedicated official site — find the FTC's identity-theft reporting site and work from there.

Official sources

• CFPB — how do I dispute a charge on my credit card bill? ↗
• CFPB — how to fix mistakes in your credit card bill ↗
• CFPB — getting a refund on something bought with a credit card ↗
• FTC — free trials, auto-renewals, and negative-option subscriptions ↗

Rules referenced in this guide, named so you can read the current text yourself:

• The federal billing-error process for consumer credit cards comes from the Fair Credit Billing Act and its implementing regulation. The CFPB pages linked above set the process out in plain language; confirm the notice window and the issuer's response deadlines there before relying on the 60 days stated above.
• Debit-card and prepaid-card errors are governed by a separate federal regime, the Electronic Fund Transfer Act and Regulation E, which sets the reporting deadlines, the liability tiers for unauthorised transfers, the investigation timelines, and the circumstances in which provisional credit is required. None of the sources linked above covers that regime — look up the CFPB's own guidance on debit-card and prepaid-card errors and confirm the current periods and figures there before relying on them.
• Card-network chargeback rules are contractual arrangements between issuers, acquirers, and merchants. They are not consumer protection law and they generally give you nothing you can enforce directly.
• Repeated fraud on the same identity, rather than on a single card, is handled through the FTC's identity-theft reporting and recovery process, which runs on its own dedicated official site. Search for it by name rather than following a link someone sent you.