1. Monitor all sensitive information and accounts for changes:

   Consumers should regularly review their accounts online if possible, and at a minimum examine their monthly statements closely. Consumers should report even small problems immediately as some thieves may process a small charge or debit just to see if the account is live, or whether the consumer notices. Fraudulent charges may occur many months after information is stolen. Even if consumers think the PIN on their debit card was not stolen, they should consider changing the PIN to be on the safe side.

2. Contact creditors/bank if you suspect fraud:

   Consumers should alert their bank or card provider immediately if they suspect an unauthorized debit or charge. If fraudulent charges appear, the consumer should ask the card provider to close access to the account and issue a new card before more transactions come through. Under federal law and other applicable rules, consumers are generally not responsible for unauthorized debits or charges to credit or debit card accounts, as long as they report them quickly to their bank or card providers.

3. Follow-up with all fraud claims/suspicious activity:

   If consumers find a fraudulent transaction, they should call the bank or card provider’s toll-free customer service number immediately and ask how they can follow up with a written communication. When consumers communicate in writing, they should be sure to keep a copy for their own records. Consumers should write down the dates on which they make follow-up calls and keep this information together in a file.

4. Be cautious when shopping online:

   Only enter credit card information on trusted sites, that are secure, and offer a secure payment portal. If you’re new to the eCommerce store, look for an option to pay through PayPal so none of your personal information is handled by the website owners. PayPal also backs most purchases done through their portal, this gives you an extra layer of protection.

5. Never release personal details over the phone or by email:

   A common scheme, known as “phishing,” involves a scammer contacting a consumer over email or phone and asking to verify account information. Banks and credit unions never ask for account information through email. If consumers receive this type of email, they should immediately contact their card provider and report it. If consumers receive this type of phone call, they can ask for a call-back number to verify if the requester is their financial institution. If someone asks you to wire transfer fund immediately, it’s usually a red flag for fraud.

If consumers aren’t satisfied with how their bank or card provider responds to a report of fraudulent charges, they can submit a complaint to the CFPB. Card providers should investigate charges and respond quickly. Consumers have a right to see the results of the bank or card company’s investigations.