The playbook

There's a charge you don't recognize. Now what?

Compare the statement with receipts and account records. If you suspect unauthorized activity, contact your issuer promptly; do not wait to finish every lookup. The steps below help you organize an inquiry.

First, learn to read the line

A statement line can contain several fields. This is an illustrative example, not a real customer transaction:

PURCHASE 07/21 SQ *DAILY GRIND SAN JOSE CA CARD 1234

bank date and transaction fields possible processor prefix and business label city, state, or a support phone number illustrative masked card identifier

Descriptor length and formatting depend on the issuer and payment route. A prefix, abbreviation or location can be a useful lead, but it does not establish the seller or consent. Preserve the full raw line when you use the descriptor lookup, then inspect the entry's evidence status.

Step 1 — Search your email for the amount

Not the merchant name — the amount. Search your inbox for "$23.94" and receipts appear that no amount of squinting at the descriptor would surface. Check the spam folder and any secondary addresses, especially ones tied to app stores.

Step 2 — Interrogate the household (kindly)

Check with authorized users and review family app-store or saved-card purchase records. Ask about the date and amount, and compare the receipt rather than accepting a familiar brand name as proof of authorization. This is an inquiry step, not a finding about how common fraud is.

Step 3 — Think in trials and renewals

Check subscriptions and trial enrollment records, including annual plans. An amount such as $9.99 is only an example; the amount alone cannot establish a renewal. Compare the billing date, enrolled account, terms and any cancellation confirmation before deciding what the payment represents.

Step 4 — Check pending vs. posted

Record whether each entry is pending or posted. A pending authorization and a posted payment can be separate stages of one purchase, but the labels alone do not prove that a duplicate will disappear. Ask the merchant or issuer how the entries are related and which amount has settled. Report suspected unauthorized activity promptly even if the entry is pending.

Step 5 — Ask the right organization

For a purchase you recognize, official merchant support can clarify the order, renewal or refund record. For suspected unauthorized activity, contact the issuer promptly instead of waiting for a merchant response. Use official account pages or contact details, and check the linked entry's evidence limitations. Neither route guarantees a refund or a fixed turnaround.

Step 6 — If it's really fraud, move fast

A missing receipt alone does not establish fraud. If you suspect an unauthorized payment, use official issuer channels and describe the facts:

Ask about account controls. Check the issuer's lock or freeze options and which payments they cover; a lock is not a guarantee that every pending or recurring payment stops.
Contact the issuer promptly using its official app or the number on your card. Ask whether replacement is appropriate and how to follow up in writing. An unfamiliar descriptor does not prove compromise.
Review other entries. Report suspected unauthorized payments regardless of amount and keep the statement and inquiry records.

Credit and debit reporting rules differ. CFPB says to report a credit-card billing problem promptly and send a written billing-error notice within 60 calendar days after the charge appears on the statement. For an unauthorized debit-card transaction when the card is still in your possession, CFPB describes reporting within 60 days after the statement is available. A lost or stolen debit card has a shorter, two-business-day reporting period to limit liability; that clock concerns learning of the loss or theft, not every unfamiliar transaction. Ask your issuer which procedure applies and retain your notice. CFPB credit-card billing disputes; CFPB unauthorized card transactions. Sources inspected October 9, 2026.

Prevent the next mystery

If your issuer offers virtual cards, check their limits and recurring-payment behavior. A payment control does not itself cancel the service contract.
Put a calendar reminder on every free trial the moment you start it.
Once a quarter, scan a full statement line by line — five minutes, and forgotten subscriptions have nowhere to hide.

Stuck on a specific line? Paste it into the decoder or browse the full ledger.