Lost or stolen card: the first hour, in order

The liability clock

For a debit card, the loss ceiling climbs as time passes. The FTC’s breakdown is precise: report before the card is used and you are not responsible for any unauthorized charges; report within two business days of learning of the loss and your maximum liability is $50; wait longer and the cap rises to $500 — with the possibility of more if you report even later.

Credit cards are more forgiving. Under the Fair Credit Billing Act, your liability for unauthorized use is capped at $50 no matter what, and most issuers waive even that with a zero-liability promise. The trade-off is that your card number lives on until you cancel it, so the urgency is about stopping further charges, not about your personal ceiling.

Both numbers are floors, not ceilings — issuers routinely eat more than the law requires. But the law is written to reward speed, and the practical effect is the same: the phone call comes first.

Report it before you search for it

The counter-intuitive step is to cancel first and search second. A card that is simply misplaced can be reactivated, but a card that is truly stolen is being spent against your name the longer it stays live. The FTC’s lost-or-stolen guidance is unambiguous: call your bank or card issuer the moment you believe the card is gone.

Most issuers will cancel the number and issue a replacement, and many let you freeze the card in the app first if you think it is merely lost — giving you time to find it without killing the number. But freeze or cancel, the report is what protects you, and it takes minutes.

What the bank will ask you

Have the card type and last four digits ready, plus the date you last used it and where. The issuer will ask whether you recognize recent charges and will lock the card and begin an investigation into anything you flag.

Be honest about uncertainty. If you might have simply dropped the card at a store you visited, say so — the bank will still freeze it, and the context helps them judge whether later charges are yours. Fraud departments are used to customers who genuinely do not know what happened; they are not used to customers who invent a story.

The sequence, in order

1. Call your card issuer Report the card lost or stolen. Ask for confirmation the card is canceled and for a case number.
2. Review the statement activity Go through the last several days of transactions and flag anything you do not recognize.
3. Freeze or note your credit If your wallet had your Social Security card or a driver’s license, add a fraud alert so nobody can open credit in your name.
4. Update merchants billing the card Subscriptions, app stores, and ride apps with the old number need the replacement. You can usually update them in the account settings.
5. Check again after the card arrives Reissued cards carry new numbers, and one stray old-card charge usually surfaces within a billing cycle or two.

After the new card arrives

The reissued card gets a new number, new CVV, and new expiration — which means every merchant with the old number on file silently stops being able to bill it. Some subscription services will flag a failed renewal and email you to update the card; others will simply fail and cancel the subscription on their own terms.

The practical aftermath is a short audit: update app stores and streaming services first, check that payroll and tax refunds are unaffected, and scan the next two statements for any lingering old-card charge. A lost card is a disruption, but handled in order it is a small one — the first call is the whole game.