Medium riskBank & Payment

Card Not Present Fraud Scam

In this scam, criminals use stolen card details, obtained through phishing, skimming, or data breaches, to make online or phone purchases where the physical card is not needed, often testing with small charges first.

Quick verdict

Risk level
Medium risk
Scam type
Card fraud (online misuse)
Main red flag
Unfamiliar online charges, often small 'test' amounts, on your card.
What to do first
Freeze the card in your banking app and report the charges to your bank.

How this scam works

In this scam, criminals use stolen card details, obtained through phishing, skimming, or data breaches, to make online or phone purchases where the physical card is not needed, often testing with small charges first.

Bank and payment scams weaponise your trust in your bank and your fear of losing money. They fake fraud alerts, blocked payments, or refunds, then steer you into moving money to a "safe account", sharing a one-time code, or approving a transfer, actions a genuine bank will never ask of you.

In short, the giveaway is usually simple: Unfamiliar online charges, often small 'test' amounts, on your card. Freeze the card in your banking app and report the charges to your bank.

Scammers rotate tactics constantly, the same operation may also run the Card Skimming Scam and the Contactless Card Theft Scam. See the full Bank & Payment Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • Online charges you do not recognise
  • Small 'test' transactions before larger ones
  • Charges from unfamiliar merchants or countries
  • Alerts for purchases you did not make
  • Your card details entered on a phishing site earlier

What the message looks like

Example pattern, not a real report
Example pattern: Small unfamiliar online charges appear to test your card, followed by larger purchases, all made without your physical card.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: Unfamiliar online charges, often small 'test' amounts, on your card.

The scale of it

#1
copycat bank fraud alerts were the most-reported text scam in the US in 2022
Source: US Federal Trade Commission
£459.7M
lost to authorised push payment (APP) fraud in the UK in 2023
Source: UK Finance

How to protect yourself

  • Freeze or block the card instantly in your banking app
  • Report unauthorised charges to your bank promptly
  • Enable transaction alerts and two-factor for online payments
  • Use virtual or one-time card numbers where available

Already responded? Do this now

  • Report the fraud to your bank and ask to reverse the charges
  • Order a replacement card if details are compromised
  • Change passwords if your details came from a phishing site
  • Monitor statements closely for further misuse

Mistakes to avoid

  • Do not ignore small unfamiliar charges
  • Do not enter card details on sites reached via message links
  • Do not delay reporting suspected fraud

Related scams to know

Medium risk Bank & Payment

Card Skimming Scam

In a card skimming scam, criminals attach hidden devices to ATMs, fuel pumps, or shop card readers, often with a tiny camera or fake keypad, to copy your card details and PIN and later make fraudulent transactions or card clones.

Created by Scam or Safe Editorial Team
Medium risk Bank & Payment

Contactless Card Theft Scam

This scam misuses contactless cards and mobile wallets, through theft, lost cards, or relayed taps, to make quick low-value payments or add a stolen card to a wallet before you notice and block it.

Created by Scam or Safe Editorial Team
High risk Online Shopping

Fake Online Store Scam

This scam sets up a convincing but fake store with very low prices, takes payment, and delivers nothing, a counterfeit, or a cheap substitute.

Created by Scam or Safe Editorial Team

Common questions

What is card-not-present fraud?
It is when stolen card details are used for online or phone purchases without the physical card, often after phishing, skimming, or a data breach.
Why are there small charges first?
Criminals test stolen details with small amounts to check the card works before attempting larger purchases. Report any unfamiliar charge quickly.
How do I protect my card online?
Enable transaction alerts and two-factor for payments, use virtual or one-time card numbers where available, and avoid entering details via message links.
I see charges I didn't make. What now?
Freeze the card, report the charges to your bank, ask to reverse them, and order a replacement if your details are compromised.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.