Medium riskBank & Payment Scams

Card Not Present Fraud Scam

In this scam, criminals use stolen card details, obtained through phishing, skimming, or data breaches, to make online or phone purchases where the physical card is not needed, often testing with small charges first.

Quick verdict

Risk level
Medium risk
Scam type
Card fraud (online misuse)
Main red flag
Unfamiliar online charges, often small 'test' amounts, on your card.
What to do first
Freeze the card in your banking app and report the charges to your bank.

What this scam usually looks like

In this scam, criminals use stolen card details, obtained through phishing, skimming, or data breaches, to make online or phone purchases where the physical card is not needed, often testing with small charges first.

Example message pattern

Example pattern — not a real report
Example pattern: Small unfamiliar online charges appear to test your card, followed by larger purchases, all made without your physical card.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • Online charges you do not recognise
  • Small 'test' transactions before larger ones
  • Charges from unfamiliar merchants or countries
  • Alerts for purchases you did not make
  • Your card details entered on a phishing site earlier

What to do

  • Freeze or block the card instantly in your banking app
  • Report unauthorised charges to your bank promptly
  • Enable transaction alerts and two-factor for online payments
  • Use virtual or one-time card numbers where available

If you already clicked or replied

  • Report the fraud to your bank and ask to reverse the charges
  • Order a replacement card if details are compromised
  • Change passwords if your details came from a phishing site
  • Monitor statements closely for further misuse

What not to do

  • Do not ignore small unfamiliar charges
  • Do not enter card details on sites reached via message links
  • Do not delay reporting suspected fraud

Similar scams

Medium risk Bank & Payment

Card Skimming Scam

In a card skimming scam, criminals attach hidden devices to ATMs, fuel pumps, or shop card readers, often with a tiny camera or fake keypad, to copy your card details and PIN and later make fraudulent transactions or card clones.
Medium risk Bank & Payment

Contactless Card Theft Scam

This scam misuses contactless cards and mobile wallets, through theft, lost cards, or relayed taps, to make quick low-value payments or add a stolen card to a wallet before you notice and block it.
High risk Online Shopping

Fake Online Store Scam

This scam sets up a convincing but fake store with very low prices, takes payment, and delivers nothing, a counterfeit, or a cheap substitute.

Frequently asked questions

What is card-not-present fraud?
It is when stolen card details are used for online or phone purchases without the physical card, often after phishing, skimming, or a data breach.
Why are there small charges first?
Criminals test stolen details with small amounts to check the card works before attempting larger purchases. Report any unfamiliar charge quickly.
How do I protect my card online?
Enable transaction alerts and two-factor for payments, use virtual or one-time card numbers where available, and avoid entering details via message links.
I see charges I didn't make. What now?
Freeze the card, report the charges to your bank, ask to reverse them, and order a replacement if your details are compromised.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.