Medium riskBank & Payment

Unauthorised Direct Debit Scam

The unauthorised direct debit scam involves payments being set up or taken from your account without your genuine agreement. Fraudsters may use leaked bank details to create recurring payments in your name, or a dishonest company may keep taking money after you have cancelled. Charges are often small or irregular so they slip past unnoticed for months. Reviewing your statements regularly and knowing your dispute rights are the best ways to catch and reverse these payments.

Quick verdict

Risk level
Medium risk
Scam type
Account misuse scam
Main red flag
A direct debit or recurring payment you do not recognise, or charges that continue after you thought you had cancelled them.
What to do first
Check your recent statements, then contact your bank to query or cancel any payment you did not authorise.

How this scam works

The unauthorised direct debit scam involves payments being set up or taken from your account without your genuine agreement. Fraudsters may use leaked bank details to create recurring payments in your name, or a dishonest company may keep taking money after you have cancelled. Charges are often small or irregular so they slip past unnoticed for months. Reviewing your statements regularly and knowing your dispute rights are the best ways to catch and reverse these payments.

Bank and payment scams weaponise your trust in your bank and your fear of losing money. They fake fraud alerts, blocked payments, or refunds, then steer you into moving money to a "safe account", sharing a one-time code, or approving a transfer, actions a genuine bank will never ask of you.

In short, the giveaway is usually simple: A direct debit or recurring payment you do not recognise, or charges that continue after you thought you had cancelled them. Check your recent statements, then contact your bank to query or cancel any payment you did not authorise.

Scammers rotate tactics constantly, the same operation may also run the Fake Bank Alert Text Scam and the Bank Impersonation Phone Scam. See the full Bank & Payment Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • A direct debit or card payment appears for a company you have never knowingly dealt with.
  • Small, regular amounts leave your account that are easy to overlook on a busy statement.
  • A firm continues taking payments after you cancelled a subscription, trial, or membership.
  • You receive a confirmation email or letter about a service you did not sign up for.
  • The payment reference is vague, uses an unfamiliar trading name, or does not match anything you bought.

What the message looks like

Example pattern, not a real report
Example pattern: You scan your bank statement and notice a monthly payment of £4.99 to a company name you do not recognise. It has been taken for several months. You never signed up for anything, but your card or account details may have been leaked and used to set up a recurring charge.

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: A direct debit or recurring payment you do not recognise, or charges that continue after you thought you had cancelled them.

The scale of it

#1
copycat bank fraud alerts were the most-reported text scam in the US in 2022
£459.7M
lost to authorised push payment (APP) fraud in the UK in 2023
Source: UK Finance

How to protect yourself

  • Review your bank and card statements line by line at least once a month and flag anything you do not recognise.
  • Contact your bank to query or cancel an unauthorised direct debit, as you can usually stop one through your bank directly.
  • Ask your bank about the Direct Debit Guarantee, which can allow a full and immediate refund for payments taken in error or without authority.
  • Keep records of any cancellation you made with a company, including dates and reference numbers, in case you need to dispute later.

Already responded? Do this now

  • Report the unrecognised payments to your bank as soon as you spot them and ask for them to be cancelled and refunded.
  • Request a refund under the Direct Debit Guarantee where it applies, and ask the bank to investigate how the payment was set up.
  • Change your online banking password and review whether your card details may have been exposed in a data breach.
  • Ask your bank whether your account or card should be reissued if you believe your details are circulating.

Mistakes to avoid

  • Do not assume a small, unfamiliar charge is harmless, as fraudsters often start small to avoid detection.
  • Do not contact a number from the suspicious charge itself, as it may connect you to the people behind it.
  • Do not delay disputing a payment, since acting quickly improves your chances of a full refund.

Related scams to know

Common questions

How can a payment be set up without my permission?
If your bank details are leaked or sold, fraudsters or dishonest firms can sometimes use them to create a direct debit or recurring card payment. Banks have checks in place, but some payments still slip through, which is why reviewing your statements regularly helps you catch them early.
What is the Direct Debit Guarantee and does it help me?
The Direct Debit Guarantee is a protection that can entitle you to an immediate refund from your bank if a direct debit is taken in error or without your authority. Ask your bank to apply it; it is one of the strongest tools for reversing unauthorised payments.
A company keeps charging me after I cancelled. Is that a scam?
It may be a genuine error, or it could be a dishonest practice. Either way, you can ask your bank to cancel the payment and dispute the charges. Keep proof of your cancellation, and report the firm if it ignores reasonable requests to stop.
Will I get my money back?
Often yes, particularly for direct debits covered by the guarantee or for clearly unauthorised card payments. The sooner you report it, the better. Your bank will usually investigate, and many people recover funds taken without their agreement.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.