Can You Sue Over Unauthorized Credit Card Charges Made Online?

Finding an unauthorized charge on your credit card can be stressful. It may be a small online subscription you never approved, a purchase from a website you never visited, or a large charge from a company you do not recognize. Sometimes the card issuer fixes the problem quickly. Other times, the bank denies the dispute, keeps the charge on the account, adds interest or fees, or reports the account as late.

That is when many consumers start asking a bigger question: Can I sue over unauthorized credit card charges made online?

The answer is sometimes yes, depending on the facts. Federal law gives consumers important rights when credit cards are used without permission, when billing errors appear on a statement, and when a disputed credit card balance damages a consumer’s credit report. The key laws often include the Truth in Lending Act, the Fair Credit Billing Act, Regulation Z, and sometimes the Fair Credit Reporting Act.

This article explains what those laws may do, what steps consumers should take, and when an unauthorized online credit card charge may become a legal claim.

What Counts as an Unauthorized Credit Card Charge?

An unauthorized credit card charge usually means someone used your credit card account without your permission. That can happen when your card number is stolen, when an online account is hacked, when a merchant processes a charge you never approved, or when a company keeps billing you after you cancelled.

Common examples include:

1. A purchase from an online store you never used
2. Charges after your card information was stolen in a data breach
3. A subscription that continues after cancellation
4. A digital service you never signed up for
5. A merchant charging more than you agreed to pay
6. A family member, former partner, or employee using your card without authority
7. A trial offer that turns into repeated charges without proper authorization

Not every bad charge is legally the same. A charge for something you never bought may be different from a charge for something you bought but never received. A billing mistake may be different from identity theft. Still, federal credit card laws often give consumers dispute rights for unauthorized charges and other billing errors.

The FTC explains that federal law limits a consumer’s responsibility for unauthorized credit card charges to $50, and that unauthorized charges may also be a sign of identity theft. Federal law also provides that, except as allowed by the credit card liability statute, a cardholder does not incur liability for unauthorized use of a credit card.

The Main Federal Law: TILA and the Fair Credit Billing Act

The Truth in Lending Act is a federal consumer credit law. The Fair Credit Billing Act amended TILA and created important rights for consumers who dispute credit card billing errors. The FTC describes the Fair Credit Billing Act as requiring prompt written acknowledgment of consumer billing complaints, investigation of billing errors, and protection against adverse credit action while the dispute is being investigated.

For consumers, that means the issue is often not just the original unauthorized charge. The legal problem may also involve how the credit card company handled the dispute.

A card issuer may violate federal law if it fails to reasonably investigate a proper billing error notice, refuses to correct a valid error, keeps adding improper fees, or reports the disputed amount in a way federal law does not allow.

The 60 Day Dispute Deadline Matters

If you see an unauthorized charge or billing error, act quickly. The FTC states that credit card billing errors must be disputed in writing within 60 days after the first statement containing the billing error is sent to you.

That 60 day rule is one reason consumers should not rely only on a phone call or a short online chat with customer service. Many people call the bank, assume the issue is handled, and then later learn that the written dispute deadline has passed.

A strong dispute should usually include:

1. Your name and account information
2. The date and amount of the disputed charge
3. The merchant name shown on the statement
4. A clear statement that you did not authorize the charge
5. Any proof you have, such as cancellation confirmations, emails, screenshots, fraud alerts, or police reports
6. A request that the charge, interest, fees, and related reporting be corrected

Consumers should keep copies of everything sent to the card issuer. If the dispute is mailed, certified mail or another trackable method can help prove when it was sent.

Your Liability May Be Limited to $50

One of the most important consumer protections is the federal limit on liability for unauthorized credit card use. The FTC states that federal law limits responsibility for unauthorized credit card charges to $50. The United States Code likewise provides that credit card holder liability for unauthorized use is limited and, in the relevant circumstances, not more than $50.

Many card issuers offer even stronger zero liability protections as a matter of card network policy or customer service. But even when the issuer claims the consumer is responsible, federal law may still limit what the consumer can be made to pay.

This is especially important when the issuer denies the fraud claim and says something like:

1. The transaction used your correct billing information
2. The charge came from your device or IP address
3. The merchant says the order was delivered
4. The card was not physically stolen
5. You previously bought from the same merchant

Those facts may matter, but they do not automatically prove that the charge was authorized. Online fraud can involve stored payment credentials, hacked shopping accounts, compromised email accounts, and identity theft. A consumer should not assume the bank’s first denial is the final word.

What the Credit Card Company Must Do After a Proper Dispute

Regulation Z contains detailed rules for credit card billing error disputes. If the creditor determines that a billing error occurred, it must correct the error, credit the account for the disputed amount and related finance or other charges, and send a correction notice.

The creditor also has limits on what it can do while the dispute is pending. CFPB Regulation Z materials state that a creditor must not issue an adverse credit report because the consumer fails to pay the disputed amount or related charges during the dispute process, although the creditor may report that the amount or account is disputed.

This matters because some consumers are harmed twice. First, they are charged for something they did not buy. Second, their credit is damaged when the card issuer treats the disputed balance as unpaid.

That second harm can be serious. A wrongful late payment on a credit report can affect mortgage applications, car loans, credit card approvals, insurance pricing, apartment applications, and employment related background checks.

When the FCRA May Also Apply

The Fair Credit Reporting Act may apply when the unauthorized charge leads to inaccurate credit reporting. For example, the card issuer might report a late payment, a charged off account, a high balance, or a collection account based on a charge the consumer says was unauthorized.

The FCRA often becomes especially important after the consumer disputes the credit reporting with Equifax, Experian, or TransUnion. The CFPB explains that consumers can dispute errors on their credit reports online, by phone, or by mail with the major credit reporting companies.

A consumer may have an FCRA claim if a credit reporting agency or furnisher fails to reasonably investigate a proper dispute and continues reporting inaccurate information. In an unauthorized charge case, that can mean the consumer disputes the account, explains that the balance came from fraud or a billing error, and the company still verifies the debt as accurate without a reasonable investigation.

Can You Sue the Merchant?

Sometimes the merchant is the main wrongdoer. That may be true if the company charged your card without permission, hid the terms of a recurring subscription, refused to honor a cancellation, or processed charges after being told to stop.

Potential claims against a merchant may depend on the facts and the state law involved. Those claims might include deceptive trade practices, breach of contract, conversion, fraud, unjust enrichment, or other consumer protection claims. In some situations, federal law may also apply.

For example, a merchant that tricks consumers into recurring online billing may face legal exposure beyond a simple credit card dispute. The details matter. A one time billing mistake is different from a pattern of unauthorized charges against many consumers.

Can You Sue the Credit Card Company?

A lawsuit against the credit card company may be possible when the company mishandles the dispute. The strongest cases often involve more than the existence of one unauthorized charge. They involve a failure to follow the legal process after the consumer gave notice.

Examples may include:

1. The card issuer denied a clear fraud dispute without a reasonable investigation
2. The card issuer failed to correct the account after receiving proof
3. The issuer kept charging interest or fees on the disputed amount
4. The issuer reported the disputed balance as late during the dispute process
5. The issuer told the consumer to pay the disputed amount to protect their credit
6. The issuer ignored written dispute letters
7. The issuer verified inaccurate credit reporting after a credit bureau dispute
8. The issuer sold or placed the disputed balance with a debt collector

The legal theory may depend on whether the case is about unauthorized use, billing error procedures, credit reporting, debt collection, or all of those together.

What If the Bank Says the Charge Was Authorized?

Banks and card issuers sometimes deny disputes because their fraud systems show that the charge looked normal. They may rely on a shipping address, login data, a device ID, a prior customer relationship, or information provided by the merchant.

But consumers can still challenge that decision. A transaction can look normal to a fraud algorithm and still be unauthorized. A hacked account may use saved card information. A fraudster may have access to the consumer’s email. A merchant may submit incomplete or misleading information. A recurring charge may be unauthorized because the consumer cancelled or never agreed to the renewal terms.

A denial letter should not be ignored. It should be reviewed carefully. The consumer should look for what evidence the issuer relied on, what documents the issuer claims to have reviewed, and whether the issuer addressed the actual dispute.

What Damages Can a Consumer Recover?

The damages available depend on the claim. In a credit card dispute case, possible damages may include:

1. Refund of the unauthorized charges
2. Refund of interest, late fees, over limit fees, or other related charges
3. Compensation for credit damage
4. Compensation for denial of credit or increased borrowing costs
5. Emotional distress damages in appropriate credit reporting cases
6. Statutory damages where allowed by law
7. Attorney’s fees and costs where allowed by law

The possibility of attorney’s fees is important. Some federal consumer protection laws allow consumers to recover attorney’s fees from the defendant if the consumer proves a violation. That can make it possible for a consumer to bring a case even when the original charge is not large.

What Consumers Should Do Right Away

A consumer who finds unauthorized online credit card charges should move quickly and document everything.

First, report the charge to the card issuer. Ask that the card be closed or replaced if needed. Change passwords for any related online accounts.

Second, send a written dispute. Do not rely only on a phone call. Identify the charge, explain why it is unauthorized, and request correction.

Third, save proof. Keep account statements, emails, cancellation records, fraud alerts, screenshots, chat transcripts, shipping information, and letters from the bank.

Fourth, check your credit reports. If the disputed charge leads to late payments or other negative reporting, dispute the inaccurate information with the credit reporting agencies.

Fifth, watch for debt collection. If the disputed balance is sent to collections, keep every letter and voicemail. Debt collection activity based on a disputed unauthorized charge may create additional legal issues.

When Should You Contact a Lawyer?

A lawyer may be worth contacting when the amount is significant, the bank denied the dispute, your credit report was damaged, the merchant keeps charging you, or the account was sent to collections.

You should also consider legal help if:

1. You disputed the charge in writing and the issuer ignored you
2. The issuer says you owe the money even though you did not authorize the charge
3. Your credit score dropped because of the disputed balance
4. You were denied a mortgage, car loan, apartment, or credit card
5. A debt collector is contacting you about the charge
6. The same merchant has charged you more than once without permission
7. You suspect identity theft
8. The card issuer told you to pay first and dispute later

A consumer lawyer can review the paper trail, determine which laws apply, and evaluate whether the card issuer, merchant, credit reporting agency, or debt collector may be legally responsible.

The Bottom Line

Yes, you may be able to sue over unauthorized credit card charges made online. The strongest cases often involve more than the charge itself. They involve a card issuer that fails to properly investigate, refuses to correct the account, adds fees or interest, reports the disputed balance as late, or allows the problem to move into collections.

Federal law gives consumers important rights, but timing matters. Written disputes, documentation, and credit report disputes can make a major difference.

If an unauthorized online charge has turned into a denied dispute, damaged credit, or collection activity, it may be time to speak with a consumer protection lawyer.

FAQ

Can I sue if someone used my credit card online without permission?

Yes. Depending on the facts, you may have claims involving unauthorized credit card use, billing error violations, inaccurate credit reporting, or unlawful debt collection. The claim may be against the merchant, the card issuer, a credit reporting agency, a debt collector, or more than one company.

Am I responsible for unauthorized credit card charges?

Federal law generally limits consumer responsibility for unauthorized credit card charges to $50, and many card issuers provide zero liability protection.

Do I have to dispute the charge in writing?

For Fair Credit Billing Act protections, written disputes are very important. The FTC states that billing errors must be disputed in writing within 60 days after the first statement containing the error is sent to the consumer.

Can the credit card company report me late while the charge is disputed?

A creditor must not issue an adverse credit report because the consumer does not pay the disputed amount or related charges during the dispute process, although it may report that the amount or account is disputed.

What if the unauthorized charge hurt my credit score?

If the charge caused inaccurate credit reporting, the FCRA may apply. You should dispute the inaccurate information with the credit reporting agencies and keep proof of your dispute.

What if the charge was from a subscription I cancelled?

A cancelled subscription can still create a valid dispute if the company kept billing after cancellation or failed to disclose the recurring billing terms properly. Save cancellation emails, screenshots, account messages, and any proof that you tried to stop the charges.