Two things decide what you can owe when someone uses your credit card without permission. The first is what the thief had: the physical card, or only the number. The second is whether you had already reported the problem.

The Consumer Financial Protection Bureau lays out the basic outcomes. Here is the short version before the details.

  1. Physical card reported missing before use: If you report a lost or stolen card before anyone uses it, you cannot be held responsible for unauthorized charges.
  2. Physical card used before you reported it: The most you will owe for those unauthorized charges is $50.
A tidy home desk in daylight with a printed card agreement, a notebook of handwritten call times, and a telephone, set up for reviewing a card dispute.
A desk workspace featuring a printed cardholder disclosure, a notebook tracking dispute call times, and a telephone.
  1. Account number stolen, card still with you: You generally have no liability for the unauthorized use.
  2. Charges after your report: Once you report a lost or stolen card, you are not responsible for charges or withdrawals made without your permission.

The $50 limit on a lost or stolen card

Many people assume a lost wallet leaves them open to thousands of dollars in charges. The CFPB says otherwise. On its page on unauthorized charges, it says that if a lost or stolen card is used before you report it missing, the most you will owe is $50.

That figure is a maximum. It is not a fee you automatically pay. In many cases the amount is lower, and as the next sections show, it can be zero.

Timing is the lever you control. If you report the card before it is used, you owe nothing for unauthorized charges. After you report it, later charges and withdrawals made without your permission are not your responsibility. The sources do not give a number of days for reporting a physical card. So the practical rule is simple. Call as soon as you notice the card is gone.

When only the account number is stolen

Sometimes the card never leaves your wallet, yet charges appear anyway. Someone has the number and used it. The CFPB says that if you have not lost the card but someone steals and uses your account number, you generally have no liability for the unauthorized use.

So the $50 figure belongs to the lost or stolen card scenario. It is not the starting point when only the number was misused. This is why the first question to answer, before you call anyone, is whether the card was physically lost or stolen, or only the account number was used. Say which one it was when you report. The sources do not describe how an issuer handles that distinction internally, but a clear answer gives the representative accurate facts to work with.

The sources also do not explain how a number gets stolen, and they do not walk through what a fraud investigation involves. Treat any claim about those details with caution unless your issuer spells it out.

What your card agreement may add

The $50 figure is not always the end of the story. The CFPB notes that many cardholder agreements say you are not responsible for any charges even when the card was used before it was reported missing. In other words, your contract may be more generous than the baseline.

That makes the agreement worth reading before you need it. Look for the section on unauthorized charges. Terms vary, so do not assume yours matches a friend's. You can find your agreement on the card company's website or in the CFPB's Credit Card Agreement Database.

One caution on debit and ATM cards. The FTC-based material the sources draw on says the protection depends on the type of card and on when you report the loss. It does not detail how the rules differ for debit and ATM cards. If you carry one, read your deposit account disclosures instead of assuming credit card rules apply.

Reporting, follow-up, and the questions to ask

Start with a phone call to your card issuer. Then put it in writing. FTC-based guidance says to send a letter that includes your account number, the date and time you noticed the card was missing, and when you first reported the loss. For fraudulent charges on a credit card, send the follow-up to the address the issuer uses for billing disputes. For a debit card, the address is the one used for errors.

Keep a simple record. A notebook with call dates and times, like the one on the desk above, is enough. It will help you show when you noticed the problem and when you reported it.

Four questions can guide the whole process:

  • Was the card physically lost or stolen, or was only the account number used?
  • Did the unauthorized use happen before or after I reported the loss?
  • Does my card agreement describe my responsibility for unauthorized charges?
  • Have I sent a written follow-up with my account number and the dates of discovery and report?

Keep checking your statements, and report any fraudulent charge right away. It is also worth checking whether your homeowner's or renter's insurance covers card losses or theft. One red flag is worth remembering. A bank will not ask for your personal login credentials through an email or text, so a message that does should not be trusted.

What the sources leave open

Some questions remain unanswered. The sources do not name the federal statute behind these limits, so this article does not either. They also do not give reporting time limits or deadlines for written disputes. They do not say what happens to interest and fees on disputed charges.

The FTC's own advice page on lost or stolen cards is the place to read the agency's full guidance. For deadlines specific to your account, your card agreement and your issuer are the authority.

Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.