What to Do After Entering Card Details on a Suspicious Website
Calm, ordered steps to take right now if you typed card details, a gift-card code or a password into a page that turned out to be fake — or clicked a phishing link.
If you are reading this because you just entered details on a page that looks wrong, start with the first step below. Acting quickly gives your issuer the best chance to stop fraudulent charges.
It happens to careful people. Fake pages are designed by professionals. What matters now is what you do next.
Right now: the first 15 minutes
- Stop. Close the suspicious page and do not enter anything else.
- Call your card issuer using the number printed on the back of your card or in the official app. Say that you entered your card details on a suspicious website and ask them to block or replace the card.
- For a gift card, call the number printed on the card or packaging and ask whether the balance can be frozen.
- If you entered a password, change it on the real site — typed in yourself — and on any other site where you used the same one.
- If the page asked for a one-time code and you shared it, tell your issuer immediately.
Later today
- Review recent transactions in your banking app and note anything unfamiliar.
- Turn on transaction alerts if they are not already on.
- Take screenshots of the fake page and any messages that led you there. Note the address.
- If you clicked a link on a device, run your device’s built-in security scan and update the operating system and browser.
Report it
Reporting helps authorities and browsers protect others. Use your national consumer protection or fraud reporting service — in the United States, ReportFraud.ftc.gov, and for internet crime, the FBI’s IC3. You can also report a deceptive site through your browser’s menu.
In the following weeks
- Keep watching statements for small test charges — fraudsters sometimes start small.
- Be extra wary of calls or messages about the incident. Scammers may contact you again posing as your bank or as a “recovery” service.
- If you shared government ID or your Social Security number, follow identity-theft recovery steps from an official source.
If you only clicked a link
If you clicked a phishing link but did not enter any information, the risk is usually lower. Close the page, avoid downloading anything it offers, update your browser and device, and stay alert for follow-up messages. If you downloaded or opened a file, run a security scan and consider asking a trusted technician for help.
Warning signs
- A caller says they are from your bank and need a code to “cancel” the fraud.
- Someone offers to recover your money for an upfront fee.
- You receive messages referring to the incident from addresses you don’t recognize.
Checklist
- I closed the suspicious page.
- I contacted my issuer using the number on my card.
- I changed any password I entered, using the real site.
- I reviewed recent transactions and turned on alerts.
- I saved evidence and reported the site.
Common mistakes
- Waiting to see if anything happens
- Call your issuer now. Early action matters.
- Calling the number on the fake page
- Use only the number on your card or statement.
- Paying a “recovery service”
- Fee-based recovery offers are frequently a second scam.
What to do next
- Read our fake card checker guide so you recognize the pattern next time.
- Use the website safety checklist before entering details on any new site.
Sources and further reading
- U.S. Federal Trade Commission — Lost or Stolen Credit, ATM, and Debit Cards (opens in a new tab)
- ReportFraud.ftc.gov — Report fraud to the FTC (opens in a new tab)
- FBI Internet Crime Complaint Center (IC3) (opens in a new tab)
- IdentityTheft.gov — Recovery steps for identity theft (opens in a new tab)
- UK National Cyber Security Centre — Dealing with suspicious emails and messages (opens in a new tab)
External links go to independent sources we consider authoritative. Check My Card is not responsible for their content.
This guide is general education, not financial or legal advice. For anything about your own card, contact your issuer using the number printed on your card. Spotted an error? Request a correction.
