Here's everything a cyber criminal can do if they steal your credit card (2024)

During the first half of this year, 23 million credit cards were stolen worldwide, according to cyber threat intelligence company Sixgill. About two-thirds of those stolen card numbers were issued in the U.S.

But what can a cyber criminal really do with a stolen credit card number?

For many, gaining credit card numbers is about more than simply making fraudulent purchases — although they do that as well, cyber-security expert Joseph Steinberg tells CNBC Make It. Credit card numbers can be converted into cash by buying up gift cards and purchasing easily sellable items to resell through online marketplaces such as eBay, Steinberg says.

Then there are the criminals who are interested in the big hauls. In many instances, the fraudster is actually selling your credit card number to other cyber criminals. The data from a single credit card can be sold for more than $45, data security provider Symantec reports. Let's say you have a trove of credit card data, such as the 2018 Marriott data breach which compromised, among other pieces of data, credit and debit card payment information for 383 million people. That's equivalent to billions of dollars in potential profits.

It's not just through data breaches that cyber thieves can steal credit card information. Criminals are using a strategy called "formjacking," where they use malicious code to steal your credit card details and other information during the checkout process on online retail sites. This type of fraud is on the rise, with reported attacks affecting major sites such as Ticketmaster and British Airways, Symantec reports.

Thankfully, if your credit card number is compromised and used fraudulently, you're typically not on the hook for that money. The Fair Credit Billing Act makes it so consumers are only liable for up to $50 in fraudulent charges. And major credit card companies, including American Express, Discover, Mastercard and Visa offer "zero liability" policies, so you don't have to pay for any fraud. That's why many experts recommend that you use credit cardsinstead of debit cards.

If you suspect your credit card number has been stolen, report it immediately to your credit card company. They will typically close the account, investigate the reported charges and issue you a new credit card.

Taking extra precautions

Still, if your personal information was compromised in a recent data breach, such as the Capital One hack announced in July, you may want to take some extra steps to protect yourself, such as freezing your credit report, which "is the best way to prevent a criminal from opening an unauthorized account in your name," says CreditCards.com industry analyst Ted Rossman. Yet only about one in four U.S. adults have frozen their credit — despite major data breaches like Equifax in 2017 and Marriott in 2018.

If you want to freeze your credit reports and haven't already done so, you need to contact the three major credit bureaus, Equifax, Experian and TransUnion, separately. Keep in mind that you will need to unfreeze your credit if you're applying for any credit products in the future, such as a personal loan, credit card or mortgage.

While a credit freeze will stop anyone from taking out a credit card or loan in your name, it may not be a comprehensive solution if you have multiple pieces of information leaked, experts say. "Sometimes the risk is compounded when criminals have multiple pieces of data," Steinberg says.

For example, a credit freeze doesn't do much for identity theft. "Everybody comes [to these breaches] with the assumption that there's something to do, and the reality is, sometimes, there isn't anything a consumer needs to do," Steinberg says.

Ultimately, the best protection is staying vigilant about suspicious activity. "The best an individual can do is keep an eye open for scammers contacting them," says independent computer security analyst Graham Cluley.

Like this story? Subscribe to CNBC Make It on YouTube!

Don't miss: 5 things you should do immediately if you suspect you were affected by the Capital One data breach

Here's everything a cyber criminal can do if they steal your credit card (2)

VIDEO0:5000:50

Millennials get scammed more often than any other age group

Here's everything a cyber criminal can do if they steal your credit card (2024)

FAQs

What do criminals do with stolen credit cards? ›

Criminals often use their stolen credit card numbers to buy items that can easily be flipped on websites like eBay. Luxury items, popular smartphones, and other goods with high resale value are appealing.

Can someone use my credit card with just the number and CVV? ›

Is it possible for someone to use your debit or credit card with just the card number and the CVV? Yes, this type of fraud is known as "card-not-present" fraud, as the thief does not have possession of the physical card. This type of fraud is becoming more common with the rise of online shopping and e-commerce.

What if someone stole my credit card number and used it online? ›

Immediately contact your credit card issuer of the fraudulent transaction. Some issuers allow for fraud reporting in their app or on their website, though you may need to call the number on the back of your card.

Can the bank find out who used my credit card online? ›

Can You Track Someone Who Used Your Credit Card Online? No. However, if you report the fraud in a timely manner, the bank or card issuer will open an investigation. Banks have a system for investigating credit card fraud, including some standard procedures.

Do they investigate credit card theft? ›

Once you report fraudulent charges and provide any necessary documentation, the bank has 30 days to respond to your issue and begin an investigation. From there, the bank has to complete the investigation within 90 days.

Do banks investigate credit card theft? ›

Do Banks Really Investigate Disputes? Yes. They do so as a protection service for their customers so that they don't have to worry about the ever-increasing sophistication of fraud.

Who pays for credit card frauds? ›

The bank usually pays for stolen credit card purchases. Sometimes, the merchant is responsible. The consumer almost never pays for stolen credit card purchases.

Can someone charge my card without CVV? ›

This makes it impossible for anyone to misuse your card information. So if there is a breach in the data security of the credit card issuing company, the CVV is not stored in the databases. This makes it impossible to use your credit card for transactions without the CVV.

How often do credit card frauds get caught? ›

It really depends on the actions taken by a cardholder after they notice a possible attack and the prevention methods a bank or card issuer takes to detect fraud. Some estimates say less than 1% of credit card fraud is actually caught, while others say it could be higher but is impossible to know.

Will the person who stole my credit card get caught? ›

A heads-up clerk might notice someone using a stolen credit card and call it in to the police. Or, an investigator might be able to trace a criminal who uses a stolen credit card number online. But unless you know the person involved in committing the fraud, you may not find out if there's actually been an arrest.

Will they catch the person who stole my credit card? ›

Unfortunately, less than 1% of credit card cases are solved by the police. Unless a family member stole your card information, it's fairly rare that credit card thieves are caught. One reason is that many fraudsters use anonymous services and advanced technology that make it difficult to track them down.

Do credit card companies actually investigate? ›

Credit card companies dedicate millions of dollars annually to catching and preventing fraudulent transactions in their customers' accounts. Credit card companies investigate fraudulent activity and may forward the results of their investigation to the closest law enforcement agency.

How do I find out who has been using my credit card? ›

The best way to find out if someone has opened an account in your name is to pull your own credit reports to check. Note that you'll need to pull your credit reports from all three bureaus — Experian, Equifax and TransUnion — to check for fraud since each report may have different information and reporting.

Can someone withdraw money with my card number? ›

Debit card fraud occurs when a criminal gains access to your debit card number—and in some cases, personal identification number (PIN)—to make unauthorized purchases or withdraw cash from your account.

What to do if credit card is hacked? ›

5 steps to take if you're a victim of credit card fraud
  1. Call your credit card company immediately.
  2. Check your credit card accounts and change your passwords.
  3. Notify the credit bureaus and call the police if necessary.
  4. Monitor your statements and credit reports.
  5. Check your online shopping accounts.
Feb 21, 2023

What percent of credit card thieves get caught? ›

So, how often do credit card frauds get caught? Unfortunately, the answer is not very often. Less than 1% of all credit card fraud cases are actually solved by law enforcement. This means that if you are a victim of credit card fraud, your chances of getting your money back are pretty slim.

Can bank reverse a transaction if scammed? ›

If you've bought something from a scammer

Your card provider can ask the seller's bank to refund the money. This is known as the 'chargeback scheme'. If you paid by debit card, you can use chargeback however much you paid.

What happens if someone knows your CVV? ›

Once you do, a scammer will have your information and can begin making purchases in your name. Don't send your ATM's credit card or debit card information in an email. Sophisticated cybercriminals can scan your emails, looking for credit card numbers.

Is 000 a valid CVV code? ›

A general CVV code is indicated by the number 000. However, this code is deemed invalid because it's been used fraudulently.

How can I cash out without CVV? ›

Sending money by bank transfer

An alternative to sending money if you don't have your CVV number to hand is to pay for your money transfer by bank transfer. This way, the funds will be drawn directly from your bank account rather than needing your card details.

How do credit card fraudsters get caught? ›

One of the most common ways that credit card fraud is caught is through something called a “chargeback.” This occurs when a customer disputes a charge on their credit card statement and asks the credit card issuer for a refund.

Can credit card companies track IP address? ›

Can credit card companies track IP? merchants and banks, such as card details, IP addresses and email addresses. Merchants and banks cannot see details of each other's customers, but can assess the level of risk in their transactions, say, if a credit card fraudster is continually using the same IP address.

How do people steal credit card numbers and not get caught? ›

Using card skimmers or shimmers

These small devices collect credit card data from the card's magnetic strips, which criminals then use to create a cloned card. Thieves install skimmers on ATMs, gas pumps, and other publicly available card readers. Shimmers are the natural evolution of card skimmers.

Can you go to jail for using someone else's credit card? ›

Yes, it is indeed unlawful. Under federal and state law, fraudulently using someone else's credit card or making purchases with their account without permission could have serious legal consequences. In some cases, this type of fraud may even lead to extended jail time.

How do you know if your SSN is being used? ›

Check Your Social Security Statement.

The statement also shows if withdrawals have been taken against your earnings, indicating that someone is using your SSN to claim your benefits (unless those withdrawals are yours).

How to check if someone is using your Social Security number? ›

Review the earnings posted to your record on your Social Security Statement and report any inconsistencies to us. Contact the Internal Revenue Service (IRS) at 1-800-908-4490 or visit them online, if you believe someone is using your SSN to work, get your tax refund, or other abuses involving taxes.

Can someone open a credit card in my name without my Social Security number? ›

An identity thief would have to obtain personal details such as your name, birthdate and Social Security number in order to open a credit card in your name. However, it is a federal crime to do this, and it can result in jail time when the thief is caught for their behavior.

What two things should a person do if his her checks are stolen? ›

Quickly report the loss to your bank and also file a report with the police. If you don't, you could be held responsible for any unauthorized activity. If you know the numbers of the missing checks, you may choose to put a stop payment on each one. Consider putting a freeze on the account or closing it.

Can cloned cards be traced? ›

But new research suggests retailers and ATM operators could reliably detect counterfeit cards using a simple technology that flags cards which appear to have been altered by such tools. A gift card purchased at retail with an unmasked PIN hidden behind a paper sleeve.

How can someone use your card at ATM without card? ›

What are cardless ATMs and how do they work? Cardless ATMs provide access to your account and allow you to withdraw cash without the need for a card. Instead, they rely on account verification via text message or a banking app on your smartphone.

Which credit card gets hacked the most? ›

1. 2019: Capital One (106 Million Customers Exposed)

Do I get my money back if my credit card is hacked? ›

Can I get my money back if someone used my credit card? You can get all your money back if someone fraudulently uses your credit card, but you could be responsible for up to $50. Be sure to report your card as lost or stolen as soon as you realize someone else has used it to ensure you recover all your money.

Do I get a refund if I report my credit card for theft? ›

But the theft of your card or bank information doesn't mean you're on the hook for all the losses. On the contrary, in the vast majority of cases, you're entitled to a refund of almost all fraudulent charges.

How much do stolen credit cards go for? ›

Unsurprisingly, it comes down to money. A single consumer's stolen credit information card sells for around $5 to $150 dollars depending on the amount of supplementary data included. A name, address and CVV number all add to the value of the card, but not by much.

Do credit card thieves ever get caught? ›

It really depends on the actions taken by a cardholder after they notice a possible attack and the prevention methods a bank or card issuer takes to detect fraud. Some estimates say less than 1% of credit card fraud is actually caught, while others say it could be higher but is impossible to know.

Who pays when a stolen credit card is used? ›

The bank usually pays for stolen credit card purchases. Sometimes, the merchant is responsible. The consumer almost never pays for stolen credit card purchases.

Do police go after credit card thieves? ›

Sometimes they do, and sometimes they don't.

It depends on the case and how much evidence is available to the detectives. If you are a victim of credit card theft, it's important to report it as soon as possible so that the detectives can start their investigation.

Do banks go after credit card thieves? ›

A: Most payment card fraud investigations are actually handled by the cardholder's issuing bank, rather than a card network like Visa or Mastercard. Generally speaking, after a customer makes a complaint, the bank will gather any relevant information and examine the transaction details closely.

How do credit card hackers get caught? ›

A heads-up clerk might notice someone using a stolen credit card and call it in to the police. Or, an investigator might be able to trace a criminal who uses a stolen credit card number online. But unless you know the person involved in committing the fraud, you may not find out if there's actually been an arrest.

Do you lose money if your credit card is stolen? ›

Under the Fair Credit Billing Act (FCBA) your maximum liability for unauthorized charges is $50. For instance, if someone makes $100 in fraudulent charges with your card, you can only be required to pay $50. However, most major banks, such as Citi and Chase, offer $0 liability on unauthorized charges.

How long is the sentence for credit card theft? ›

Credit card fraud that involves the theft of the card or the number typically has a prison sentence of 1 to 5 years. Identity theft is treated much more harshly with prison sentences up to 10 or 20 years.

Can police find out who used my card? ›

Through the cybersecurity department, police find to identify the transaction number of the credit card through which payment is made, then they use their special enabled software to detect the location of the transaction.

How do scammer get caught? ›

One common way is by obtaining search warrants. Law enforcement will obtain a search warrant from a judge authorizing them to search for and seize evidence related to the online scam. This may include computers, cell phones, bank records and other documents.

Top Articles
Latest Posts
Article information

Author: Lilliana Bartoletti

Last Updated:

Views: 6621

Rating: 4.2 / 5 (73 voted)

Reviews: 88% of readers found this page helpful

Author information

Name: Lilliana Bartoletti

Birthday: 1999-11-18

Address: 58866 Tricia Spurs, North Melvinberg, HI 91346-3774

Phone: +50616620367928

Job: Real-Estate Liaison

Hobby: Graffiti, Astronomy, Handball, Magic, Origami, Fashion, Foreign language learning

Introduction: My name is Lilliana Bartoletti, I am a adventurous, pleasant, shiny, beautiful, handsome, zealous, tasty person who loves writing and wants to share my knowledge and understanding with you.