Reading what the transaction tells you
One unfamiliar charge is often the result of a card number exposed in a merchant breach or captured by a skimmer, and it usually ends once the card is replaced. A pattern is different. New accounts you did not open, address changes, or password reset messages can mean your identity, not just your card, is being used. In that case, a credit freeze with the three national credit bureaus, an identity theft report through the Federal Trade Commission, and a police report may be worth doing. Check other cards and bank accounts tied to the same email or phone number, because criminals often try the same credentials elsewhere.
For businesses that processed it
Merchants usually carry the loss on card-not-present fraud, such as online or phone orders, when the real cardholder disputes the charge. Signs that often look obvious in hindsight include rushed shipping to an address different from the billing address, several cards tried in a row, and orders far larger than a typical customer's. Keep order records, IP and device data, shipping confirmations, and communications with the buyer, since these are what you submit to contest a chargeback. A high rate of fraud disputes can lead a payment processor to hold funds or close the account, so the trend matters as much as any single transaction.
When counsel is worth involving
Most single fraudulent charges are resolved through the issuer without a lawyer. Legal help becomes useful when losses are significant, when a processor freezes a business's funds or terminates its account, when a merchant believes an organized group targeted it, or when you are wrongly suspected of having made the transaction yourself. We would review the transaction records and the account agreements, then consider whether a report to law enforcement, a claim against a party in the payment chain, or a negotiated resolution with the processor makes the most sense.
