Start with the right question
An unfamiliar descriptor can represent a legitimate purchase or actual misuse. The issuer is the appropriate starting point for investigating the transaction and protecting the account. Your documentation should support that process without exposing additional credentials or guessing at attribution.
Work through the checks
Identify the entry
Record the amount, date, currency, merchant descriptor, and posted or pending status. Check your own receipts and authorized users where appropriate. Do not assume a descriptor is the merchant's public brand name.
Use a trusted contact
Reach the issuer through its official app, statement, or card contact details. Avoid numbers in unsolicited messages. Record the report reference and instructions, including any requested follow-up.
Separate access concerns
Note lost cards, suspicious login notices, or credential exposure as separate facts. Do not publish full card numbers or security codes in a complaint summary or AI prompt.
Track the investigation
Keep requests for information, temporary credits, replacement-card notices, and the final response. Update the record if you later recognize the transaction. Accurate corrections matter more than preserving an initial suspicion.
A record you can use
- Transaction reference
- Reason it is unfamiliar
- Date reported and case number
- Issuer instruction
- Outcome or correction
Keep this record locally. Use document references rather than publishing account numbers or other people's personal details. An empty field means the information is still missing; it should not be filled with an AI guess.
Worked example
A fictional customer reports a charge under an unfamiliar company name. A later receipt shows it was an authorized purchase through that company's trading brand. The customer updates the issuer and closes the record rather than continuing to describe the transaction as fraud.
This example is fictional and illustrates the method, not a real case result.
Limits and next steps
Debit, credit, and other payment protections differ and timing can matter. This page does not calculate liability or reporting deadlines. Follow the issuer's official process promptly and seek advice when the response is disputed.
Keep a private copy of the report and relevant statements. If identity theft is suspected beyond the single transaction, use official recovery guidance and record those actions separately.