ReVault
FR

What should I do if my credit card number is stolen?

Lock or close the card as soon as you notice a problem, then report each charge you did not make. Your issuer can explain the dispute process and any coverage that applies. Request a replacement number and watch your accounts for follow-up fraud or unfamiliar activity.

Published by · Last updated · 6 min read

The first hour

  1. Freeze the card in the app

    Many issuer apps offer a card lock. If yours does not, call the number on the back of the card or the issuer's fraud line right away.

  2. List every charge you do not recognise

    Go back at least 90 days. Card thieves usually test with a small charge before a large one, so a forgotten $1.50 is often the first sign rather than noise.

  3. Report the fraud to your issuer

    Report each charge you do not recognise. The issuer can explain the investigation, timing, and any coverage under your card agreement. Report promptly rather than waiting for a statement cycle.

  4. Get a new number, and write down what breaks

    List the subscriptions and saved checkouts using the old card. Some need updating; others may continue through a card-updater service or stored token. Ask the issuer which payments carry over. Replacement alone is not a subscription cancellation.

The first week

  • Change the password on any account where that card was saved, especially if you reused the password anywhere.
  • Turn on two-factor authentication on your bank, your email, and any shopping account holding a card. Email is the master key — protect it first.
  • Watch for unexpected calls or texts claiming to be your bank. Do not share passwords or one-time codes. Contact the issuer through its official app or a phone number you verified independently.
  • Request your free credit report from Equifax Canada and TransUnion Canada. A stolen card number alone rarely enables new accounts, but if more of your identity leaked, this is where it shows.

How did the number leak?

Possible sources include a merchant or processor breach, malware on a device, a skimmer or compromised terminal, or a phishing page. A stolen number alone does not establish which source was responsible.

You will often never find out which. That is genuinely fine — the useful conclusion is not which merchant failed, but that your one card number is held by dozens of parties, any one of which can fail without telling you.

Limit the disruption next time

The difficult part is often the reissue. One new number can mean updating subscriptions, saved checkouts, and any service that relies on the old card.

Separate card numbers can make that narrower. If each merchant has its own number, replacing one number may leave the others untouched. The exact controls depend on the card program.

ReVault's software supports separate cards and spending rules. Public card issuance in Canada still depends on the required banking partnership and program approvals.

Related questions

  • Am I liable for fraudulent charges in Canada?

    Coverage depends on the issuer, card network, and your agreement. Visa's Zero Liability policy covers eligible Canada-issued Visa cards, subject to conditions and exclusions. Report the charge immediately so the issuer can explain what applies to your account.

  • Should I file a police report for a stolen card number?

    Report unauthorized charges to your issuer immediately. The Canadian Anti-Fraud Centre also directs fraud victims to contact local police and report to the Centre. Keep confirmations and any file numbers for follow-up.

  • How long do I have to dispute a fraudulent charge?

    Report it immediately. Your account agreement sets reporting deadlines, which can differ from network chargeback deadlines. Ask your issuer what applies instead of assuming a universal 120-day window.

  • Will I have to change all my subscriptions again?

    Not necessarily. Some merchants receive updated credentials or use stored tokens, while other payments need a manual update. Separate card numbers can reduce the number of payments affected by one replacement, depending on the program.

Sources and scope

This guide is published by ReVault, which develops a virtual-card platform for Canada. The sources below explain the examples and procedures discussed; controls, protections and refunds depend on each card program.

Every dollar gets a mission

ReVault is pre-launch in Canada. The waitlist is free and invitations go out in order.

Join the waitlist

Keep reading