eduKate Singapore

VIEW THIS AS

Auto mode follows the Route Engine until you choose a viewpoint.

YOU ARE HERE

ROUTE CHECK

CONNECTED TO

WHAT NEXT

Use the canonical route for this room, or HELP if you are unsure.

Next useful routeCanonical hubHELP

How to Solve Problems in Singapore | Unauthorised Credit Card Charges and Bank Transaction Disputes

—

by

eduKate Asia

If you notice an unauthorised credit card transaction, debit card payment or bank-account withdrawal in Singapore, contact the bank immediately through its genuine app or published fraud hotline. Report the specific transaction, ask for the affected card or account to be protected and find out how to submit a formal dispute. Do not wait until the monthly card statement arrives if you already see suspicious activity.

A bank dispute is not one single process. An unfamiliar merchant name may be a legitimate transaction displayed under its parent company’s billing name. A card number may have been used without the physical card. A criminal may have obtained internet banking access through phishing, or a genuine transfer may have been sent to the wrong person. Each situation can require different evidence and rights.

This guide explains the urgent safety steps, how to identify the transaction category, what the MAS Shared Responsibility Framework does and does not cover, and how an unresolved bank complaint may proceed to FIDReC. It is practical general guidance, not a guarantee of reimbursement.

Quick answer: take these steps first

  • **Inspect the transaction.** Note the merchant, amount, currency, date, card or account and transaction reference.
  • **Report it to your bank immediately.** Use the fraud line listed in the bank’s official app or ScamShield’s official bank-hotline directory.
  • **Secure the affected access.** Follow the bank’s instructions to block cards, freeze digital banking, revoke compromised devices or change credentials from a trusted device.
  • **Tell the bank exactly what happened.** Distinguish a card charge you never approved from a transfer you made because someone deceived you.
  • **Preserve evidence.** Save account records, notifications, calls, messages and any suspicious websites without publishing private credentials.
  • **Follow the bank’s dispute procedure.** Ask for a case number and about documents, card-scheme time limits and provisional-credit conditions.
  • **Report suspected crime to Police** using its official channel where appropriate.
  • **Escalate an unresolved financial-institution complaint** to FIDReC within the applicable period after the bank’s final reply.

Table of contents

Step 1 — Identify the transaction

Look at the exact record in the authentic bank app. A transaction may appear under a payment processor, marketplace or corporate entity rather than the shopfront name you remember. Check your own orders and subscriptions before concluding that every unfamiliar label is fraud.

Ask whether the entry is pending or posted and whether it involves a physical card, online card transaction, digital wallet or bank transfer. A pending authorisation and an actual settled debit may have different handling instructions.

If the amount is unrecognised or you suspect fraud, do not postpone contacting the bank while conducting an extensive personal investigation. Early reporting can help the bank secure access and assess next steps.

Step 2 — Stop any further loss

The bank is the first point of contact for an active unauthorised financial transaction. Its team can advise whether to block the card, suspend a payment token, freeze the account or revoke an affected digital banking device.

If you gave a password, OTP or login approval to a suspected scammer, say so immediately. A missing card number is different from full account takeover. The bank needs to know which access could still be vulnerable.

If you suspect a phone contains malicious software, avoid typing replacement banking credentials on that phone until you have followed the bank’s security instructions. Use another trusted channel to change passwords, check account alerts and protect your email.

Singapore Police’s October 2026 phishing advisory documents cases where users entered bank or card details on fraudulent shopping advertisements and later discovered unauthorised transactions.

Step 3 — Submit a bank dispute

Ask the bank how to challenge the specific transaction. A card issuer may offer a dispute or chargeback process under applicable card-network rules. A bank transfer or unauthorised online banking transaction may follow different investigation procedures.

Give the transaction date, amount, merchant information where available, the account affected, and any information about who had access. Explain whether the card remained with you or was lost, whether you received a transaction alert, and whether you approved any login or payment.

Keep the fraud-report reference, any dispute form and supporting attachments. If the bank asks for a Police report or additional information, submit it through the bank’s authenticated channel. Card-scheme reporting windows may be time-sensitive, so ask the issuer about the actual deadline instead of assuming a universal 30-day or 90-day rule.

A chargeback request is not a promise that the card issuer will win the dispute. The merchant or acquiring bank may respond, and the issuer assesses the evidence under applicable rules.

How to distinguish an unrecognised charge from a merchant disagreement

Suppose you ordered shoes for S$150 but received the wrong size. You authorised the S$150 payment; your disagreement concerns what the seller delivered. The first resolution route usually involves the retailer, marketplace or payment dispute process for goods not as described.

Now suppose someone used your card number to pay S$150 to a store you have never visited. That is a potentially unauthorised payment. You should report it as such to the bank immediately.

A third case is a fake seller who persuades you to transfer S$150 by PayNow. You initiated the payment but may have been deceived. That can be a scam investigation, not necessarily an unauthorised card charge.

Correct classification helps the right process start quickly. Do not label every disappointment as hacking, and do not hide a genuine OTP or login approval you gave.

What if the amount is a foreign-currency charge?

A card transaction may be recorded in another currency and converted to Singapore dollars with applicable fees. The unfamiliar currency alone does not prove fraud, but it deserves checking if you never made or authorised that purchase.

Review subscriptions, travel purchases, app stores and household transactions. If the transaction remains unrecognised, report it to your bank promptly and ask for its dispute and fraud-protection steps.

Avoid giving an unsolicited caller access to your card or digital banking merely because they can quote the amount and currency. That information can be used in phishing attempts.

What if the card itself is missing?

If a physical debit or credit card has been lost, use the bank’s genuine block or loss-reporting function. Check whether digital wallet tokens and supplementary cards need separate action. A new card number may be issued, and some recurring payments may need updating.

The bank’s procedure for a lost card may not be identical to its procedure for a compromised card number. Explain what you know and ask for the necessary protective steps.

If the card was inside a lost wallet, you may also need to report a missing NRIC, replace a transport card or secure building access. Those are parallel tasks, not prerequisites for blocking a bank card.

How the Shared Responsibility Framework works

The MAS and IMDA Shared Responsibility Framework (SRF) addresses a defined category of phishing scams. It assigns duties to covered financial institutions and telecommunications providers and describes a process for assessing losses where specified duties are breached.

The important word is **defined**. The SRF does not mean every unauthorised card charge, investment loss, wrong PayNow transfer or scam automatically qualifies for compensation. The mechanism of the scam and the duties that applied matter.

MAS says affected consumers should contact their financial institution immediately and report to the Police. The financial institution coordinates the investigation and can advise whether the incident falls within the SRF.

The framework has claim, investigation and outcome stages. A consumer may be asked for relevant communications, a Police report and transaction evidence. Cooperate accurately and keep records of what the bank decides.

What if the bank refuses to refund the money?

First request a clear written explanation of the bank’s decision and the basis for treating the transaction as authorised, unauthorised or otherwise disputed. Identify factual inaccuracies in the decision and respond with evidence through its formal complaint process.

Do not assume that a Police report itself requires the bank to reimburse you. Nor does the fact that a bank rejected a claim automatically prove it complied with every relevant obligation. The decision may be reviewed using appropriate independent dispute-resolution procedures.

The MoneySense guide Resolving a Dispute With a Financial Institution, updated 4 November 2026, recommends contacting the bank first, then FIDReC if the matter remains unresolved.

When FIDReC can help

The Financial Industry Disputes Resolution Centre (FIDReC) is an independent institution for eligible consumer disputes against participating financial institutions. Its banking guidance expressly includes unauthorised card transactions and alleged negligence involving scam losses among examples of disputes it may see.

MoneySense says consumers should approach FIDReC within six months of receiving the bank’s final reply. FIDReC also has eligibility criteria, process requirements and exclusions, so check the latest official rules.

FIDReC says filing a dispute is free for consumers and that eligible claims begin with mediation. If no settlement is reached, an adjudication stage may be available. Its published general adjudication limit is S$150,000 per claim, subject to the Terms of Reference and exceptions.

Use FIDReC’s official portal to check jurisdiction and submit the necessary information. A mediator or adjudicator may resolve an eligible case, but an application does not guarantee a particular outcome.

Is MAS the complaint department for refund decisions?

MAS is the financial regulator, but MoneySense explains that MAS does not decide ordinary commercial disputes between a consumer and a financial institution or order the bank to pay compensation in those disputes.

MAS may receive reports concerning alleged regulatory wrongdoing, misrepresentation or serious misconduct by a financial institution. This is distinct from the customer’s claim for repayment of a disputed transaction.

If your objective is to recover a disputed amount after the bank’s final answer, consider whether FIDReC is the appropriate independent route rather than assuming that a regulator will award the money.

When should you report the incident to Police?

Where you believe a transaction involved criminal fraud, theft or account intrusion, use official Police reporting channels. The bank may ask for the report number as part of its investigation.

Keep original emails, text messages, transaction alerts, suspicious website addresses and available screenshots. Avoid forwarding passwords or sensitive security codes to unrelated parties.

If there is active account compromise, contact the bank before spending hours preparing the perfect narrative. A prompt report and account protections can reduce the risk of additional transactions.

Worked example — A card used online without permission

Imagine a fictional customer, Mei, notices an online S$470 card payment to an unfamiliar merchant. Her card is still in her wallet. She opens the genuine bank app, reports the transaction as unauthorised and asks about card blocking and the issuer’s dispute process.

The bank requests transaction details and may ask further questions about online subscriptions or merchant relationships. Mei supplies accurate answers and preserves the case reference. She does not assume that physically possessing the card makes online misuse impossible.

If the issuer later declines the dispute and she disagrees with its decision, she asks for the final written response and checks FIDReC’s six-month period.

Worked example — A confusing merchant name

Fictional resident Daniel notices a charge with a business name he does not recognise. He checks his purchase history and discovers it is the payment processor for a legitimate recurring service he subscribed to.

He contacts the service provider about cancellation or refund conditions if needed. He avoids submitting a false fraud report for a charge he actually authorised.

This illustrates that a clear description of the transaction is the first step, not a final conclusion about wrongdoing.

Worked example — Phishing leads to bank login compromise

Fictional customer Aisha receives a fake delivery message and enters banking credentials on a fraudulent website. Soon afterward, money leaves her account without her permission.

Aisha urgently contacts the bank, describes the phishing event, secures affected access, files an appropriate Police report and follows the investigation. She asks the bank whether the circumstances fall within the MAS Shared Responsibility Framework, rather than assuming they necessarily do.

The example separates protecting the account, investigating the loss and assessing any possible reimbursement.

A four-week recovery and follow-up plan

**Week 1:** Report the disputed transaction immediately, secure accounts, provide the initial evidence and make any necessary Police report.

**Week 2:** Respond to bank information requests, verify whether replacement cards and banking devices are secure, and preserve documents.

**Week 3:** Ask the bank about the investigation status and any missing supporting materials. Keep written replies and case references.

**Week 4:** If the bank has issued a final position, review it carefully and check the applicable FIDReC filing period if you remain dissatisfied.

These are organisational checkpoints, not universal banking service-level deadlines. The urgent fraud report belongs on day one, not at the end of week one.

Common mistakes

  • Waiting for the monthly statement despite already seeing an unauthorised transfer.
  • Calling a number supplied in the suspicious message instead of the bank’s genuine hotline.
  • Failing to explain that credentials or OTPs were disclosed.
  • Confusing a merchant return dispute with a fraudulent charge.
  • Assuming every scam automatically qualifies for an SRF refund.
  • Accepting a bank outcome without reading what it actually says.
  • Missing the FIDReC six-month period after the final bank reply.
  • Publishing card numbers, full account statements or identity documents in public posts.

Frequently asked questions

What should I do immediately after an unauthorised card charge?

Call the bank through its official fraud hotline, secure the affected card and ask for its transaction-dispute procedure.

Does the bank automatically reimburse every unauthorised transaction?

No universal automatic reimbursement rule applies to every situation. The bank investigates the facts, applicable payment rules and relevant consumer protections.

Can I still be charged when my physical card never left my wallet?

Yes, online misuse of card credentials can occur without the physical card being taken. Report suspicious activity promptly.

Does the MAS Shared Responsibility Framework cover every scam?

No. It applies to a specified scope of phishing scams and duties. The bank assesses whether a particular case is in scope.

Can FIDReC review a banking complaint?

Yes, for eligible disputes against participating institutions. FIDReC handles banking complaints including some unauthorised-card and scam-loss cases.

How long do I have to contact FIDReC?

MoneySense says within six months of receiving the financial institution’s final reply.

Can MAS order my bank to refund me?

MoneySense says MAS does not resolve ordinary commercial disputes or order compensation between consumers and financial institutions. Check FIDReC and other appropriate remedies.

Is a wrong PayNow transfer the same as a hacked bank account?

No. A transfer you mistakenly initiated and an unauthorised withdrawal are different incidents, with potentially different recovery processes.

Official sources

Editorial review: 4 November 2026. This is general financial information, not a determination of liability, fraud or a card-network chargeback outcome. Follow your bank’s actual instructions promptly.