My Credit Card Was Charged While It Never Left My Wallet (Part 3)
July 30, 2026
Com 0
By Jackson Godwin. Cybersecurity Analyst & Penetration Tester.
The Bank Completed Its Investigation
A few days later, the bank contacted me with the results.
After reviewing the transactions, they confirmed that the purchases were fraudulent.
The spending pattern didn’t match my normal behaviour.
The purchases came from different online merchants within a short period.
The fraud detection system had already flagged several of them as suspicious.
Fortunately, because I reported the problem immediately, the bank reversed the unauthorised transactions and issued me a replacement credit card.
The financial loss was limited.
But the experience changed how I think about online payments forever.
My Card Was Never Physically Stolen
That was the biggest surprise.
My wallet had remained with me the entire time.
The criminals didn’t need my physical card.
They only needed the information printed on it.
That included details such as:
The card number.
The expiration date.
The security code (CVV), if obtained.
Enough information to complete online purchases.
Once criminals have those details, they may attempt to buy products from websites that don’t require additional verification.
I Changed My Online Habits
After the incident, I made several changes.
I no longer save my payment card on every shopping website.
I removed card details from accounts I rarely used.
I also enabled transaction alerts so I would receive an immediate notification whenever my card was used.
Those simple changes made it much easier to detect suspicious activity quickly.
I Realised Convenience Can Be Risky
Saving payment details online makes shopping faster.
But convenience should never replace security.
Every website that stores payment information becomes another place where your financial data could potentially be exposed through a breach or account compromise.
That doesn’t mean you should never save your card.
It means you should be selective about where you do.
Unexpected login notifications or password reset emails from shopping websites may indicate someone is trying to access your saved payment information.
How to Protect Your Credit Card
You can’t eliminate every risk, but you can reduce it significantly.
Here are some practical steps:
Enable instant transaction alerts from your bank.
Use strong, unique passwords for shopping accounts.
Turn on multi-factor authentication where available.
Shop only on trusted, secure websites.
Review your credit card statements regularly.
Remove saved payment methods from accounts you no longer use.
Report suspicious transactions immediately.
The faster you act, the better your chances of preventing additional fraud.
Frequently Asked Questions
Can someone use my credit card without stealing it?
Yes.
If criminals obtain your card details, they may attempt online purchases without needing the physical card.
This is commonly known as card-not-present fraud.
Will the bank always refund fraudulent charges?
Policies differ between banks and countries.
Many financial institutions investigate reported fraud and may reverse unauthorised transactions when appropriate.
Report suspicious activity as quickly as possible.
Is it safe to save my card on shopping websites?
It can be convenient, but only save your card on trusted websites that you use regularly and that provide strong account security.
Final Thoughts
The most frightening part of the experience wasn’t losing my card.
It was realising I had never actually lost it.
It stayed safely inside my wallet the entire time.
Yet criminals were shopping with it hundreds or even thousands of kilometres away.
That taught me an important lesson.
Protecting your credit card isn’t only about protecting the plastic.
It’s also about protecting the information printed on it.
In today’s digital world, your card details can be just as valuable to cybercriminals as the card itself.
Stay alert.
Monitor your accounts.
And never ignore a banking notification you don’t recognise.
Because sometimes, the fastest way to stop fraud is simply noticing the very first transaction.
About the Author
Jackson Godwin is a Cybersecurity Consultant specialising in Vulnerability Assessment and Penetration Testing (VAPT), Governance, Risk and Compliance (GRC), ISO/IEC 27001, PCI DSS, Cloud Security, AI Security, and Digital Risk Management.
Through JacksonTechnology.com.ng, he publishes cybersecurity awareness stories, ethical hacking tutorials, compliance guides, and practical online safety advice to help individuals and organisations recognise cyber threats, prevent financial fraud, and build safer digital habits.
His mission is to make cybersecurity practical, relatable and accessible—one cyberstory at a time.
