What an unauthorized transaction is
An unauthorized transaction is a payment initiated by someone who does not have permission to use the account or payment credentials. A stolen card number, a compromised customer account or a payment made by someone without the account holder's consent can all lead to a claim of unauthorized use.
This term describes the customer's claim about permission, not the payment's processing status. An issuer can approve a transaction, but approval alone does not prove the account holder authorized it. An issuer declining a payment is different: no completed payment exists to dispute as an unauthorized transaction.
An approved payment is not proof of consent, and a chargeback can reverse the sale after you have delivered.
How a claim reaches your business
A customer who sees a payment they did not authorize can report it to their bank or payment service. For a card payment, the issuer can open a dispute and reverse the settled amount through a chargeback. The claim can arrive after you have delivered the goods or completed the service.
Under Visa and Mastercard rules, cardholders generally have 120 calendar days from the transaction or expected delivery date to dispute a charge. Some delayed-delivery cases have outer limits up to 540 days. Your response deadline is set by your processor and often falls within 20 to 30 days, so keep transaction records and delivery evidence available.
What it can cost your business
If a chargeback reverses a settled card sale, your business loses the payment while the dispute is reviewed. You can also face a separate chargeback fee under your processing terms, plus the cost of staff time, returned goods or services already delivered. The exact fee depends on your pricing, not on a universal unauthorized-transaction fee.
An isolated claim does not prove that your business caused fraud. Repeated disputes, however, can raise your chargeback ratio and draw monitoring attention from card networks. Track unauthorized-use claims separately from other dispute reasons so you can spot repeated patterns, such as compromised customer accounts or orders delivered to unverified addresses.
What you can actually change
You cannot control whether a customer reports a payment, but you can reduce preventable losses and prepare a clear response. Keep a record of the authorization, order details, delivery or service completion, and customer communications for each sale.
- Review unusual orders, account changes and delivery details before fulfilling high-value or expedited purchases.
- Keep receipts, order records, delivery confirmation and customer messages together so you can respond within your processor's dispute deadline.
- Use separate staff permissions for payment changes, refunds and order fulfillment, and review account activity for unfamiliar access.
- Compare unauthorized-use disputes with other chargebacks to identify recurring causes and update the relevant checkout or fulfillment control.
- Preserve sale records. Save the receipt, order details, delivery confirmation and customer communications in a record you can retrieve quickly.
- Check dispute deadlines. Record the response deadline for each claim as soon as your processor notifies you.
- Find repeat patterns. Review claims by sales channel, customer-account changes and fulfillment method to find gaps in your controls.
Frequently asked questions
Does an approved payment mean the customer authorized it?
No. An issuer's approval means the transaction passed its authorization decision, but it does not establish that the account holder gave permission. The customer can still report the payment, and a card issuer can open a dispute.
Is an unauthorized transaction the same as fraud?
They are related but not identical. Fraud is the broader category of deceptive or dishonest activity; an unauthorized transaction specifically concerns a payment made without the account holder's permission. A customer's claim can require review before the facts are clear.
How long does a customer have to dispute an unauthorized card payment?
Under Visa and Mastercard rules, the usual period is 120 calendar days from the transaction or expected delivery date. Some delayed-delivery cases have outer limits up to 540 days. Your processor sets your response deadline, often 20 to 30 days.