How did someone get my credit card number?

It’s possible someone got your credit number through a data breach, a phishing scam, malware on your computer or phone, or a skimming device placed on an ATM or the payment terminal at a gas pump. They can also get it if you send your card info over public Wi-Fi or shop on unsecured sites. 

Credit card theft is very common, with nearly 450,000 cases reported in 2024, according to the latest data available from the Federal Trade Commission. Below, you can see how scammers can steal your credit card number and how you can protect your finances.

11 Ways Someone Can Get Your Credit Card Number

1. Data Breaches 

There are more than 3,100 data breaches per year, according to the Identity Theft Resource Center, affecting about 1.35 billion people. With so many data breaches occurring, it is possible that your credit card information was leaked in a breach, giving hackers access to your card number.

2. Phishing Scams 

Phishing scams are emails, texts, or phone calls you receive from scammers who pretend to be from legitimate organizations to get your sensitive personal information, such as your Social Security number or credit card number. If you fell for a phishing scam, you are not alone. Phishing scams are the top complaint reported to the Federal Bureau of Investigation’s Internet Crime Complaint Center (IC3), with more than 193,000 complaints filed in 2024.

3. Malware

Malware is malicious software that gains access to or steals your personal information from your computer or phone. Malware includes viruses, spyware, and ransomware that can come from clicking links in phishing emails or downloading infected attachments. If you accidentally clicked on a link or downloaded an attachment from a phishing email, read WalletHub’s step-by-step guide on what to do. 

4. Skimming Devices

A skimming device is an illegal tool used by scammers that quickly reads and stores information from your credit card when you swipe or insert your card at a payment terminal. These skimmers can be attached at places like ATMs and gas pumps and are designed to blend in so you may not realize there is a skimmer present when you use your card.

Scammers then use your card information to create a fake credit card to make purchases. The FBI estimates that these skimming scams cost financial institutions and customers more than $1 billion each year.

Tapping your credit card rather than swiping or inserting it at the payment terminal is more secure, so you are less likely to have your credit card information stolen. There is still the possibility of hackers getting your credit card information by intercepting the radio-frequency identification (RFID) when you tap your card at the terminal. However, due to your credit card information being encrypted and how close scammers will need to be to you, it is highly unlikely that they can get your credit card number this way.

5. Public Wi-Fi

When you use public Wi-Fi at places like coffee shops, hotels, or libraries, your information is vulnerable to hackers. Hackers can intercept the connection and capture everything you share online, such as your credit card number when you make purchases in online stores. 

6. Unsecured Sites

Unsecured sites don’t use encryption, so any information you send through the site can be easily accessible by hackers. These sites don’t have “https” in the URL or the lock symbol in the URL bar, signaling that information that you enter, such as your login credentials or credit card number, won’t be encrypted before being transmitted.

Hackers can also hijack web forms on websites and add malicious software, a tactic known as formjacking. When you enter your information, such as your Social Security number or credit card number, on a compromised form, hackers will have access to the data.

7. Lost or Stolen Wallets 

If you lost your wallet or it was stolen, thieves can get access to your credit card, so you should contact your credit card issuer immediately. Your issuer can cancel the card to help prevent fraudulent transactions.

8. Familial Fraud 

When a family member uses your credit card or opens a new card under your name without permission, that is called familial fraud. About 1 out of 10 victims of crimes involving personally identifiable information, such as a credit card number, report that the perpetrator is a family member, according to the Identity Theft Resource Center. So familial fraud happens more often than you think.

9. Mail Theft

Scammers can go to great lengths to get your credit card number, including going through your mail and trash. They hope to find pieces of mail that contain sensitive financial information that can help them gain access to your credit card accounts. That’s why you should shred letters that contain this information before throwing them out.

10. Shoulder Surfing

If someone is looking over your shoulder when you enter personal information, such as your credit card number, into an app or website, they could steal the details. This could also happen if someone overhears a private conversation where you share that information.

11. Account Takeovers

A scammer can get the login details for your online credit card account and use your credit card to make unauthorized purchases. Once they are logged into your account, they can even change the password and email address associated with your account, making it difficult for you to access the account. Essentially, they will have taken over your credit card account, gaining access to all your credit card details and locking you out.

How to Tell If Your Credit Card Information Has Been Stolen

The items below could be signs that your credit card information was stolen.Unfamiliar charges. Charges that you don’t recognize on your credit card statement could have been made by someone who stole your credit card information.

Fraud alerts. Your credit issuer, bank, or monitoring service may send you fraud alerts if they believe a transaction on your credit card is suspicious. You can review the alert to determine if the transaction was made by you or an unauthorized person.

Unexpected packages. If packages that you didn’t order get delivered to you, someone could be using your credit card to place online orders without your permission. They could then hope to grab the packages from your doorstep before you even realize it.

Less available credit than you expected. If the unused portion of your credit limit is smaller than you expected, you should review your transactions to make sure there are no unauthorized charges. Scammers may use your credit card hoping that their fraudulent purchases will blend in with your legitimate purchases unnoticed.

A drop in your credit score. Your credit score could have dropped suddenly due to someone using your credit card to make a lot of purchases, racking up a large balance that leads to high credit utilization and potentially missed payments.

Can’t get into your account. If your login credentials are not working and you can’t get into your account online, it’s possible a scammer might have taken over your credit card account and locked you out.

Different account details. If you notice your account details, such as your email address, phone number, or mailing address, have been changed without your permission, it is possible a scammer may have accessed your credit card account. They could have changed your contact information to prevent you from being notified of fraudulent transactions.

New accounts or hard inquiries. If unrecognized, these things indicate that someone used  your information to take out a new credit card or loan, or they’re currently in the process of doing so.

WalletHub provides many tools, such as credit monitoring and transaction alerts, that can quickly alert you to suspicious activity on your accounts. You can also set up customized alerts to notify you about things like transactions that are above a certain amount or purchases from new merchants. If your credit card is stolen, WalletHub offers features such as lost wallet assistance, identity theft restoration, and $1 million in identity theft insurance to help you resolve your situation.

How to Prevent Scammers From Getting Your Credit Card Number

There are several steps you can take, or refrain from taking, to prevent your credit card information from getting in the hands of scammers. To protect your finances:

• Don’t click on links or open attachments in suspicious emails
• Don’t enter your credit card information on sites without “https” in the URL
• Don’t give your credit card number over email or phone
• Don’t shop online while using public Wi-Fi
• Check payment terminals at ATMs and gas pumps for skimmers and possible tampering
• Tell your credit card company when your card is lost or stolen
• Shred documents with sensitive information, like your credit card number, before throwing them away

You should also sign up for an identity theft protection service like WalletHub that can monitor your credit card accounts and notify you if there are any suspicious transactions.

To learn more, check out WalletHub’s guide on what to do if your credit card is lost or stolen.