When money disappears from a checking account, the cause is often an unauthorized payment or a payment the cardholder no longer recognizes. It may involve a subscription, a phishing message, a compromised account, a digital wallet, a card saved with a merchant, or an app. The right response depends on how the payment was made and what the bank's records show.

The first priority is to secure the card and account, then identify where the payment came from. Replacing a card may help, but it may not cancel a subscription or secure a compromised account.

Card security
Card security

A replacement card can be one part of the response. The important question is: where did the payment access come from?

Active subscriptions and free trials

People may forget that they saved a card with Netflix, Google, Apple, Microsoft, Canva, an app, a game, a VPN service, a cloud service, an online store, or a free trial.

If a subscription is active, replacing a card does not necessarily cancel it. Sign in to the service and cancel the subscription there. If you cannot access the account or the charge is not yours, contact the merchant and your bank.

Automatic card updates for merchants

Some card networks offer updater services that can provide replacement or refreshed card details to participating issuers, acquirers, and eligible merchants for stored-credential or recurring payments. This can help some subscriptions continue after a card is replaced, but it does not mean every merchant receives every card update.

What to do: Cancel the subscription with the merchant, remove the saved card from the account, and ask your bank whether it can block a specific merchant or manage card updater services for your card.

Google, Apple, PayPal, and digital wallets

If your card is in Google Wallet, Apple Wallet, PayPal, an app store, or another account, the problem may involve the account as well as the card.

If someone can access your email, phone, Apple Account, Google Account, or payment account, they may be able to access payments, subscriptions, purchase history, or saved cards.

Check:

  • Devices signed in to your Google or Apple account.
  • Unrecognized devices, locations, or sessions.
  • Cards and payment methods saved to your accounts.
  • Active subscriptions and recent purchases.
  • Whether two-step verification is enabled.

Phishing by text, email, or ads

A message may appear to come from a postal service, DHL, Netflix, a bank, customs, a courier, or an online promotion. It may ask you to pay a small fee. A link can look convincing and lead to a page that asks for a card number, expiration date, CVV, or a one-time code.

A one-time code may approve a payment, add a card to a wallet, or authorize another action. Read the full message from your bank before approving anything. Never share a bank code with a caller or enter it on a page reached from an unexpected text.

Rule: Do not enter card details through a link in an unsolicited text. If you think a message may be legitimate, open the official app or type the service's known address yourself, or call the official support number. Do not use a phone number supplied in the suspicious message.

Cards saved in a browser

Chrome, Edge, Safari, and other browsers can save payment details. If a browser profile is shared, synced across devices, or compromised, a saved card may remain available after you receive a replacement.

Review:

  • Saved payment methods in the browser.
  • Saved passwords and signed-in devices.
  • Account synchronization settings.
  • Browser extensions you do not recognize or need.

Suspicious extensions and software

Some extensions request broad permissions. An extension that can read or change data on websites may expose sensitive information.

Remove extensions and programs you do not need, especially unknown coupon tools, download helpers, PDF converters, ad blockers, video downloaders, or fake security apps. Install software from trusted sources and review its permissions.

Fake or risky mobile apps

An app installed outside an official store, or an app given unnecessary permissions, can put a phone at risk. Be cautious with apps that request access to SMS, notifications, accessibility services, or screen contents without a clear reason.

Some banks send authentication codes through SMS or notifications. Do not give an app access to those features unless you understand why it needs them.

What to do when you notice an unrecognized payment

First, freeze or block the card in your banking app if that option is available, or call the bank using its official number. Then:

  • Ask the bank to block the card and explain how to dispute the transaction.
  • Review recent transactions and identify the merchant, date, amount, and payment channel.
  • Check subscriptions and accounts such as Apple, Google, and PayPal.
  • Remove a saved card where appropriate and cancel subscriptions you recognize but no longer want.
  • Change the password for your email and important accounts if you suspect they were compromised.
  • Turn on two-step verification and sign out unknown devices.
  • Remove suspicious apps or extensions and scan affected devices.
  • Report each disputed transaction to the bank promptly and follow its claim process.

Do not assume a new card alone will resolve the problem. If a subscription is still active or an account has been compromised, the underlying issue may remain.

Virtual and disposable cards

Some banks and financial services offer virtual cards, disposable card numbers, or merchant-specific numbers. Availability and controls vary by provider.

  • Disposable numbers: Some services replace or deactivate the card number after a purchase. Check whether recurring payments are supported before using one for a subscription.
  • Dedicated virtual cards: If your provider supports them, you may be able to use a separate card for a service and set a spending limit. A declined payment is not a guarantee that the account or subscription has been cancelled.

Spending limits and card controls

Review the card settings in your bank's app. Depending on the bank, you may be able to:

  • Set limits: Choose daily or online spending limits and change them when needed.
  • Restrict channels or regions: Turn online, ATM, or international use on or off if your bank offers those controls.
  • Freeze the card: Temporarily disable it when you are not using it.
  • Enable notifications: Get an alert for each transaction so you can report suspicious activity quickly.

Use trusted digital wallets where available

A payment wallet can reduce the need to type your physical card number into a merchant's site. For eligible cards and supported transactions, Apple Pay uses a device-specific account number and a transaction-specific security code. Google Wallet can use a virtual card number for eligible cards and payment modes. Availability varies by issuer, country, and checkout method. PayPal is a separate payment service, so check its buyer-protection terms for the specific transaction.

Use public Wi-Fi carefully

Do not assume that every person on public Wi-Fi can read encrypted banking traffic. HTTPS and secure bank apps protect data in transit, but users still need to watch for fake hotspots, phishing pages, device compromise, and unexpected certificate warnings. Use your mobile connection or a trusted network if you are unsure. Keep your phone and banking app updated, and never ignore a security warning.

One-time codes and stronger sign-in

Use the strongest sign-in method supported by your bank and accounts. SMS codes can be targeted through phishing or SIM-swap fraud. An authenticator app is not immune to phishing, so use passkeys or a hardware security key where supported, and keep recovery options secure. Never share a one-time code with someone who contacts you unexpectedly.

Card testing and small transactions

Fraudsters may test stolen card details with small authorizations or purchases before attempting a larger payment. A small transaction you do not recognize is a reason to contact your bank, but it is not proof by itself that a bot tested the card. Ask the issuer to review the transaction and block the card if advised.

Digital skimming

In a digital-skimming attack, malicious code on a checkout page can try to capture information as it is entered. A reputable digital wallet or virtual card can reduce exposure of the physical card number in supported payment flows, but it cannot protect a compromised account, device, or checkout process in every case. Use trusted merchants, check the web address, and review transactions.

Contactless payments and PIN checks

A contactless payment may not ask for a PIN for every low-value purchase. The per-transaction threshold and additional checks depend on the card system, issuer, and current rules. In guidance published in March 2026, the National Bank of Serbia described cumulative controls that can require a PIN after five consecutive contactless payments or after a cumulative total of 18,000 RSD. Check the current limits with your bank. Do not assume that every low-value payment is guaranteed to go through or that the bank will automatically treat disputed transactions as valid.

If you lose a card, freeze or block it as soon as possible. Review transaction alerts and contact the issuer about a disputed payment. The legal outcome depends on the facts and applicable rules.

Dina cards and online payment security

DinaCard products and online payment authentication can differ by issuer, card type, merchant, and transaction. Do not assume that every online purchase requires the same confirmation step. Check your bank's current guidance and available card controls. If you do not use a card online, ask your bank whether online payments can be disabled for it.

Important note about disputed payments: The National Bank of Serbia explains that responsibility for unauthorized transactions depends on the circumstances. Its guidance describes a possible customer liability of up to 3,000 RSD in specified cases involving a lost or stolen card, and different treatment can apply in cases of fraud or gross negligence. Report a disputed payment to your bank promptly, follow the formal complaint process, and ask the bank to explain how the law applies to your case.

For more information, see the National Bank of Serbia page on payment card misuse.

Official references