TL;DR
Websites should not be able to take further money from your debit card without your explicit permission for each transaction. However, recurring payments and saved card details can sometimes lead to unexpected charges. Here’s how to protect yourself.
Understanding How Websites Handle Your Card Details
When you enter your debit card information on a website, it’s usually processed through a payment gateway (like Stripe or PayPal). The website itself doesn’t store your full card number directly. Instead, they receive a ‘token’ – a unique code representing your card. This token is used for future transactions if you save your details.
Steps to Prevent Unauthorised Charges
- Check the Website’s Security: Before entering any card details, look for ‘https://’ in the website address and a padlock icon in your browser. This means the connection is encrypted.
- Clicking the padlock often shows information about the site’s security certificate.
- Review Terms & Conditions: Carefully read the terms and conditions, especially regarding recurring payments or subscriptions. Look for clauses that allow them to charge your card automatically.
- Be Wary of Saved Card Details: Saving your card details on websites is convenient but increases risk. If you don’t frequently use a website, it’s safer not to save your information.
- If you do save details, regularly check the website for any changes to their terms or pricing.
- Monitor Your Bank Statements: Regularly review your bank statements (online and paper) for any unauthorised transactions. Report anything suspicious immediately.
- Set Up Transaction Alerts: Most banks offer transaction alerts via SMS or email. This will notify you of every purchase made with your card, allowing you to quickly identify fraudulent activity.
- Check your bank’s website or app for how to set these up.
- Use Virtual Cards: Some banks offer virtual cards – temporary card numbers linked to your main account. These are ideal for online purchases as they limit the amount that can be charged and can be easily cancelled.
- Check Recurring Payments: If you suspect a recurring payment is causing issues:
- Contact Your Bank: They can often cancel or block specific recurring payments.
- Directly Contact the Merchant: Request they stop future charges and confirm their cancellation policy.
- Report Fraudulent Activity Immediately: If you spot an unauthorised charge:
- Contact Your Bank: Report the fraud immediately. They will likely issue a new card and investigate the transaction.
- Contact Action Fraud (UK): https://www.actionfraud.police.uk/ Report the incident to the national fraud intelligence centre.
What if a Website Takes More Money Than Agreed?
If a website takes more money than you authorised, you have rights. Contact your bank immediately and explain the situation. Under UK law, banks are often required to refund unauthorised transactions.
Checking for Recurring Payments (Example)
Many online banking platforms allow you to view and manage recurring payments:
// Example - this will vary depending on your bank's interface!Log into your online banking account.
Navigate to the ‘Payments’ or ‘Standing Orders/Direct Debits’ section.
Look for a list of recurring payments and check the details carefully.