Banky team Reviewed editorial answerStart with your bank immediately: suspend the payment method if it's still compromised, then file an objection or complaint about the unauthorized transaction through the channel designated by the bank.
Steps
Record the transaction amount, date, and the name of the merchant or entity involved.
Request the reference number; Central Bank regulations require the bank to provide it immediately or within two business days at most, and to respond to the complaint within 15 business days in normal circumstances, with the exception of transactions involving third parties.
If the bank rejects your objection based on its initial response, there is a review process and an escalation option to the Central Bank, as per published regulations.
The figures, fees and limits in this answer vary by bank and change over time — confirm them with your bank or the official source before acting.