Case file: a friend asks to borrow a card number "for one purchase"

This is a hypothetical case. Malik, Jo and the purchases are invented to illustrate a common situation. Any resemblance to real people is unintended.

Malik's friend Jo needed to buy a concert ticket online. Jo's own card had expired and the replacement had not arrived. The ticket sale closed that evening. Jo asked Malik for his card number, just for this one purchase, and promised to pay him back in cash the next day.

Malik trusted Jo. He read out the number, expiry date and security code. The ticket was bought, the cash was repaid, and that should have been the end of it. A card number does not know it was lent for one purchase; it works until someone stops it.

The timeline

• Day 0. Malik gives Jo his card details by phone. Jo buys the ticket and saves the card in the ticketing site's account "to make checkout faster".
• Day 1. Jo repays Malik in cash.
• Day 20. A second charge appears from the same ticketing site, for a different event.
• Day 21. Malik asks Jo, who says it must be a mistake, then admits buying a second ticket "meaning to tell you".
• Day 30. A third, smaller charge from a food delivery app appears. Jo denies this one.

The first purchase: authorized

The first purchase was clearly authorized. Malik gave the details knowingly, for that purpose. No dispute route applied, and none was needed.

The second purchase: a gray area

The second purchase was made with details Malik had voluntarily shared, by the person he shared them with. Malik had not approved it, but from the issuer's point of view, he had given Jo the means to make it. Many card terms treat purchases by someone you gave your card details to as your responsibility.

Malik eventually received the money from Jo, after an awkward conversation. The friendship survived, a little bruised.

The third purchase: unknown

The food delivery charge was different. Jo denied it, and Malik believed Jo this time. Possibly the card had been saved in another app, or the details had been written down somewhere and seen by someone else. Once a card number has been shared, it is hard to know how far it has traveled.

Malik contacted his issuer. Because he had shared the card details before, the issuer treated the case cautiously. It canceled the card, issued a new one and, after review, refunded the third charge as unauthorized. It did not refund the second.

What made this hard

• Card details are reusable. A number, expiry and code work for every purchase until the card is canceled.
• Saved cards travel. Once saved in an account, the card can be used without anyone typing it again.
• The line between authorized and not is blurry when details have been shared voluntarily.
• Friendship complicates evidence. Malik did not want to accuse Jo, which slowed his reaction.

We saw a similar blurring in two people, one shared login: when access is shared, records stop telling a clear story.

What would have helped

1. Not lending the details at all. Malik could have bought the ticket himself, in his own account, and transferred it to Jo, or Jo could have been repaid later.
2. Asking Jo not to save the card, and checking afterwards that it had been removed.
3. Using a separate card for the favor, one with a small balance that could be closed afterwards.
4. Checking the statement weekly for a month after sharing.
5. Canceling and replacing the card right after the favor, to be certain.

Why criminals like borrowed card numbers

Requests to "borrow a card for one purchase" are not always innocent. Some scammers build friendships online and then ask for this favor. Others ask a friend to buy something for them with a card and repay by transfer, which later turns out to be fraudulent, a pattern related to triangulation fraud. The safest rule is the simplest: card details are not lent.

Virtual cards change the risk, not the rule

A virtual card with a small balance limits how much can be lost, and it can be closed without affecting your main account. These reduce the damage of sharing. They do not make sharing safe, because the card can still be used for things you did not intend, and anything bought with it is linked to you.

Our own terms ask customers to keep card details private and to tell us immediately if details may have leaked. Card details are shown only to the account holder, after a fresh authenticator code. If you suspect details have been shared or seen, the help center explains how to ask us to freeze the card.

The conversation that helps

If a friend asks to borrow a card number, a kind and firm answer is:

• "I'd rather buy it for you myself and you pay me back."
• "My card is linked to everything; I don't share the number."
• "Let's find another way that doesn't involve my details."

A real friend will understand.

When the friend is someone you met online

In Malik's case, Jo was a real friend with a real, temporary problem. The same request looks different when it comes from someone you have only met online, however warm the relationship feels. Scammers who build friendships or romances over weeks often reach a moment where they need a small favor: a card number for one booking, a gift card for a relative, a purchase they will "pay back tomorrow".

The signs are familiar: a reason they cannot use their own card, urgency, a promise of repayment, and sometimes a small earlier repayment to build trust. If someone you have never met in person asks for card details or for you to buy something on their behalf, treat it as a warning, not a favor.

Questions people ask

Can I get money back for a purchase a friend made with my card?

If you gave them the details, the issuer may treat it as authorized. Your recourse may be with the friend, not the bank.

Should I cancel my card after sharing the details?

It is the only way to be certain they cannot be reused. Many issuers will replace a card quickly.

Is it safer to share a virtual card number?

It limits the damage, especially with a small balance, but the same principle applies: whoever has the details can spend.