An unauthorized payment is a transaction made without valid approval from the account holder. It may result from stolen payment credentials, account takeover, or social engineering that leads to a transfer the customer did not actually authorize. A disputed payment is not automatically proof of a particular attack method; identifying the cause requires case-specific evidence.
In cybersecurity, unauthorized payments can cause direct financial loss and trigger investigations into how an account or payment process was compromised. Payment providers generally need to distinguish restoring funds from determining liability: under applicable rules such as PSD2, reimbursement may be required promptly, while questions about customer conduct or later recovery are handled separately. Customers should report suspected transactions quickly and preserve relevant alerts and records; providers should secure evidence and investigate the transaction path.