Thief watched you enter your PIN — then drained your card. Here's why you may not get a refund

While on vacation abroad, a traveler identified only as A entered a PIN at a kiosk to buy a transit ticket — and a nearby criminal was watching. Moments later, the card was pickpocketed, and the thief withdrew 4.5 million won ($3,060) in cash from a separate ATM. A immediately reported the card lost and stolen, and the card issuer filed a dispute with the overseas brand network, including Visa — but the answer came back: no compensation. The transaction had been completed with the correct PIN.

With the summer vacation season approaching, travelers heading abroad need to know how to use their credit cards safely. The Financial Supervisory Service drew on cases like A's to release eight credit card precautions for consumers, covering fraud prevention, how to respond to incidents, and the rules and steps cardholders need to know.

PIN transactions unlikely to be covered — According to the Financial Supervisory Service, disputes over offline card payments or ATM withdrawals involving PIN entry are typically treated as the cardholder's responsibility for failing to protect the PIN, making compensation from the card issuer difficult. The same applies to overseas online payments: transactions verified through PIN entry or mobile authentication are frequently excluded from compensation.

Card data can be stolen in a variety of ways. ATMs in isolated locations or privately operated machines may be fitted with skimming devices that copy the magnetic stripe, or illegal cameras may record keypad entries to capture PINs. At overseas street stalls and bars, criminals have been known to take a card out of sight, remove the IC chip and transplant it onto another card. The Financial Supervisory Service urged cardholders to shield the keypad at public ATMs and to watch the payment process directly.

Foreign SIM cards cut off fraud alerts — One of the most common reasons financial losses grow during overseas travel is that cardholders miss fraud detection alerts. Using a foreign SIM card makes it impossible to receive domestic text message notifications, so repeated unauthorized charges can go unnoticed for longer.

The Financial Supervisory Service recommended switching payment alerts to KakaoTalk or card app push notifications before departure. If a phone number has changed, it should be updated in the card company's app. Saving the card issuer's app and lost-card hotline number in advance can also cut the time it takes to file a report.

Block domestic charges when abroad; restrict overseas use when at home — Card issuers have been expanding preventive services as domestic fraud cases involving overseas travelers have increased. A domestic fraud pre-blocking service lets users selectively block domestic online payments, offline payments and cash advances, and set per-transaction and daily spending limits as well as restrictions on late-night transactions. Customized settings are possible — for example, blocking only domestic offline payments while keeping overseas direct-purchase transactions active.

The service is free and available through card company mobile apps, customer centers and websites; once activated, it remains in effect continuously. KB Kookmin and Hyundai Card already offer the service, while Hana and Shinhan Card plan to complete their system rollout by the end of this month, with the remaining card issuers to follow in the second half of the year.

For cardholders staying in Korea, an overseas-use safety setting service is available. Users can directly configure the scope of overseas payments — covering online, offline and cash advance transactions — along with eligible countries, spending limits and the period of validity. A separate overseas entry and exit information service, applied for with the cardholder's consent, allows card issuers to receive only a yes-or-no departure status from the Ministry of Justice's immigration office, which is then used to flag suspicious overseas transactions.

No local police report makes fraud hard to prove — Article 40 of the standard terms and conditions for individual credit card members requires both the cardholder and the card issuer to cooperate in good faith during a lost-or-stolen investigation. If it cannot be determined whether a transaction was made by the cardholder or was fraudulent, compensation is difficult to obtain. In one documented case, a cardholder was denied compensation for 7.4 million won in overseas charges because supporting evidence — including a local police report — was insufficient.

The Financial Supervisory Service said that when a card is lost, stolen or counterfeited abroad, cardholders should report the incident to local law enforcement and obtain a police report to submit to the card issuer upon returning to Korea. Carrier location data and Google Maps location history at the time of the transaction can also serve as supporting evidence.

Lending a card to a family member may disqualify a cardholder from compensation. Article 15 of the Specialized Credit Finance Business Act and Article 5 of the standard individual credit card terms and conditions prohibit cardholders from allowing spouses, family members or other third parties to use their card. The Financial Supervisory Service recommended applying for a family member card issued in the family member's own name instead of lending one's card.

In addition, travel cards — prepaid, rechargeable cards widely used by overseas travelers — are governed by different laws than credit cards, and under their terms and conditions, losses incurred before a lost-card report is filed are generally not eligible for compensation. Travelers who lose a travel card abroad should report it immediately through the card's app to minimize losses.

Retrieve cards from unmanned kiosks; use the batch lost-card reporting service — Domestically, cases of cardholders leaving their physical card behind after using unmanned stores have been flagged as a growing problem. Walking away with a card still inserted in a kiosk, or leaving a bag or wallet unattended at a cafe to hold a seat, are both treated as the cardholder's fault.

If cards from multiple financial institutions are lost at once, contacting just one card issuer is enough. A batch lost-card reporting service will process the report across all other card issuers as well, and is available by phone through automated response systems as well as through each card issuer's website and mobile app. Cardholders can use the "other-issuer card loss report" menu in any card company's app, or the "My Cards at a Glance > Batch Card Loss Report" feature in the Korea Financial Telecommunications and Clearings Institute's AccountInfo app.

Online course refunds: installment objection rights require proof — Beyond unauthorized transactions, disputes over online content payments were also flagged as an area of concern. Under the Installment Transactions Act, the right to object to an installment payment can only be exercised when the nullification, cancellation, rescission, termination or non-delivery of the purchase contract has been established. When an online course has already been provided or started, the Financial Supervisory Service said, the parties' claims over whether a contract was breached can be sharply contested, making it difficult for card issuers to directly assess service quality or determine whether a violation occurred.

The Financial Supervisory Service urged consumers to check course content, the provider's reputation, and the terms and conditions covering mid-term cancellation and refunds before making a payment. Disputes involving non-performance of contract, quality issues or refunds can be referred to the Korea Consumer Agency's counseling and damage relief service at 1372 (no area code required).