Facebook or Instagram charged my card for ads I don't recognize. What should I check?
The short answer
An unfamiliar entry needs checking; its name or amount alone does not prove hacking. Compare it with the ad account's payment activity and receipts, including earlier campaigns and boosts. If activity is unauthorized or you cannot trace the charge, contact your payment provider promptly and investigate account security in parallel.
What this answer is based onWhat to do
Save the date, amount, currency, merchant description and transaction reference. Keep evidence private and mask unrelated transactions and full payment-card details.
- Use your bank's official app or statement to check whether the entry is pending, reversed or completed. Ask the provider whether it is a temporary authorization if unclear. Do not dismiss an unfamiliar entry just because it is small or pending.
- If you have access, open Payment activity in Meta's Billing & payments and select the transaction. Match its reference, amount, payment method and ads to the statement. Read the billing reason: automatic billing can charge at a payment threshold or monthly bill date, including after ads stop.
- Check other ad accounts you legitimately manage and ask authorized colleagues or your agency whether they recognize the expense. Confirm the actual spending; a genuine invoice or someone having account access does not establish that you authorized it.
- If campaigns are genuinely unauthorized and you can control them, pause them and preserve their IDs and screenshots. Review unexpected access changes. Use the hacked-account and unknown-login guides to secure affected logins; do not delete evidence or share passwords with a recovery service.
- Report the specific transactions and activity using Meta's official ad-account help options. Contact your payment provider through a trusted channel about protecting the payment method, dispute evidence and deadlines. Do not wait for account recovery before raising suspected misuse.
- If you cannot log in or never had an ad account, keep the statement evidence and explain this to the payment provider. Use Meta's official charge-help or recovery route where available. Do not create an ad account or make a test payment to access support.
Do these in parallel
The transaction is unfamiliar or may be unauthorized
Contact the actual bank or payment provider through its official app or trusted statement contact. Ask about the transaction, protecting the payment method, evidence and deadlines. Do not wait for account recovery.
Campaigns or access changes are unauthorized
Keep campaign IDs and evidence. Pause unauthorized spending you can control and secure affected logins and email while the payment report proceeds.
Meta’s payment record or ad help is available
Match the exact transaction and report it through available official ad-help options. A genuine receipt does not prove the spending was authorized.
If you cannot sign in or never had an ad account, keep the statement evidence and contact your payment provider. Do not create an ad account or make a test payment.
How to check the result
The charge is identified as authorized, reversed or refunded, or the dispute has an actual outcome. Check ongoing spending and account security separately; a support receipt is not a refund.
Check what actually happened. Opening a link, saving a draft or receiving a receipt does not complete the case.
The situation
For example, a shop receives a charge after ending a promotion. Its manager compares the receipt with that campaign's spending period. If the receipt instead names unknown ads, the manager reports them and starts security checks.
More examples
If a small pending entry follows adding a card
You recognize the card setup but not the statement entry.
What to do
Ask the provider whether it is a hold and what status to expect. If you did not authorize the card setup, investigate possible misuse.
If a real receipt contains unknown campaigns
The statement matches Meta's record, but nobody authorized those ads.
What to do
Preserve the receipt and campaign IDs, report unauthorized activity and follow the hacked-account guide. Matching records do not establish authorization.
What this answer is based on
Meta — Troubleshoot unrecognized activity on your ad accountwww.facebook.comMeta — View your Facebook ad charges and payment historyMeta — When Meta charges you for adsMeta — Recover a hacked or compromised business portfolioMeta — Our Commitment to Keeping People SafeGuide based on Meta’s materialReview details
Source reviewed:
We read the official source listed for this topic. Other Meta rules are reviewed separately.
Read Meta's public unrecognized-ad-activity article and automatic-billing article on 6 October 2026, including receipts, billing reasons, earlier ad spend, other spenders and reporting. Payment-history text was read, but its expandable authorization-charge explanation was not returned. The public compromised-business article omitted its expandable recovery steps. No transaction, live account, reporting form or refund eligibility was checked.
Include the guide link, language and wording that needs checking. Add an official source link if you have one. Do not send passwords, login codes or photos of identity documents.
Examples are made up to explain the guidance. Meta decides individual account and content cases.
Sources and related topicsPolicy Graph · Demo in development