What to Do When Your Wallet Shows an Unauthorized Transaction
Seeing a transaction you do not recognize in a digital wallet can be alarming, especially when the balance has changed or an unfamiliar payment appears in your activity history. Acting quickly helps preserve evidence, limit further access, and give the relevant support or payment provider the information needed to investigate.
SAWANVEGAS Wallet runs in a web browser, so the issue may involve the wallet account, a saved login session, the device, or the payment method connected to the transaction. A suspicious entry does not automatically prove that the wallet itself was breached, but it should be treated seriously until its origin is established.
Start by avoiding repeated login attempts, transfers, or account changes that could make the activity record harder to interpret. Record what you can see first, then secure access through trusted channels rather than links in unexpected emails, messages, or pop-ups.
Check the Transaction Details Carefully
Open the wallet only through the official website or a trusted bookmark. If you use browser shortcuts for convenience, follow safe wallet access practices and verify the address before entering credentials. A lookalike page can capture a password while appearing almost identical to the real service.
Review the transaction date, time, amount, currency, status, recipient, and any reference or authorization number. Some entries may be pending, reversed, duplicated, or related to a temporary authorization rather than a completed payment. Compare the record with email receipts, bank alerts, card notifications, and your own recent activity.
Also check whether the transaction could have been created by an authorized household member, a recurring payment, a delayed settlement, or an exchange-rate difference. If the recipient or amount remains unfamiliar after this review, treat it as an unauthorized transaction and move to containment.
Preserve Evidence Before Making Changes
Take clear screenshots showing the suspicious entry and the surrounding account activity. Include the visible date, time, amount, transaction ID, status, and recipient, while avoiding screenshots that expose your password, full card number, security codes, recovery phrases, or private authentication codes.
Write down when you first noticed the issue and whether you received a login alert, password-reset email, one-time code, or device notification. Save relevant messages in their original form when possible. Do not delete suspicious emails before checking their sender details and headers, because they may help establish whether an attacker attempted account takeover.
Keep a simple incident record with the steps you take. Note when you changed credentials, contacted support, froze a card, or reported the payment. This timeline can be useful if the case involves a bank, card issuer, browser session, or identity-protection service.
Secure the Account and Active Sessions
Change the wallet password from a trusted device using the official site. Create a unique password that is not used for email, banking, social media, or other financial accounts. If the same password was used elsewhere, change it on those services as well, beginning with the email account connected to the wallet.
Enable multifactor authentication if the wallet provides it, and review active sessions, remembered browsers, linked devices, and recent login locations. Sign out of sessions you do not recognize. Revoke unfamiliar permissions or connected applications, but record the relevant details before removing them if support may need to investigate.
Check the browser and device for signs of compromise. Update the operating system, browser, and security software, and remove extensions you do not recognize. Since the wallet depends on JavaScript to load its interface, avoid disabling essential browser functions permanently, but do not allow scripts or extensions from unknown sources. If the device behaves unusually, use a separate trusted device for password changes and support contact.
Contact the Right Payment Provider
Report the unauthorized activity through the wallet’s official support or contact channel and provide the transaction details, screenshots, and timeline. Explain precisely what you recognize, what you do not authorize, and whether your password, email account, device, or payment card may also be affected. Avoid sending confidential credentials or full payment details in an ordinary support message.
If a bank account, debit card, credit card, or external payment service was involved, contact that provider immediately through the number on its official website or the back of the card. Ask whether the payment can be blocked, disputed, reversed, or placed under review. A wallet operator may be able to investigate account activity, while the card issuer or bank may control the formal chargeback process.
Use official support channels rather than phone numbers or links supplied in suspicious messages. Scammers frequently impersonate financial support teams after a payment dispute becomes visible. Never share a password, one-time authentication code, recovery phrase, or remote-access permission with someone claiming to be an investigator.
| Situation | Immediate action | Information to keep |
|---|---|---|
| A transaction is pending and unfamiliar | Contact the wallet and payment provider before it settles | Amount, timestamp, status, reference number |
| A card or bank account was charged | Freeze or replace the payment method and ask about a dispute | Statement entry, merchant name, provider case number |
| An unfamiliar login appears | Change the password, end active sessions, and enable multifactor authentication | Login alert, device, location, date and time |
| The email account may be compromised | Secure the email account before resetting other services | Recovery changes, forwarding rules, security alerts |
| A device or browser seems unsafe | Stop financial activity on it and use a trusted device | Unfamiliar extensions, malware warnings, unusual behavior |
Monitor for Further Unauthorized Activity
Continue checking the wallet history, email inbox, bank statements, and card notifications for several days or longer. Attackers sometimes make a small test transaction before attempting a larger withdrawal. Set alerts for new logins, password changes, transfers, and payment activity wherever those controls are available.
Review your email account for forwarding rules, deleted security messages, unfamiliar recovery addresses, and changed filters. An attacker who controls email may intercept password resets even after the wallet password has been changed. Check your mobile account as well if text-message authentication is used, particularly if the phone suddenly loses service.
Do not assume that a successful password change resolves every risk. A stolen browser session, malicious extension, compromised email account, or exposed payment method can provide another route into the account. Continue monitoring until support confirms the case status and the related payment provider has completed its review.
Prevent a Repeat Incident
Use a separate, unique password for the wallet and store it in a reputable password manager. Avoid saving credentials in shared browsers or entering them on public computers. Before logging in, inspect the web address, connection indicator, and page behavior; urgent warnings and requests for immediate deposits are common signs of phishing.
Keep browser security features active and install updates promptly. Remove unneeded extensions, especially those that can read or modify website data. Never install software or allow remote access because a message claims your wallet requires urgent technical assistance.
Limit the personal information displayed in screenshots and public posts. Fraudsters can combine transaction references, usernames, email addresses, and activity patterns to create convincing impersonation attempts. Use the wallet’s official contact route and retain its case number for future correspondence.
Recommended Response Priorities
- Capture the transaction details and preserve relevant alerts before editing the account.
- Change the wallet and associated email passwords from a trusted device.
- End unfamiliar sessions, enable multifactor authentication, and remove unknown access.
- Contact the wallet support team, bank, card issuer, or payment provider through official channels.
- Monitor all connected accounts and report additional suspicious activity promptly.
Take action now by documenting the transaction, securing your account, and submitting a complete report through the official support channel. Fast, careful steps can reduce further exposure and create a clear record for the teams reviewing the unauthorized payment.