How to Find Out Who Is Behind the Company That Charged Your Card
There is a charge on your statement from a company you have never heard of. The website, if there is one, is a template with no address and no phone number, and the name next to the amount looks like a string of letters someone mashed together. Two things need to happen, in order. First the immediate: dispute the charge with your card issuer, because there are hard time limits and the dispute process is powerful and it belongs to you by right. Then the identification: that cryptic line on your statement, the merchant descriptor, is a thread you can pull all the way back to a registered business, its officers, and a real address where legal papers get served. This guide walks through both, and where the trail usually ends.
The Short Version
Do the urgent thing first: dispute the charge with your card issuer now, because credit-card billing-error rights run out roughly sixty days after the statement, and a debit-card window can be shorter. Do not wait until you have solved the mystery to protect your money. Then work the identification in layers. The merchant descriptor next to the amount usually carries a processor prefix, a business name (often a doing-business-as label, not the brand), and sometimes a city or a customer-service phone number. Your card issuer can tell you the merchant of record, which the website will not. If the name resolves to a registered company, the Secretary of State filing lists the officers and the registered agent, and that agent is a real address for service of process. The domain adds one more layer: hosting, payment processor, and the same template repeated across dozens of sites tell you whether you are looking at one confused business or a chain of shells. Most of the time it is a legitimate merchant with a confusing descriptor. Sometimes it is a subscription trap built to be hard to unwind. The dispute solves your money; the identification solves the pattern, and for clear fraud you also report it. People Locator Skip Tracing has been piercing corporate layers lawfully since 2004.
Watch: Who Charged Your Card
How to read the descriptor and trace it to a real company.
Watch Overview
Before You Investigate, Protect the Money
Identification can wait a day. Your dispute rights cannot.
The single most important move is separate from the detective work, and it has a clock on it. For a credit card, the Fair Credit Billing Act gives you the right to dispute a billing error in writing, and the issuer must receive that dispute no later than sixty days after it sent you the first statement showing the charge. Once you dispute correctly, the issuer has to acknowledge it and cannot try to collect the disputed amount while it investigates. You can read the statute yourself at 15 U.S. Code Section 1666. A phone call to your issuer starts the process, but follow it with something in writing so the legal protection attaches. The federal consumer agency keeps a plain-language walkthrough of how to dispute a credit-card charge that is worth reading before you call.
If the charge hit a debit card, the rules are different and generally less forgiving, because that money already left your account. Debit disputes fall under the Electronic Fund Transfer Act, and the deadlines to report an unauthorized transfer without absorbing more of the loss are measured in a handful of days, not sixty. So move faster, not slower, on a debit charge. Either way, ask the issuer one specific question while you have them: what is the merchant of record, the billing descriptor, and the customer-service phone number and city attached to this transaction? That single answer is often the whole thread, and the issuer has it even when the website is a dead end. Disputing is not the same as accusing anyone of a crime; it is a routine, protected process. Save it for later whether the merchant turns out to be a mix-up or something worse.
Reading the Merchant Descriptor
That cryptic line is not random. It has parts, and each part points somewhere.
The descriptor is the short line of text your bank prints next to the amount, and it is the merchant’s own compressed self-description, squeezed into a field only a couple of dozen characters wide. Once you know how it is built, it stops looking like noise. Three components show up again and again.
The processor prefix. When you see letters and an asterisk at the front, that front piece usually identifies the payment platform or aggregator, not the merchant. A charge that reads like a platform code, then an asterisk, then a business name is telling you the money ran through a large processor that services thousands of sellers, and the seller chose the text after the asterisk. That is why the same prefix can appear on a coffee shop, a yoga studio, and a rogue subscription. The prefix narrows down the processor you or your issuer can contact; the part after the asterisk is the specific merchant’s chosen label.
The soft descriptor. The business name in the descriptor is frequently a doing-business-as label rather than the legal company name or the brand you would recognize. A single company can register several soft descriptors, and a storefront brand can bill under a parent entity you have never seen. This gap between the name you were shown at checkout and the name on the statement is normal for legitimate businesses and is also exactly what an evasive operation relies on. It is why the descriptor is a starting point, not a verdict.
The embedded city and phone. Many descriptors carry a city, a state abbreviation, or a customer-service telephone number. Call the number: a real business answers as itself, while a shell often routes to a call center that services many brands and reads from a script. If a number keeps ringing to an unrelated operator or a robotic line, that itself is a signal. When a descriptor phone number turns out to be spoofed or shared across unrelated charges, the same lawful research we use to identify who is behind a spoofed number can help attach it to a real operator. Write down every fragment exactly as it appears, including spacing and punctuation, because those characters are the search terms for every step that follows.
Signs It Is a Subscription Trap
Most mystery charges are honest mix-ups. These patterns say otherwise.
A Small Recurring Amount
A modest charge you barely notice, repeating monthly. Negative-option billing counts on the amount being too small to chase.
A Free Trial You Forgot
The charge traces to a trial or one-time purchase that quietly converted into a recurring plan you never meant to keep.
A Template Website
The site loads but is generic, with stock images, no street address, and a contact form that goes nowhere.
Cancel Is Hidden
You cannot cancel online, the phone line loops, or you are told to email an address that never replies.
The Name Keeps Changing
The descriptor shifts month to month, or several near-identical names bill the same card, a sign of rotating shells.
No Entity to Be Found
The name matches no registered business in any state, or matches one that dissolved years before the charge.
From a Name to a Registered Entity
If the descriptor names a real company, the state filing names the people.
This is where a cryptic charge turns into a named business with an address. Almost every company that can lawfully take card payments is registered somewhere, and most states publish a free business-entity search run by the Secretary of State. Run the descriptor name, and each plausible variant of it, through those databases. What you are looking for is a matching limited liability company or corporation, and when you find one, the filing is a small dossier. It shows the legal entity name, the formation date, the status (active, delinquent, or dissolved), the officers, managers, or members named on record, and the registered agent.
The registered agent is the most useful line on the page. Every registered entity must name an agent, which is a real person or a commercial service at a physical street address designated to receive legal papers, including a lawsuit. A brand can hide behind a template website, but the agent address is where a court summons is delivered, and it cannot be a blank. If the agent is a commercial registered-agent service rather than the owner, the underlying formation documents and the organizer named on them still push you a step closer. A formation date that lands just before the first charge, an address shared by dozens of unrelated companies, or a chain of entities that each own the next are all patterns worth noticing. When the descriptor resolves to a business that seems to exist only on paper, the same approach we describe for confirming whether a business is a shell company applies directly, and if the entity has quietly wound down, our guidance on how to tell whether a company is going out of business helps you read a dissolved or delinquent status correctly.
The Domain and Network Trail
One back end often runs many storefronts. The wiring gives it away.
The website is the last layer, and even a bare template leaks information. Domain registration data is often privacy-protected now, so the public record may not name a human directly, but the surrounding infrastructure still tells a story. Hosting provider, the organization on the security certificate, the payment processor the checkout hands off to, the analytics and tracking identifiers embedded in the page, and the exact wording of the terms-of-service and refund pages can all be compared across sites. Recurring-charge operations are rarely one storefront. They tend to run hundreds of near-identical sites off one shared back end, reusing the same template, the same support script, and the same processing account, and that repetition is the fingerprint that ties a lone confusing charge to a wider pattern.
This is the same discipline used to unmask any operation that hides its ownership behind a slick front, whether that is a rogue biller or the promoters running a project. The lawful methods we describe for learning who is really behind a crypto project translate cleanly here, because both come down to connecting a public-facing brand to the registrations, addresses, and people who stand up its infrastructure. On its own, a single site is a lead. Cross-referenced against corporate filings, processor records, and a cluster of sibling domains, it becomes an identification you can act on.
The Layers, and How Far Each Goes
What you can check yourself, and where a records team reaches further.
| Layer | What You Can Do Yourself | What Deeper Research Adds |
|---|---|---|
| The Descriptor | Read the prefix, name, city, and phone off your statement; call the number. | Match the merchant of record and processor account to the seller behind the label. |
| Card Issuer | Ask the fraud team for the merchant name, phone, and city on file. | Interpret what the issuer returns and connect it to registered entities. |
| State Filings | Search the Secretary of State site for the name; read the agent and officers. | Search across all states and name variants; trace chains of linked entities. |
| Domain and Network | Look up the site and note the host and template. | Cluster sibling sites, certificates, and processors into one operation. |
| Full Identification Records Team | Hard to assemble alone across states and layers. | One report tying the descriptor to a named entity, its officers, and a served-able address. |
Plenty of this you can do at your kitchen table, and for a plain billing mix-up you may not need anyone. The value of a records team shows up when the layers do not line up: the descriptor names one thing, the site names another, the entity is registered in a state you never did business with, and the agent address is shared with a hundred other companies. Pulling those threads into a single, documented identification is the work our investigation team does every day.
How We Work Your Charge
A lawful, public-records path from a descriptor to a named business.
Send the Descriptor
Give us the exact billing line, the amount, the date, and anything the issuer told you: merchant name, city, and phone. Screenshots are ideal.
Decode and Match
We break down the processor prefix and soft descriptor and identify the likely merchant of record and processing account behind it.
Resolve the Entity
We search business filings across states for the name and its variants, and pull the officers, status, and registered-agent address on record.
Map the Network
We cross-reference the domain, host, and sibling sites, then deliver one report naming the entity, the people, and a served-able address.
Who We Help
Anyone who needs a name and an address behind an unexplained charge.
Cardholders
Name the biller behind a charge
Families
Explain a relative’s odd charges
Attorneys
Get a served-able entity and agent
Small Businesses
Trace a vendor billing under a DBA
Bookkeepers
Reconcile an unrecognized line item
Fraud Victims
Attach a name to report and pursue
Occasionally the charge is not a subscription at all but a sign the card number itself is compromised, showing up alongside other transactions you never made. When that is the picture, treat it as identity theft: keep disputing, ask the issuer for a new card number, and file a report at the government’s identity-theft site. A rogue biller is also frequently one node in a wider fraud web, and the same lawful research that identifies it is what we use to trace who is behind a fake charity text and other pay-and-vanish schemes. Send us whatever you have, even if it feels like nothing: a descriptor, an amount, a date, a dead website. For a legitimate matter, an initial identification typically comes back within 24 hours.
Our Commitment
We do not take custody of your money, chase your refund, or promise the charge will be reversed; that is between you and your issuer. What we do is the lawful public-records work that turns a cryptic descriptor into a named entity, its officers, and a real address. Honest, permissible-purpose research since 2004.
Frequently Asked Questions
What is the first thing I should do about an unknown charge?
Protect the money before you play detective. Dispute the charge with your card issuer, in writing for a credit card, because Fair Credit Billing Act rights generally expire about sixty days after the statement. Debit-card windows under the Electronic Fund Transfer Act are shorter, so move even faster. Identifying who is behind the charge can happen in parallel.
What is a merchant descriptor and how do I read it?
It is the short line of text your bank prints next to the amount. It usually contains a processor prefix that points to the payment platform, a business name that is often a doing-business-as label rather than the brand, and sometimes a city or a customer-service phone number. Each part is a search term for the next step.
Why does the name on my statement not match where I shopped?
Companies bill under soft descriptors and parent entities that differ from the storefront name you saw at checkout. This is normal for legitimate businesses and is also what evasive operations rely on. The mismatch is a reason to keep tracing, not proof of fraud by itself.
How do I find the actual company behind the charge?
Ask your issuer for the merchant of record, then run the descriptor name and its variants through Secretary of State business-entity searches. A matching filing lists the officers and the registered agent, which is a real street address for service of legal papers. The domain and hosting add a further layer.
What if the descriptor matches no registered business at all?
That is a meaningful signal. A name that matches no active entity in any state, or matches one that dissolved before the charge, points toward a shell or a rogue biller. Cross-referencing the domain, processor, and any sibling sites often reveals the real operator standing behind the empty name.
Is this a subscription trap or just a legitimate business?
Most mystery charges are legitimate businesses with confusing descriptors or a forgotten free trial. Watch for small recurring amounts, hidden cancellation, a template website with no address, and a name that shifts month to month. Those patterns point to negative-option billing rather than an honest merchant.
When should I treat it as outright fraud?
If you never authorized any purchase, if the card number appears on other transactions you did not make, or if the biller cannot be identified and will not stop, treat it as fraud. Keep disputing, ask for a new card number, and report it to the FTC and, where the card was compromised, to the identity-theft authorities.
What does People Locator Skip Tracing actually deliver here?
We do the lawful public-records identification: decoding the descriptor, resolving it to a registered entity, pulling the officers and registered-agent address, and mapping the domain network. You get one report naming the business and a served-able address. We do not recover your money or reverse charges; that is your issuer’s role.
Cryptic Charge on Your Card? Name the Company.
Dispute it with your issuer today, then let our investigation team turn the descriptor into a named entity, its officers, and a served-able address. Contact us to get started.
Start Your Request →
