Back to Learn

How do I scan a bank statement for unusual transactions?

By the Karchu Editorial Team · Last updated

Short answer

To scan a bank statement for unusual transactions, first turn the statement into a sortable table of date, description and amount. Then run five passes over it: sort by amount to see the largest debits, group by merchant to spot charges that are unusually high for that payee, list payees appearing for the first time, look for repeated identical amounts within a few days, and compare each category total against the previous months. Anything that fails a pass is a candidate, not a verdict, and needs checking against a receipt or the merchant.

How it works

Scanning for unusual activity is a comparison problem, not a reading problem. Nothing on a statement is unusual on its own. A payment of 4,000 is routine for one account and alarming for another, so the first requirement is a baseline: enough history that a normal month exists to measure against.

Once the transactions are in a table, five passes do most of the work. Sorting by amount surfaces the largest debits. Grouping by merchant lets you compare a charge against the history for that specific payee, which catches the supplier who billed four times the usual figure. Filtering for first time payees isolates the merchants that have never appeared before. Searching for near identical amounts within a short window catches double charges. Totalling by category and comparing periods catches the drift that no single row reveals.

Each pass produces candidates. A candidate is not a finding. The last step is always human: match it to a receipt, an invoice, or a payment you remember making.

Examples

A monthly cloud bill that normally lands between 180 and 220 arrives at 1,340. Sorting by amount alone would not necessarily surface it on a business account, but comparing against the history for that merchant makes it obvious immediately.

A charge of 1.00 from an unfamiliar payee, followed two days later by a charge of 480 from the same payee. Individually neither is remarkable. The pair is a classic card testing pattern.

Two identical charges of 59.99 to the same subscription three days apart. Usually a billing retry that was not reversed, occasionally a genuine double charge, always worth a look.

Software spending up 31 percent against the previous month with no new hires. The category total is the signal, and reading only that category then reveals the three new subscriptions behind it.

Benefits

Unauthorised charges are found while there is still time to dispute them. Duplicate billing gets refunded rather than absorbed. Subscriptions that quietly increased in price become visible in the month they change rather than a year later.

Beyond fraud, the same passes surface ordinary waste: services nobody uses, overlapping tools, and suppliers whose prices crept up without a conversation.

Common mistakes

Reviewing a single statement. With no baseline, every large payment looks suspicious and every genuine anomaly looks normal.

Treating credits as safe. A refund, a reversal and a transfer in all look like money arriving. A chargeback you did not expect is as much a signal as an unexpected debit.

Relying on the description alone. Card descriptors are processor codes, so the same merchant appears under several names and none of them is the shop you remember. Normalise the merchant text before grouping.

Assuming a flagged row is fraud. Most flags are ordinary transactions you forgot. Treating flags as accusations means people stop reviewing them.

Frequently asked questions

What counts as an unusual transaction?

A transaction that departs from your own pattern: an amount far above your history with that merchant, a payee that has never appeared before, a charge repeated within a short window, a category total that jumps sharply, or activity at an unusual time or location. Unusual is relative to your baseline, not to a fixed threshold.

How many months do I need?

Three months is the practical minimum for a baseline. Twelve months is better because it captures annual charges, seasonal spending and subscriptions that renew once a year, all of which look unusual against three months and are perfectly normal against twelve.

Can software do this automatically?

It can do the arithmetic, which is most of the work: comparing each charge against merchant history, flagging first time payees, finding near duplicates and highlighting category jumps. It cannot know whether a charge was authorised. Software narrows a thousand rows to a handful, then a person decides.

What should I do when I find one?

Check it against a receipt or an invoice first, since most surprises are legitimate charges you forgot. If nothing explains it, contact the merchant, and if the merchant cannot explain it, contact your bank. Card networks have time limits for disputes, so this is worth doing promptly.

Is a small unexplained charge worth chasing?

Often yes. Card testing frequently starts with a very small charge to check the card works before a larger one follows. A one off small amount from an unknown payee is worth thirty seconds of attention.

How Karchu helps

Karchu extracts your statements into transactions, normalises the merchant text, and runs these comparisons for you: charges far above your history with a merchant, first time payees, near duplicates, and category totals against previous periods. Unusual transactions appear as insights with the reasoning attached and the supporting rows one click away.

Nothing is asserted as fraud, and no figure is generated by a model. The numbers come from your own transactions, and you can open the rows behind any of them.

No bank credentials. Statement files only.

Sources

Related reading

Guides

Features

Comparisons

Use cases