Does a card payment prove that the cardholder made it?¶

No. A transaction is associated with a card account or token; personal use requires evidence connecting the relevant payment route to the cardholder.

Several users can produce a valid event¶

Another authorised person may use the card, while stolen details, a cloned card or compromised wallet token can support unauthorised use. Online and recurring payments need no physical card, and even PIN or biometric success identifies a completed security step rather than a person.

Reconstruct the user route¶

Obtain issuer records, card allocations, entry and authentication method, token provisioning, merchant records, CCTV, order and delivery information. Compare card possession, reported loss, wallet setup, freezes, changes and repeated attempts.

Test both denial and attribution against the combined evidence. Report payment by the card account or token unless endpoint, merchant and contextual records identify the user.