TRAVEL

The €1,240 I Never Spent in Budapest

A Budapest cash machine cloned my debit card. Six charges posted overnight: €1,240. Checking dropped to $386 on day 3 of 10. The bank promised 5-10 business days. The provisional credit landed day 10, Friday, 4:41 PM. I keep three ATM rules now.

Zofia Nartowicz
Staff Writer
September 15, 2026 · 4 min read

Seven-twelve in the morning on day three in Budapest, and the phone on the nightstand is buzzing its eleventh fraud alert since sunrise. The banking app shows six charges posted between 3:04 and 5:58 AM, totaling €1,240, all while I slept in a room above a courtyard on the Pest side. The largest single one: €610 at an electronics store I have never entered, in a district I have never visited. Coffee could wait.

The stakes stacked up fast. Checking account: $386 after the fraud hold. Trip remaining: eight days, with only the last three nights prepaid. Rent back home due on the first, nine days out. The bank's fraud desk, reached after a fifty-one minute hold, promised a provisional credit in five to ten business days, which is a sentence that makes you price bus tickets and bread rolls in the same breath.

the machine on Váci utca

The clone happened at 11:50 the night before, at a freestanding cash machine on Váci utca between a gift shop and a closed shoe store. I pulled €200 for the market halls, paid the €4.90 operator fee without reading it, and spotted the loose plastic lip on the card slot only afterward, in the photos I took of the receipt. The machine looked official. The keypad had a sponginess I registered and dismissed.

six charges while I slept

The statement told the night back to me in six lines. 3:04 AM, €280 at a convenience chain, two attempts, one declined. 4:12 AM, €610, electronics store. 4:31 AM, €140, fuel station. 5:15 AM, €120, same chain, approved. 5:58 AM, €90, another fuel station, the last strike before the card died for good. Five approved, one declined, €1,240 total, none of them mine, and none of 'em possible, since the card sat in my hotel room thru all of it.

the call with the fraud desk

The fraud desk call took fifty-one minutes, one claim number (448291), and an affidavit I signed with a finger on a phone screen. The agent was competent and honest about the sequence: provisional credit in five to ten business days, then an investigation that could run thirty more, then a letter. The card died instantly. A replacement would reach the hotel in two days, which meant two days on my backup card, which meant every coin in my pocket now had a job. The backup itself was a credit card with a $2,000 limit I had never once touched on the road, and it now paid for everything: hotels, groceries, the airport bus. I paid it down from home thru the app twice that week to keep the balance from creeping toward the limit. A card you never use abroad turns out to be the cheapest backup a traveler owns.

day 3 of 10, checking at $386

The trip shrank to fit the money. The last three nights moved from an $88 hotel to a $41 pension across the Danube in Buda, same tram line, quieter street. Market hall dinners replaced restaurants, which turned out to run €6 to €9 and taste better than half the sit-down meals I have paid four times that for. The Vienna day trip, $74 with the train, got cut entirely; I climbed Gellért Hill instead, for free, and watched the whole city go gold at 7:40 PM. Eight days on $386 plus one untouched credit card reserved for the flight home. The pension ran on cash for the room and honor for the rest: a key attached to a wooden fish, breakfast rolls at 7:30, and a landline at the desk that the owner lent me for the second fraud call. Daily spend settled near $30, tracked in the same notes app where I keep grocery totals. Budapest on $30 a day is entirely doable, just quieter; the thermal bath went, the river cruise went, and the walks got longer.

the credit lands on day 10, Friday

Day ten, Friday, 4:41 PM, waiting in the airport bus queue, and the banking app refreshed itself with the provisional credit: $1,340.80. The euro had moved half a percent in my favor overnight, so the crime netted me exactly $6.44 of exchange-rate luck. The permanent letter arrived on day twenty-three: charges confirmed fraudulent, case closed, no deductible. The full recovery cost fifty-one minutes on hold and one affidavit.

the rules I keep now

The rules run three lines and cost nothing. Machines attached to an actual bank branch, OTP, Erste, or K&H, used during lobby hours when a camera or a guard is on shift. No freestanding machines on tourist strips, ever, cuz that strip is where the skimmers live, and Váci utca taught it at €4.90 a lesson. Cover the keypad, wiggle the card slot before inserting, and refuse any machine that offers to charge me in dollars instead of forints. Withdrawals are capped at €100 a day now, from inside a branch.

the nightstand, morning of day three

I still keep the screenshot of the eleventh alert, 5:58 AM, €90, the one that finally drained the card. The checking account now travels with a twin: a separate $200 travel account with its own card, so the main account is never the one exposed. Replacement card number two lives in the hotel safe until market mornin'. On day three I went downstairs at 8:00, bought cherries from the courtyard stall with coins, and the phone stayed quiet for the rest of the trip.