What is the process for reporting unauthorized transactions?

What is the correct process for reporting unauthorized or suspicious transactions?,