The first hour after noticing bank fraud matters. Locking the account quickly can stop more damage, and prompt reporting helps preserve your rights under bank policies and federal rules.
Does this affect you?
Use this for any U.S. bank or credit union account when you see unauthorized charges, transfers, changed login access, card fraud, check fraud, or online banking activity you did not make.
Call your bank immediately
Use a real phone number you control, not one from a suspicious message.
- Call the number on the back of your debit or credit card, a paper statement, or the bank’s official website.
- Tell the bank you believe the account was accessed without authorization.
- Ask them to freeze or lock affected accounts and linked cards right away.
- Review which transactions are unauthorized and confirm that a fraud investigation is being opened.
- Get a case number or reference number for your records.
- Ask for new card numbers and help resetting online banking if the login may be compromised.
- Ask what liability protection applies, including the bank’s zero-liability policy and Regulation E for electronic transfers.
Change your online banking password and check access
Do this as soon as the bank says the login can be safely reset.
- Change the online banking password to a long, unique one not used anywhere else.
- Turn on two-factor authentication for the bank account if available.
- Check for new payees, linked accounts, external transfers, and changed email, phone, or mailing address.
- If the old banking password was reused, change it on every other account where it appeared.
Protect your broader identity
Bank fraud may be a sign that more personal data is exposed.
- Place free credit freezes with Equifax, Experian, and TransUnion.
- Pull free credit reports at annualcreditreport.com and look for accounts you do not recognize.
- File a report at identitytheft.gov to create an FTC Identity Theft Report.
- Consider a local police report for large losses or if the bank requests one.
- Follow up with the bank in writing through secure message or mail, summarizing what you reported and when.
More control
Report quickly
For electronic fund transfers, reporting within two business days can significantly limit liability. Waiting longer may increase what you are responsible for, especially with debit accounts.
Keep watching after the first fix
Fraudsters may test accounts with small charges before larger ones. Monitor statements for several months after the incident.
Sources
- FTC Consumer Advice – What To Do if a Scammer Has Your Personal Information
- Consumer Financial Protection Bureau – What do I do if I am the victim of identity theft?
- IdentityTheft.gov FTC – Report Identity Theft