If you spot a charge, transfer, or account alert you don’t recognize, contact your bank or credit union immediately using a verified number or its official app or website. Ask the fraud department to protect the account, report each suspicious transaction, and explain how to file a formal dispute. The steps and deadlines below concern U.S. consumer deposit accounts; your rights and next steps depend on what happened and how the payment was made.
What to do first if someone took money from your account
- Contact your bank through a verified channel. Call the number printed on your debit card or an official statement, or use the bank’s official website or app. Don’t trust caller ID, an incoming call, or a link in an unexpected text or email. Report each suspicious charge, debit, transfer, or access alert, and ask what to lock, replace, or reset. The Consumer Financial Protection Bureau (CFPB) advises contacting the institution quickly.
- Contain the compromised payment method. If your debit-card details may be exposed, ask the bank to cancel and replace the card and whether you should change the PIN. Keep watching your accounts and statements: the CFPB warns that “Fraudulent charges or debits to your accounts might occur months after the theft of your information” in its guidance on monitoring accounts after card data is hacked.
- Open a formal dispute and keep records. Follow the bank’s error-notice instructions. Ask how to submit written follow-up, and keep copies of what you send. Record call dates, the substance of conversations, and any case or reference numbers. Save statements, transaction IDs, alerts, and relevant messages. The CFPB also recommends written follow-up records for debit-card disputes.
- Secure online access. Change any password that may have been exposed and any reused password on other services. Turn on multifactor authentication (MFA) if available. Never give a caller your password, one-time passcode (OTP), or other account security credential. The FBI’s Internet Crime Complaint Center (IC3) warns that criminals impersonate bank staff; verify callers independently rather than relying on the number displayed.
- Escalate the incident type. If a wire transfer was fraudulent, contact the originating financial institution immediately and request a recall or reversal. Report the wire fraud to IC3 and preserve transfer details. If personal identifying information was also stolen, take the identity-theft steps below.
Which response fits the suspected fraud?
| What may be compromised | First response | Key follow-up |
|---|---|---|
| Debit card or PIN | Call the bank, report the loss or suspicious transaction, and ask about card cancellation or replacement and a PIN change. | Report promptly within the applicable window, check statements, and retain dispute records. |
| Online banking credentials | Call the bank using a verified channel and ask it to secure account access. | Reset exposed and reused passwords, enable MFA where available, and monitor for further activity. |
| Fraudulent wire | Contact the originating financial institution immediately and request a recall or reversal. | Report the wire fraud to IC3 and preserve transfer details. |
| Broader identity theft | Contact affected financial institutions and close affected accounts as appropriate. | Report the theft at IdentityTheft.gov; consider a fraud alert or credit freeze. |
How quickly must you report an unauthorized debit?
Report suspicious activity as soon as you discover it; don’t wait for the outer deadline. The CFPB’s 2026 explanation of federal Regulation E distinguishes a lost or stolen debit card or PIN from unauthorized debits when the physical card was not lost. For a lost or stolen card or PIN, reporting within two business days is important to the liability protection described by the CFPB. For unauthorized debits shown on a statement, report as soon as possible and within 60 days after the statement is sent. Potential liability depends on the access device and the facts of the case. See the CFPB’s explanation of unauthorized account transactions.
The same CFPB explanation describes general investigation and resolution timeframes. They are not guarantees that a claim is covered or that you will receive a final credit by a particular date.
| CFPB timeframe (2026 explanation) | What it describes |
|---|---|
| 10 business days | General period for investigating after notice of an unauthorized transaction; 20 business days can apply to accounts open less than 30 days. |
| One business day | Stated period to correct an error after the bank determines one occurred. |
| Three business days | Stated period for the institution to report findings after correction. |
| 45 days | General resolution period. Some cases—including certain foreign, new-account, or debit-card point-of-sale transactions—may take up to 90 days. |
A bank may request written confirmation after an initial phone report. If it provides temporary credit, treat that credit as provisional: the investigation and applicable rules determine the final outcome.
Recommended Free Tools
#1 Best Overall
What if someone took over your online bank account?
Account takeover means someone accessed an online financial or other account without authorization, potentially to steal money or gather information. Contact your bank as soon as you recognize the activity, using contact information you obtained independently. Ask it to secure access and, if a fraudulent wire was sent, request a recall or reversal. Change exposed passwords—including reused ones—and file an IC3 complaint with relevant banking and incident details.
The FBI IC3’s account-takeover public-service announcement says: “Companies generally do not contact you to ask for your username, password, or OTP.” If a caller claims to be from your bank, hang up and call a number from your card, statement, or the bank’s official site or app.
How do you dispute a transfer you approved after a scam?
Tell the bank exactly what happened, including whether you made or approved the transfer because someone deceived you. The CFPB says an electronic fund transfer made by a hacker using access information obtained through fraud can qualify as an unauthorized EFT under Regulation E’s definition and conditions. That does not mean every payment made after a scam is automatically treated as unauthorized. Distinguish an account access or transfer you did not authorize from a payment you personally approved after being misled, and ask the bank to assess the specific facts.
See the CFPB’s electronic fund transfer compliance FAQ for its explanation of the rule.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsWhat if your identity information was stolen too?
If the incident involves identity theft beyond the bank account, contact the affected financial institutions’ security or fraud departments and close affected accounts as appropriate. File a report at IdentityTheft.gov; it provides an Identity Theft Report and a recovery plan. Depending on your situation, consider a fraud alert or security freeze on your credit files. These credit protections do not replace notifying the bank about an unauthorized transaction.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Which accounts and payments are covered?
The deadlines and process described here concern U.S. consumer deposit accounts and the CFPB’s general federal electronic-transfer guidance. Checks, business accounts, commercial agreements, and state-law remedies may follow different rules. The payment method and the details of the incident matter, so report promptly and ask your financial institution how its dispute process applies to your case.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
