iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
If you see a transaction you do not recognize, contact your bank or credit union immediately through an official channel, preserve the evidence, and ask what formal dispute or error notice it requires. A small test debit can precede a larger theft, so do not wait for more activity. The correct deadline and protection depend on whether the payment was an electronic transfer, debit-card transaction, check, credit-card charge, or a payment you were tricked into authorizing.
What suspicious bank-account activity looks like
Start by reviewing every account used for deposits, bills, debit-card purchases, peer-to-peer payments and automatic withdrawals. Compare the activity with receipts, subscriptions, expected payroll and scheduled payments. Look for transactions that are unfamiliar in any of these ways:
- A debit, withdrawal or purchase you did not make.
- A small charge that seems insignificant but has no explanation. The Consumer Financial Protection Bureau (CFPB) warns that thieves may test stolen card data with a small debit before attempting a larger loss.
- Several transactions in a short period, especially at merchants or ATMs you do not use.
- A changed payee, new biller or transfer destination.
- A check number or amount that does not match a check you wrote.
- A cash withdrawal from a location you did not visit.
An unfamiliar merchant name is not automatically fraud. Businesses sometimes bill under a parent company, payment processor or legal name that differs from the storefront name. Check receipts, email confirmations and household spending before disputing an item, but do not let uncertainty delay a call when the transaction still cannot be explained. Ask the bank to help identify the merchant descriptor.
Recommended Free Tools
Check more than the current balance
Review pending transactions, posted transactions, electronic statements and alerts. A thief can make a small authorization that later posts for a different amount, or use account details without touching your physical card. Examine linked savings accounts, overdraft lines and payment apps if they draw from the same account. Save a copy or screenshot of the relevant page before information changes.
#1 Best Overall
What to do first: an evidence-preserving response
- Write down the facts. Record the transaction date, amount, merchant or payee, account involved, how it appears in the statement and any reference number. Note when you first noticed it.
- Call an official number. Use the telephone number printed on the debit card or statement. You can also open the bank’s official app or type its known web address yourself; do not use a link in an unexpected text, email or social-media message.
- Report the specific activity. Tell the fraud or disputes department exactly what you did not authorize and ask whether the bank needs a formal error notice, written confirmation or a separate card-fraud claim.
- Stop further access. Ask whether the card should be locked, cancelled and replaced, whether the PIN or security code should be reset, and whether the account itself should be closed and reopened.
- Create a durable record. Write down the date and time of every call, the representative’s name or identifier, the case number, promised next step and mailing or upload address for documents. Keep copies of letters, forms, screenshots and secure messages.
- Follow written instructions promptly. If the institution requests written confirmation after a telephone report, send it by the stated deadline and retain proof of delivery.
Do not call a number supplied by someone who contacts you unexpectedly and claims to be the bank, a government agency or a fraud investigator. A legitimate-looking caller can already know your name or partial account information. End the call and independently obtain the institution’s contact details.
Deadlines depend on the payment method
The following periods come from CFPB consumer guidance for electronic fund transfers. They are not universal deadlines for every payment or every kind of scam. Report the problem immediately even if you believe a deadline has passed.
| Situation | What CFPB guidance says | Why speed matters |
|---|---|---|
| Lost or stolen debit card or security code | Notify the institution within two business days after learning of the loss or theft to obtain the liability limit described by CFPB for the applicable electronic-transfer circumstances. | Waiting longer can increase the amount for which you may be responsible. |
| Unauthorized electronic withdrawal shown on a statement while the card, PIN or code was not lost or stolen | Notify the institution as soon as possible and no later than 60 days after the statement showing the withdrawal was sent. | Missing the statement-related period can affect protections. |
| Electronic-transfer investigation | Generally 10 business days after notice; 20 business days when the account has been open less than 30 days. | The institution may need more time and may have to provide provisional credit, subject to exceptions. |
| Final resolution of an electronic-transfer error | Generally within 45 days; certain foreign transactions, new accounts and point-of-sale debit-card purchases may take up to 90 days. | Keep monitoring the account while the investigation remains open. |
These are CFPB-published time frames, not guarantees that a claim will be approved. The facts, account type and transaction method determine which rule applies. Current CFPB guidance reviewed in 2026 should be checked alongside the institution’s instructions.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Debit cards and other electronic transfers
Debit-card purchases, ATM withdrawals and many account-to-account electronic transfers generally follow the electronic-transfer error process described by CFPB. Tell the bank whether your physical card, PIN or security code was lost or stolen, or whether the card remained in your possession. That distinction affects the notification period and potential liability.
What to include in the claim
- The account and card involved, without sending a full PIN or password by ordinary email.
- Each unauthorized transaction, with date, amount and description.
- When and how you discovered it.
- Whether the card, PIN, phone or security code was lost, stolen or exposed.
- Any suspicious messages, calls, ATM locations or login alerts connected to the incident.
The bank may initially take a report by phone and then request a signed letter, secure-message submission or other written confirmation. CFPB says that failing to provide requested confirmation within 10 business days can affect whether provisional credit must be provided during the investigation. Follow the bank’s stated method rather than sending sensitive information to an unverified address.
Investigation and provisional credit
After receiving notice, the institution generally has 10 business days to investigate an electronic-transfer error, or 20 business days when the account has been open for less than 30 days. If it cannot complete the investigation within that period, it generally must provisionally credit the disputed amount while continuing its review, subject to exceptions. The CFPB explanation says the bank may withhold up to $50 from that provisional credit in the circumstances it describes.
Resolution is generally required within 45 days. Certain foreign transactions, new accounts and point-of-sale debit-card purchases can take up to 90 days. If the institution concludes that the transaction was authorized or no error occurred, it must provide written notice before taking back provisional credit. Read that notice carefully and ask for the documents or reasoning used in the decision.
Free tools Windows power users keep installed
One-click scans. No signup required.
Unauthorized checks require a separate analysis
Report an unauthorized check to the bank or credit union as quickly as you can. CFPB’s consumer guidance states: Contact your bank or credit union as quickly as you can when you discover any unauthorized payment.
Ask how the check was processed. A check may have been converted into an electronic transfer, in which case electronic-transfer rules may apply. If it was not converted, state law and the bank’s check-fraud procedures may control the available protection and notice requirements. Provide the check number, amount, date, payee and an image if the institution requests one. Ask whether it should place a stop, close the account, issue a new account number or monitor other checks.
When you were tricked into making the payment
Scams often persuade a customer to initiate a wire, account transfer, mobile-app payment or gift-card purchase. Tell the bank or payment provider immediately that you were deceived, explain exactly what you authorized and ask whether a recall, freeze or fraud review is possible. Contacting the provider quickly can improve the chance of stopping an in-process transfer.
Do not describe an authorized payment as unauthorized if you approved it, even under pressure. The available guidance does not establish that every payment made because of deception qualifies as an unauthorized electronic transfer or will be reimbursed. Give the complete facts so the provider can apply the correct procedure. Preserve the scammer’s messages, phone numbers, invoices, wallet addresses and instructions; they may be needed for the provider, law enforcement or an identity-theft report.
Secure the account and your identity
Contain the immediate compromise
Ask the institution which access points may be affected: card number, account number, online-banking password, PIN, security questions, email address, phone number or a linked payment app. Change credentials through the official app or website, not through a link supplied by a caller or message. Use a unique password for banking and sign out of sessions the bank does not recognize. Ask whether two-step verification, transaction alerts or daily withdrawal limits can be enabled.
If the bank recommends closing the account, obtain written instructions for redirecting payroll, benefits, rent, utilities and other legitimate deposits or debits. Keep the old account available only as long as the institution says is necessary to complete the investigation, and monitor both accounts for residual activity.
Recognize possible identity theft
Unauthorized bank activity may be one symptom of broader misuse of personal information. If your Social Security number, identity documents or login credentials may have been exposed, contact each affected financial institution’s security or fraud department. Close affected accounts when advised, and make a report at IdentityTheft.gov. The service can provide an Identity Theft Report and a recovery plan.
Consider a fraud alert or a security freeze through a nationwide credit-reporting company. These tools address new-credit applications and do not replace the bank dispute. Keep copies of your identity-theft report, correspondence and recovery steps in a secure location.
How to avoid impersonation while reporting fraud
- Never provide a one-time passcode, full password or PIN to an unsolicited caller.
- Do not move money to a so-called safe account because a caller claims your bank account is under attack.
- Do not install remote-access software at an unknown person’s request.
- Open the bank app independently and verify alerts there.
- Use contact information from your card, statement or a website address you entered yourself.
Government and bank impersonation scams frequently create urgency. A genuine investigation can wait while you independently verify who is contacting you; the exception is your own prompt report through a trusted channel.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.If the bank does not resolve the problem
Start with the institution
Ask for the written decision, the reason for any denial, the date provisional credit will be removed and the documents needed for reconsideration. Reply through the bank’s secure message system or the address listed in its notice. Keep a chronological file containing statements, transaction records, letters, call notes, case numbers and delivery confirmations.
Use a federal complaint route
If the response remains unresolved, consumers can use the Consumer Financial Protection Bureau complaint process. Describe the transaction type, dates, amount, steps already taken and the remedy requested. Attach only copies and redact passwords, full account numbers and other unnecessary secrets.
Identify the correct regulator
Do not assume that FDIC insurance means the FDIC is the bank’s regulator. FDIC may insure a bank without supervising that bank for every issue. Find the institution’s full legal name and regulator on statements, the card, the bank’s website or the written response, then send a complaint to the appropriate agency. A credit union and a nonbank payment provider may have different oversight arrangements.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Monitoring after you report
Continue checking the account while the case is open. Confirm that replacement cards, account numbers and automatic payments work as expected. Review statements for related attempts, not only the transaction already reported. Watch for new emails, password-reset notices, address changes or credit inquiries that could indicate a wider compromise.
Keep alerts enabled for purchases, withdrawals, transfers and low balances. Reconcile statements on a regular schedule rather than waiting for an annual review. Store records in a protected location and retain the bank’s final decision for the period recommended in your account agreement or applicable law.
Common mistakes that weaken a report
- Waiting for a larger loss: a small test debit can be the first sign of stolen credentials.
- Using a search-ad or caller-provided number: it may route you to an impersonator.
- Failing to distinguish transaction types: a check, electronic transfer and payment you authorized under deception can have different procedures.
- Relying on a verbal promise: without a case number and written follow-up, it is harder to prove when you reported the issue.
- Ignoring a written-confirmation request: CFPB guidance says the omission can affect provisional-credit obligations.
- Closing an account without rerouting legitimate payments: payroll, benefits and bills can fail after a number changes.
- Sharing excessive secrets: a bank does not need your full password or one-time code to document a dispute.
A practical decision path
- If you can explain the merchant after checking receipts and subscriptions, keep monitoring and set an alert.
- If you cannot explain it, record the details and contact the bank through an official channel immediately.
- If a card, PIN or security code was lost or stolen, say so explicitly and ask about the two-business-day rule described by CFPB.
- If the card stayed with you and an electronic withdrawal appears on a statement, report it immediately and no later than the 60-day period described by CFPB.
- If it is a check, ask whether it was converted electronically and which check-fraud or state-law process applies.
- If you were manipulated into sending the money, say that you authorized the payment because of a scam and request an urgent recall or fraud review.
- If personal information was misused, contact affected institutions, use IdentityTheft.gov and consider a fraud alert or security freeze.
- If the institution’s final response is unsatisfactory, preserve the file and escalate through the CFPB complaint route or the bank’s actual regulator.
Bottom line
Spotting suspicious activity early is the most useful protection you control. Review every transaction, treat even a small unexplained debit seriously, report through a verified bank channel, keep a complete paper trail and identify the transaction type before relying on a deadline. Prompt reporting does not guarantee reimbursement, but it preserves the best chance of stopping additional losses and using the protections that apply.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
