Who can actually access your bank account

No — not without your permission, your PIN, your password, or a court order. Your bank account is legally yours alone unless you have explicitly added someone else as an owner or authorized user. A stranger cannot walk into a branch and withdraw money. A creditor cannot touch your account without a judgment and a garnishment order from a court. Even your spouse cannot access it without being named on the account.

The real risk is not strangers breaking in — it is people you know or have given partial access to, plus specific legal situations where courts or government agencies can take money directly. Understanding the difference between these scenarios matters because your response to each one is different.

Key Takeaways

  • Only account owners and people you have explicitly authorized can access your account; a stranger needs your login credentials or a court order to touch your money.
  • Joint account holders have full access to all funds in the account, even if they did not deposit the money, and you cannot prevent them from withdrawing it.
  • Creditors with a judgment can garnish your account, but only after winning a lawsuit and obtaining a garnishment order from a court.
  • The IRS and state tax agencies can seize funds without a court order if you owe back taxes, and child support enforcement can do the same for unpaid support.
  • If someone accesses your account without permission, contact your bank immediately and file a fraud report; your bank must investigate within 10 business days.

Joint account holders and what they can do

If you opened a joint account with someone — a spouse, parent, adult child, or anyone else — that person has the same legal rights to the account as you do. They can withdraw all the money, close the account, or change the password without your permission. The bank sees both names as owners, not as one owner and one authorized user.

This is different from adding someone as an authorized user or giving them power of attorney. An authorized user can make transactions but does not own the account; a power of attorney can act on your behalf but the account still belongs to you. A joint owner owns it equally, and the bank will not stop them from taking money out.

If you are concerned about a joint account holder, your only protection is to move your money to a separate account in your name alone, or to have a conversation with that person about how the account will be used. The bank cannot enforce an agreement between you and the other owner.

Creditors, judgments, and account garnishment

A creditor — a credit card company, medical debt collector, or personal loan lender — cannot simply take money from your account. They must first sue you in court, win the case, and obtain a garnishment order (also called a levy) from the judge. Only then can they contact your bank and freeze or withdraw funds.

The process takes time. After the creditor wins the judgment, they file the garnishment order with the court, which sends it to your bank. Your bank then freezes the account for a holding period (usually 10 to 21 days, depending on your state) to give you time to claim exemptions. Some funds are protected by law — Social Security, unemployment benefits, and disability payments cannot be garnished in most states, even if they are sitting in your checking account.

You will receive notice of the garnishment, either from the court or from your bank. If you believe the debt is not yours, or if the funds in the account are protected, you can file an objection with the court. This is your chance to argue that the money should not be taken.

Tax agencies and child support enforcement

The IRS and state tax agencies have power that creditors do not have. If you owe back federal or state income taxes, the IRS can seize money directly from your bank account without a court order or a judgment. They must send you a notice first, but they do not need to sue you.

Child support enforcement agencies have similar power. If you owe unpaid child support, the state can garnish your account without a judgment. The same is true for unpaid student loans in default — the Department of Education can offset your tax refund or garnish your wages and account without suing first.

If you receive notice that the IRS or a state agency has seized your account, you have the right to request a hearing to dispute the amount or claim that the funds are exempt. Act quickly — the agency will usually give you a deadline to respond, often 30 days or less.

Fraud, identity theft, and unauthorized access

If someone accesses your account without your permission — using stolen credentials, a data breach, or social engineering — that is fraud. Contact your bank immediately, even if it is after hours. Most banks have a fraud line that operates 24/7. Tell them which transactions were not yours and ask them to freeze the account.

Your bank is required by federal law to investigate unauthorized transactions within 10 business days. If the bank confirms the fraud, they must return the money to your account. If you reported the fraud within 60 days of the statement showing the unauthorized transaction, you are protected — your liability is zero.

After the bank investigates, file a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record and may help if the fraud spreads to other accounts or if the thief uses your identity for other crimes. Keep copies of all correspondence with your bank and the FTC.

What happens when you give someone access

If you give someone your password, PIN, or login credentials — even temporarily — they can access your account. This is not fraud in the legal sense, because you gave permission, but it is still risky. If that person takes money and you later dispute it, the bank may say you authorized the access and refuse to refund it.

Be cautious about sharing credentials with family members, friends, or even professionals like accountants or financial advisors. If you need someone to help manage your account, ask your bank about formal options: adding them as an authorized user (limited access), creating a power of attorney (they act on your behalf but do not own the account), or setting up a trust account (for long-term planning).

If you have shared your password and later want to revoke access, change your password immediately. The person will no longer be able to log in, but if they are a joint owner or authorized user, they can still access the account through the bank directly or by calling customer service.

Protecting your account from unauthorized access

Use a strong, unique password — at least 12 characters, with uppercase and lowercase letters, numbers, and symbols. Do not use the same password across multiple accounts. Enable two-factor authentication if your bank offers it; this requires a second form of verification (usually a code sent to your phone) when you log in from a new device.

Monitor your account regularly. Check your statement at least once a month, and set up alerts for large transactions or low balances. Many banks let you customize these alerts in your online banking settings. If you see something unusual, report it to your bank right away.

Be wary of phishing emails and calls claiming to be from your bank. Your bank will never ask you for your password or full account number via email or phone. If you are unsure, hang up and call the number on the back of your debit card or on your bank's official website.

What to do if someone has accessed your account

Call your bank's fraud line immediately — do not wait for business hours. Have your account number and a list of unauthorized transactions ready. Ask the bank to freeze your account, cancel your debit card, and issue a new one. Request a new PIN if you use one.

File a dispute for each unauthorized transaction. Your bank will send you a dispute form; fill it out and return it within the deadline (usually 60 days). Keep a copy for your records. The bank must investigate and respond within 10 business days, though the investigation may take longer.

If the fraud involved identity theft — if the person opened new accounts in your name or used your Social Security number — file a report with the FTC and consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion). A fraud alert tells creditors to verify your identity before opening new accounts; a credit freeze blocks access to your credit report entirely.

Frequently Asked Questions

Can my bank close my account without permission?

Yes. Banks can close accounts for various reasons — suspected fraud, repeated overdrafts, or violation of the account agreement. They must give you notice, usually 10 to 30 days, and return any remaining balance. If your account is closed due to fraud investigation, the bank may hold the funds longer while they investigate.

What if a joint account holder takes all the money?

Legally, they have the right to do it because they own the account equally. You cannot force the bank to stop them. Your only recourse is a civil lawsuit against that person to recover the money, which is a separate matter from the bank. If you suspect they took the money as part of a crime, you can report it to police.

Can my employer access my bank account?

No, unless you have given them explicit permission — for example, by signing up for direct deposit, which only allows them to deposit money, not withdraw it. They cannot see your balance or access your account without your authorization. If you suspect your employer has accessed your account without permission, contact your bank and file a fraud report.

Does a power of attorney give someone access to my bank account?

Yes, but only for the specific powers you grant in the document. A power of attorney lets someone act on your behalf, but you still own the account. They cannot change the ownership or close the account without your permission (unless the document specifically allows it). The account remains in your name.

What if I think someone has my account information but has not used it yet?

Contact your bank and ask them to monitor your account for suspicious activity. Change your password and enable two-factor authentication. You do not need to close the account unless the bank recommends it. If fraudulent transactions do occur later, you will have a record that you reported the compromise early, which helps with your fraud claim.