Who can take money from your account without your permission
Another person can withdraw money from your bank account only if you have given them legal access to it. The most common ways this happens are: you added them as an authorized user or joint owner, you gave them a debit card or PIN, you signed a power of attorney document, or a court ordered it. Without one of these, a withdrawal is theft, and your bank is required to reverse it.
The key distinction is between authorized access (you permitted it) and unauthorized access (you did not). If someone takes money without permission, the bank's fraud department can investigate and return the funds. If you gave permission but now regret it, the situation is more complicated—the bank will likely treat it as a legitimate transaction, even if the relationship has soured.
Key Takeaways
- Joint account owners and authorized users can withdraw money freely; the bank does not track who takes what out.
- If someone withdraws without your permission, report it to your bank's fraud line immediately—most banks have a 60-day window to investigate.
- A power of attorney document gives someone legal authority to manage your account, but you can revoke it at any time by notifying your bank in writing.
- Removing someone's access requires you to contact the bank directly; they will not act on a verbal request from the other person.
Joint accounts and authorized users: what the difference means
A joint account owner has equal legal rights to all the money in the account. Both owners can withdraw, deposit, close the account, or change the terms. The bank does not track which owner took which withdrawal. If you are a joint owner and the other person empties the account, the bank will not reverse it—they will say the money belonged to both of you equally.
An authorized user is someone you have given permission to use a debit card or access the account, but who does not own it. They can withdraw money, but you remain the account owner. If an authorized user takes money and you did not consent, you can report it as fraud. However, if you added them as an authorized user yourself, the bank may assume you permitted the withdrawal.
Before adding anyone to an account—whether as a joint owner or authorized user—understand that you are giving them real access to real money. Many people add a spouse, adult child, or parent with good intentions, then face problems when the relationship changes or the person's financial situation becomes unstable.
Unauthorized withdrawals: what to do immediately
If someone withdrew money from your account without your permission, call your bank's fraud department right away. Do not wait. Most banks have a 60-day window to investigate unauthorized transactions, though some offer longer protection. The sooner you report it, the stronger your case.
When you call, be ready to describe: the date and amount of the withdrawal, where it happened (ATM, branch, online), and why you believe it was unauthorized. If you know who did it, say so. The bank will file a dispute, freeze the account if needed, and begin an investigation. During this time, your access to the account may be limited.
The bank will contact the person who made the withdrawal and ask for proof they had permission. If they cannot provide it, the bank will reverse the transaction and return the money to your account. This process usually takes 10 to 30 days. If the investigation finds the withdrawal was authorized (for example, you gave them a PIN), the bank will close the dispute and you will not get the money back.
Power of attorney: what it lets someone do with your money
A power of attorney is a legal document you sign that gives another person authority to act on your behalf. There are different types: a general power of attorney gives broad authority over finances, while a limited power of attorney restricts what they can do. A durable power of attorney remains in effect even if you become incapacitated.
If you sign a power of attorney, the person holding it can withdraw money, pay bills, sell property, and make other financial decisions for you. They are legally required to act in your interest, not their own, but enforcement is difficult. Many people use a power of attorney when they are elderly, ill, or planning for incapacity, and they name a trusted family member or attorney.
You can revoke a power of attorney at any time by signing a revocation document and giving it to your bank in writing. Do not rely on a phone call—send a letter to the bank's legal department with a copy of the revocation. Once the bank receives it, the person's authority ends immediately. If they attempt to withdraw money after revocation, it is unauthorized and you can report it as fraud.
Removing someone's access to your account
If you want to remove a joint owner or authorized user, contact your bank directly. You will need to visit a branch or call the account services line. The bank will remove their name or card access. If the person is a joint owner, they have equal legal rights, so some banks require both of you to agree to the removal. Check your account agreement or ask the bank about their specific policy.
If the other person is an authorized user only, you can remove them unilaterally. The bank will cancel their debit card and revoke their access. This takes effect immediately, though it may take a few business days for the card to stop working at merchants.
Do not assume that cutting up a debit card or changing a PIN is enough. The person may still have access through online banking, or they may have written down the PIN. Contact the bank to formally remove them from the account. Get written confirmation that the removal is complete.
Court orders and child support or debt collection
A court can order your bank to freeze your account or allow a creditor to withdraw money to satisfy a judgment. This happens most often in child support cases, tax liens, or when you owe a debt and a creditor has sued and won. The bank will receive a court order and comply with it.
If a court order is in place, you will usually receive notice, though the timing varies. You have the right to contest the order in court, but the bank will follow the court's instructions regardless. If you believe the order is wrong or the amount is incorrect, you must file a motion in the court that issued it, not dispute it with the bank.
Protecting your account from unauthorized access
Use a strong, unique password for online banking and change it regularly. Enable two-factor authentication if your bank offers it—this requires a second form of verification (usually a code sent to your phone) before anyone can log in. Do not share your PIN, password, or security questions with anyone, even family members.
Monitor your account regularly. Check your balance and recent transactions weekly, or set up alerts for withdrawals over a certain amount. Many banks offer free alerts via email or text. The sooner you spot an unauthorized withdrawal, the sooner you can report it.
Be cautious about who you add to your account. Adding someone as a joint owner or authorized user is permanent until you formally remove them, and it gives them real access to real money. If you are unsure, ask your bank about alternatives—some banks offer limited access options or temporary card numbers.
Frequently Asked Questions
Can my spouse withdraw money from my account if we are married but the account is only in my name?
No, not unless you added them as a joint owner or authorized user. Marriage alone does not give someone access to your separate account. However, in some states, marital property laws may affect how a court divides the money in a divorce. If your spouse withdraws without permission, report it as fraud.
What if someone has my debit card number but not the physical card?
They can make online purchases or phone purchases, but they cannot withdraw cash from an ATM without the physical card and PIN. If you see unauthorized charges, report them to your bank's fraud department immediately. The bank will cancel the card and issue a new one.
Can a parent withdraw money from an adult child's account?
Only if the adult child added them as a joint owner or authorized user. Parents have no automatic rights to an adult child's account, even if they helped open it years ago. If a parent is withdrawing without permission, report it as fraud.
How long does it take to get my money back after reporting fraud?
Most banks complete fraud investigations within 10 to 30 days. During the investigation, your account may be frozen or limited. Once the bank confirms the withdrawal was unauthorized, they will return the money. If the investigation takes longer than 30 days, the bank must provide a written explanation.
What if I gave someone permission to withdraw money but now I want to stop?
If they are an authorized user, contact your bank and have them removed. If they are a joint owner, you will need to close the account or ask the bank about removal options (which vary by bank). If you gave them a PIN or password, change it immediately and notify the bank. Once you formally remove them, any future withdrawal is unauthorized and can be reported as fraud.