Someone else can withdraw money from your account only if you give them permission or if a court orders it
Your bank account is legally yours alone unless you explicitly authorize someone else to access it. That authorization can take several forms: adding them as a joint owner, giving them power of attorney, providing your debit card or PIN, or signing up for a service that lets them make transfers on your behalf. Without one of these, a withdrawal by someone else is theft, and your bank is required to investigate and reverse it.
The catch is that "authorization" can happen in ways you did not intend. A family member with your debit card can withdraw money. A creditor with a court judgment can seize funds directly. A scammer who knows your login credentials can drain the account online. Each scenario has different protections and different steps to recover your money.
Key Takeaways
- Joint account owners, power of attorney holders, and anyone you give card or login access to can withdraw money legally, even if you later regret it.
- Unauthorized withdrawals by someone without permission are fraud, and your bank must investigate if you report them within the timeframe in your account agreement.
- A creditor can withdraw money only with a court judgment and a separate order from the court to garnish or levy your account.
- If someone has your debit card or online login, change your PIN and password immediately, then contact your bank to report unauthorized transactions.
- Freezing your credit and monitoring your account regularly can prevent a scammer from opening new accounts or making transfers in your name.
Joint account owners and authorized signers can withdraw without asking
If you opened an account with another person as a joint owner, either of you can withdraw the full balance at any time without the other's permission. The bank does not require both signatures or both people present. This is true even if one person deposited all the money or one person is supposed to be saving for a specific purpose. The law treats joint accounts as owned equally by both parties.
The same applies to anyone you name on a power of attorney document. A financial power of attorney gives someone the legal right to manage your money, including withdrawing funds, paying bills, and moving money between accounts. Unlike a joint account, a power of attorney can be limited to specific actions or specific amounts, but once you sign it, that person can act on your behalf without asking permission each time.
If you gave someone your debit card, PIN, or online login credentials, they can withdraw money, and the bank will not stop them because you authorized access. The bank has no way to know whether you intended them to use it that day or whether you changed your mind. If you want to revoke access, you must change your PIN, password, or card status yourself.
Unauthorized withdrawals by someone without permission are fraud
If someone withdrew money from your account without your knowledge or consent, that is fraud. This includes a family member using your card without asking, a roommate guessing your PIN, or a stranger who obtained your information through a data breach or phishing scam. Your bank is required to investigate and reverse the transaction if you report it promptly.
The timeline matters. Most banks require you to report unauthorized transactions within 30 to 60 days of the statement date on which the transaction appears. Some banks have longer windows, but waiting months makes investigation harder and may forfeit your protection. Check your account agreement or call your bank to confirm the deadline.
When you report the fraud, the bank will ask for details: the date and amount of the withdrawal, where it occurred (ATM, online, in-branch), and why you believe it was unauthorized. Provide as much detail as you can. The bank will then freeze the disputed amount and investigate. If they confirm the withdrawal was unauthorized, they will credit your account. If they cannot confirm it, they may deny your claim, though you can dispute that decision.
Creditors can withdraw money only with a court order
A creditor cannot simply withdraw money from your account because you owe them a debt. They must first sue you, win a judgment, and then obtain a separate court order to garnish or levy your account. The process varies by state, but the creditor must follow legal steps and notify you before the money leaves your account.
Once a creditor has a judgment, they can ask the court for a writ of garnishment (for wages or ongoing income) or a writ of execution or levy (for a one-time seizure of funds). The court then orders your bank to freeze and transfer a portion of your balance to the creditor. Your bank will notify you of the freeze, usually by mail, and you have a limited time to object or claim exemptions.
Some funds are protected from garnishment, depending on your state: Social Security, disability benefits, unemployment insurance, and child support received are often exempt. If your account contains only protected funds, you can file a claim of exemption with the court and the money should be released. Consult your state's court website or a legal aid organization for the specific rules in your area.
What to do if you discover an unauthorized withdrawal
Stop and secure your account first. If someone has your debit card, report it lost or stolen to your bank immediately. If someone knows your online login, change your password and PIN right now, then call your bank. Do not wait to see if it happens again. A scammer with access can drain your account in minutes.
Next, contact your bank by phone — not email or chat. Explain what happened, when you discovered it, and which transactions were unauthorized. Ask the bank to freeze your account temporarily while they investigate. Request a new debit card and new online login credentials. Ask whether your bank offers a fraud alert or credit freeze service.
Then monitor your account daily for the next 30 days. Check for additional unauthorized transactions, unexpected transfers, or new accounts opened in your name. If you spot more fraud, report each one separately and in writing. Keep copies of all correspondence with your bank.
Finally, consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts. A credit freeze prevents anyone from opening accounts in your name without your permission. Both are free and can be done online or by phone.
How to prevent unauthorized access to your account
Use a strong, unique password for your online banking — at least 12 characters, mixing letters, numbers, and symbols. Do not reuse passwords from other websites. If a password is compromised, change it immediately. Enable two-factor authentication if your bank offers it; this requires a second form of verification (usually a code sent to your phone) before anyone can log in.
Never share your PIN, password, or full account number with anyone, including bank employees. Your bank will never ask for these by email, text, or phone. If someone contacts you claiming to be from your bank and asks for this information, hang up and call your bank directly using the number on your statement or card.
Keep your debit card secure. Do not leave it unattended, do not write your PIN on the card, and do not give it to anyone unless you trust them completely. If you lend your card to a family member, ask them to return it immediately after use. Consider using a credit card or mobile payment app for everyday purchases instead; these offer stronger fraud protection than debit cards.
Review your bank statements monthly, even if you receive them electronically. Look for withdrawals you do not recognize, transfers to unfamiliar accounts, or new authorized users. Report anything suspicious within the window your bank requires.
Removing someone from a joint account or revoking power of attorney
If you have a joint account and want to remove the other person, you must contact your bank. Most banks require both account owners to agree to the change, or they require the person being removed to sign a form authorizing it. Some banks allow you to convert a joint account to a single-owner account, but the process varies. Call your bank and ask what documents you need.
If you granted someone power of attorney and want to revoke it, you must sign a revocation document and deliver it to the person and to your bank. A revocation is not automatic; the person can continue to act on your behalf until they receive written notice. Some banks require the revocation to be notarized. Keep a copy for your records and confirm in writing that your bank has received it.
If the person refuses to cooperate or you cannot locate them, consult an attorney. In some cases, you may need a court order to remove them from the account or revoke their authority. This is especially important if you suspect they are using the account fraudulently.
Frequently Asked Questions
Can my spouse withdraw money from my account without asking?
Only if the account is jointly owned or if you gave them power of attorney. If the account is in your name alone, they cannot withdraw money without your permission, even if you are married. If they do, it is theft and you can report it to your bank and police. If you want to share finances, you can open a joint account or add them as an authorized user.
What if my ex-partner still has access to our old joint account?
Contact your bank immediately and ask them to remove the other person from the account or close it. You have the right to do this unilaterally; the bank does not require both owners' permission to remove someone. Open a new account in your name alone and transfer your funds. If your ex has already withdrawn money after the breakup, report it as fraud if you did not authorize it.
Can a parent withdraw money from their adult child's account?
Only if they are a joint owner or authorized user. If the account is in the child's name alone, the parent has no legal right to access it, even if they are listed as an emergency contact. If a parent withdraws money without permission, it is theft. If the child is concerned, they should change their PIN and password and contact the bank.
What happens if I report a withdrawal as fraud but the bank says I authorized it?
Ask the bank for proof of authorization — a signed document, a recorded call, or a log showing your login from your device. If you did not authorize it, dispute the bank's decision in writing and request an appeal. You can also file a complaint with your state's banking regulator or the Consumer Financial Protection Bureau. Keep all documentation of your dispute.
Can someone withdraw money from my account if they know my account number?
No, an account number alone is not enough. They would also need your routing number, and even then, most banks require additional verification before processing a withdrawal. However, if they have your account number and routing number, they could potentially set up an unauthorized ACH transfer or direct debit. Monitor your account closely and report any unauthorized transfers immediately.