Yes, but only in specific circumstances—and you have protections
Someone can take money from your bank account without your permission in these situations: a court orders it (judgment, child support, tax debt), your bank freezes it for fraud investigation, a creditor garnishes your wages and the bank honors the order, or you've authorized someone on the account. A scammer cannot simply drain your account—they need either your login credentials, access to your debit card, or a legal order. The moment you notice unauthorized activity, contact your bank immediately; most banks reverse fraudulent transactions within 10 business days if you report them quickly.
The key distinction is between legal access and unauthorized access. Your bank must comply with court orders and tax levies. Scammers need your passwords, card details, or personal information to gain access. Joint account holders have full legal rights to withdraw funds. Understanding which category applies to your situation determines what you can do about it.
Key Takeaways
- Unauthorized transfers by scammers require your card number, PIN, or online login—not just your account number.
- Court-ordered withdrawals (wage garnishment, tax levy, child support) are legal and your bank must honor them, but you have the right to challenge the order itself.
- If you report fraud within two business days, your liability is capped at $50; after that, it can rise to $500 or more depending on how quickly you act.
- Adding someone to your account as a joint owner or authorized user gives them full legal access to withdraw funds—this is different from fraud.
- Your bank's fraud department, not customer service, handles unauthorized transactions and can often reverse them the same day.
Fraud: What a scammer actually needs to drain your account
A scammer cannot access your account with only your name, account number, or routing number. They need one of these: your online banking username and password, your debit card number plus PIN or CVV, your Social Security number plus other personal details to reset your password, or access to your email or phone number to intercept a password reset code. Without at least one of these, they cannot move money out of your account.
Once they have access, they can transfer money out via ACH (automated clearing house), wire it to another bank, use your debit card to make purchases, or set up bill pay to send funds elsewhere. The transfer usually clears within one to three business days, which is why speed matters when you report it. The longer you wait, the harder it becomes to reverse the transaction and recover the funds.
If you notice a fraudulent transaction, call your bank's fraud line immediately—not the main customer service number. Most banks have a dedicated fraud department that operates 24/7. Tell them the specific transaction, the amount, and when you first noticed it. Do not wait for a statement to arrive. The sooner you report, the sooner they can freeze the account and begin the reversal process.
Court orders: Wage garnishment, tax levies, and judgment debts
If a court has issued a judgment against you, the IRS has filed a tax levy, or a child support agency has filed an order, your bank must comply when it receives the paperwork. The bank will freeze the account and transfer the ordered amount to the creditor or government agency. This is legal, and your bank cannot refuse it. You will typically receive written notice after the freeze occurs, though the timing varies by state and by the type of order.
However, you have the right to challenge the order itself—not the bank's compliance with it. If you believe the judgment is wrong, the tax debt was paid, or the child support calculation is incorrect, you must file a motion in the court that issued the order or contact the agency that filed it. Some accounts have protections: Social Security deposits, for example, are exempt from most garnishments, though the IRS and child support agencies can still reach them in some cases. Veteran's benefits and certain disability payments also have limited protections depending on the type of debt.
If you receive notice that your account has been frozen or levied, contact the creditor or agency listed on the paperwork immediately. They can tell you the exact amount owed and whether a payment plan or settlement is possible. Ignoring the order does not make it go away—it typically leads to additional fees and interest that compound over time.
Joint account holders and authorized users: Legal access, not fraud
If you added someone to your account as a joint owner or authorized user, they have the legal right to withdraw money. This is not fraud—it is a deliberate choice you made when you signed the paperwork at the bank. Joint owners have equal rights to the entire account balance; authorized users (sometimes called signatories) may have limited rights depending on what you specified when you set up the account. The bank treats both as having permission to access the funds.
If you want to remove someone's access, contact your bank and ask to remove them as a joint owner or authorized user. The bank will update the account immediately, but any checks they have already written or transfers they have already initiated may still clear. If you suspect they will drain the account before you can remove them, close the account and open a new one at a different bank. This is the fastest way to prevent further withdrawals.
If someone took money from a joint account and you did not authorize it, the situation is complicated. The bank will likely treat it as authorized because both names are on the account. You would need to pursue the person in small claims court or file a police report for theft, but the bank itself will not reverse the transaction. This is why joint accounts should only include people you trust completely, and why removing someone's access matters as soon as the relationship changes.
What to do immediately if money is missing
Call your bank's fraud department right now—do not email, do not wait. Have your account number and a recent statement ready. Tell them the specific transaction: the date, the amount, where the money went (if you know), and when you first noticed it was gone. Ask them to freeze the account to prevent further unauthorized activity. Write down the name and employee ID of the person you speak with, along with the time and date of the call.
The bank will open a fraud investigation and may reverse the transaction the same day or within 10 business days, depending on the circumstances. They will also issue you a new debit card and may close the compromised account. While the investigation is ongoing, you can still access your account online and make transfers, but the bank may place a temporary hold on your funds. Ask the fraud department how long the investigation typically takes and when you can expect an update.
After you call the bank, file a report with the Federal Trade Commission at ReportFraud.ftc.gov. This creates an official record and may help you if you need to dispute charges later. If the fraud involved your Social Security number or personal information, place a fraud alert with the three credit bureaus (Equifax, Experian, TransUnion) by calling 1-888-397-3742. A fraud alert tells lenders to verify your identity before opening new accounts in your name.
Your liability limits depend on how fast you report
Federal law caps your liability for unauthorized debit card transactions, but the amount depends on when you report the fraud. If you report it within two business days of discovering the unauthorized transaction, your liability is capped at $50. If you report it after two business days but within 60 days of your statement, your liability can be up to $500. If you wait more than 60 days, you may be liable for the entire amount.
This is why checking your account regularly—at least weekly—matters. Set up account alerts through your bank's app so you get notified of any transaction over a certain amount. Many banks offer free alerts for purchases, transfers, or low balances. Some banks let you set the threshold; others have a fixed amount. The goal is to catch fraud as early as possible so you stay within the two-business-day window.
If the fraud involved a wire transfer or ACH payment rather than a debit card, different rules apply and reversal is harder. Wire transfers are nearly impossible to reverse once sent; ACH transfers can sometimes be recalled within one business day. Always ask your bank which type of transfer occurred before assuming it can be brought back. This distinction matters because it affects how much time you have to act.
Protecting your account from unauthorized access
Use a strong, unique password for your online banking—at least 12 characters with uppercase, lowercase, numbers, and symbols. Do not reuse passwords across multiple websites. Enable two-factor authentication (2FA) on your bank account; this requires a second form of verification (usually a code sent to your phone) before anyone can log in, even if they have your password. Two-factor authentication is one of the most effective ways to prevent unauthorized access.
Never share your PIN, CVV, or password with anyone—not even bank employees. Your bank will never ask for these over the phone or email. Do not click links in emails or texts claiming to be from your bank; instead, go directly to the bank's website or call the number on the back of your debit card. Scammers often send fake emails that look identical to real bank messages, so direct contact is always safer.
Monitor your statements weekly, not just when they arrive. Most banks let you download transactions from the past 90 days in their app. If you see something unfamiliar, report it immediately rather than waiting to see if it reverses on its own. The sooner you report, the sooner the bank can investigate and the higher your chances of recovery.
Frequently Asked Questions
Can a bank take money from my account without telling me?
Yes, if a court order or tax levy is involved. The bank must comply with legal orders and will typically notify you after the fact. For fraud, the bank cannot take money, but a scammer with your login credentials can. Check your account regularly so you catch unauthorized activity quickly.
What if my ex-partner is still on my account and took money?
If they are a joint owner, the bank will not reverse it because they have legal access. You would need to pursue them in small claims court or file a police report for theft, but the bank itself will not reverse the transaction. Remove them from the account immediately by contacting your bank, then open a new account at a different bank if you are concerned they will drain it before the removal takes effect.
How long does it take to get my money back after I report fraud?
Most banks complete fraud investigations within 10 business days, though some resolve them the same day. During the investigation, your account may be frozen or limited. The bank will notify you in writing of the outcome and whether the money will be returned.
Can I be held liable if someone uses my debit card number?
Only if you wait more than 60 days to report it. Report within two business days and your liability is capped at $50. Report between two and 60 days and it can be up to $500. After 60 days, you may owe the full amount.
What if the bank says the transaction was authorized?
Push back. Ask them to review the IP address, device, and location where the transaction originated. If it does not match your usual activity, escalate to the fraud department supervisor. If they still refuse, file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov.