What happens when someone steals from a bank account

If someone takes money from your bank account without permission, it is theft — a federal crime that can result in prison time and fines. The person who does it faces criminal prosecution. You, as the account holder, are protected by federal law and your bank's fraud policies, which means you are not responsible for the stolen funds in most cases.

Banks are required by law to investigate unauthorized transactions and return your money within specific timeframes. If you report the theft quickly — ideally within 60 days of receiving your statement — federal law limits your liability to $50 or nothing at all, depending on when you report it. Your bank may also have stronger protections built into their account agreement.

The criminal consequences for bank theft are severe. Federal bank robbery carries sentences up to 20 years in prison. Wire fraud, which includes stealing money electronically from accounts, carries up to 20 years as well. State charges can stack on top of federal ones, and restitution (paying back what was stolen) is mandatory.

Key Takeaways

  • Bank theft is a federal crime prosecuted by the FBI, with sentences ranging from several years to 20 years in prison depending on the method and amount.
  • If your account is compromised, report it to your bank within 60 days to limit your liability to $50 or less under federal law.
  • Banks use multiple layers of security — encryption, fraud detection systems, and verification protocols — to prevent unauthorized access to accounts.
  • If you suspect fraud on your account, contact your bank immediately and file a report with the Federal Trade Commission and your local police department.

How banks detect and stop theft before it happens

Banks use automated fraud detection systems that flag unusual activity in real time. These systems look for patterns: large withdrawals from a new location, transfers to accounts that have never received money before, or activity that does not match your normal spending. When the system detects something suspicious, the transaction is often blocked immediately and you receive an alert.

Most banks require multiple forms of verification for sensitive actions. Moving money to a new external account, for example, usually requires you to confirm your identity through a code sent to your phone or email. Logging in from a new device or location may trigger a security question. Wire transfers often require a phone call to confirm the recipient's details.

Banks also monitor for common theft methods: phishing emails designed to steal login credentials, malware that captures keystrokes, SIM swaps where someone convinces your phone carrier to transfer your number to their device, and social engineering where a person impersonates you to customer service. Your bank's security team is trained to spot these tactics and block them.

What to do if money disappears from your account

Contact your bank immediately — do not wait for a statement to arrive. Call the number on the back of your card or log into your account online to find the fraud department's direct line. Tell them the specific transactions that are unauthorized, the dates they occurred, and approximately how much money is missing. The bank will freeze your account to prevent further theft while they investigate.

Your bank will ask you detailed questions: Did you share your password with anyone? Have you used public WiFi recently? Did you click any suspicious links? Do you recognize the recipient accounts where money was sent? Answer honestly. The bank uses your answers to determine whether this was account compromise (someone got your login) or identity theft (someone opened a new account in your name).

File a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record and gives you a recovery plan specific to your situation. Also file a report with your local police department, even if they cannot investigate immediately. You will need the police report number for your bank and for credit monitoring purposes.

How to protect your account from theft

Use a unique, strong password for your bank account — at least 12 characters with uppercase, lowercase, numbers, and symbols. Do not reuse passwords across websites. If one website is breached, criminals will try that same password on your bank account. A password manager like Bitwarden or 1Password stores passwords securely so you only have to remember one master password.

Enable two-factor authentication on your bank account. This means that even if someone has your password, they cannot log in without a second verification step — usually a code sent to your phone or generated by an authenticator app. Use an authenticator app rather than SMS text messages when your bank offers both, because SIM swaps can intercept texts.

Monitor your account regularly. Log in at least weekly and review recent transactions. Set up account alerts through your bank's app so you receive notifications for large withdrawals, transfers to new accounts, or login attempts from unfamiliar locations. The faster you spot fraud, the faster your bank can stop it and return your money.

Criminal penalties for bank theft

Bank robbery — physically taking money from a bank building — is prosecuted under federal law and carries sentences of up to 20 years in prison. The average sentence is around 8 years. If a weapon is used or someone is injured, the sentence increases significantly.

Stealing from a bank account electronically is prosecuted as wire fraud or identity theft, depending on the method. Wire fraud carries up to 20 years in prison. Identity theft — opening accounts or making charges in someone else's name — carries up to 15 years. If the theft involves a computer or the internet, additional charges under the Computer Fraud and Abuse Act can add 10 years.

Sentences are often longer when multiple crimes are stacked. Someone who commits wire fraud, identity theft, and money laundering in the same scheme may face 30, 40, or even 50 years in prison. Restitution is mandatory — the person must pay back every dollar stolen, plus interest and court costs. A criminal record also makes employment, housing, and credit nearly impossible to obtain after release.

Who investigates bank theft

The Federal Bureau of Investigation (FBI) investigates bank theft and fraud. They have a dedicated financial crimes division and work with local law enforcement and the Secret Service. If your account is compromised, your bank will report it to the FBI as part of their regulatory obligations. You can also report it directly to the FBI's Internet Crime Complaint Center at ic3.gov.

The Secret Service investigates counterfeiting and financial crimes, including identity theft and wire fraud. If your case involves a stolen identity or forged documents, the Secret Service may take the lead. Local police departments handle the initial report and can assist with investigation, though they often defer to federal agencies for financial crimes.

The Federal Trade Commission (FTC) does not investigate individual cases, but they collect reports and use patterns to identify large-scale fraud schemes. Your report to the FTC helps them track criminals and warn the public about new tactics.

Frequently Asked Questions

What if I gave my password to someone I trusted and they stole from me?

This is still theft and still a crime, even if you knew the person. Report it to your bank and police immediately. Your bank will investigate and return your money. The person who took it faces criminal charges for theft or embezzlement. Do not try to resolve it privately or ask the person to pay you back — that does not erase the crime or protect you legally.

Can I get my money back if my account was hacked?

Yes, in most cases. Federal law limits your liability to $50 if you report it within 60 days of your statement. Many banks offer stronger protections and return all stolen funds. The bank investigates, freezes the account, and returns your money while they work with law enforcement. The process usually takes two to four weeks.

What is a SIM swap and how do I prevent it?

A SIM swap is when someone convinces your phone carrier to transfer your phone number to a new SIM card they control. They then use your number to reset your bank password and access your account. Prevent this by adding a PIN or password to your phone account with your carrier. Call them and ask what security options are available — most carriers offer this for free.

If I see a suspicious transaction, should I dispute it or report it as fraud?

Report it as fraud, not a dispute. A dispute is for transactions you authorized but have a problem with (wrong amount, item not received). Fraud is for transactions you did not authorize at all. Your bank handles them differently — fraud gets faster investigation and stronger legal protections for you.

Can someone steal from my account if I only give them my account number?

They can attempt to, but your bank's security systems will likely block it. Account number alone is not enough to transfer money or make large withdrawals — most banks require additional verification. However, someone with your account number, routing number, and name can set up unauthorized ACH transfers or bill payments. Monitor your account closely and report any unauthorized activity immediately.