A bank cannot legally open an account in your name without your written consent

A bank must have your explicit permission to open an account. This permission typically comes in the form of a signed application, a digital signature, or a recorded verbal agreement — but something must document that you asked for the account. If a bank opens an account without any form of consent from you, that is fraud, and you have legal recourse.

The rule comes from federal law: the Truth in Savings Act requires banks to disclose account terms before you open an account, which means you must be part of the process. State laws add further protection. If you discover an account opened in your name that you did not authorize, the bank is liable, not you.

That said, the line between "you consented" and "you did not" can blur in practice. A family member with power of attorney, a joint account holder, or someone with access to your online banking can open linked accounts or sub-accounts without a separate signature. An employer can open a payroll account in your name if you signed a direct deposit form. These are technically authorized, even if you did not explicitly remember saying yes to each one.

Key Takeaways

  • A bank needs your written, digital, or recorded verbal consent to open an account in your name; opening one without any form of permission is fraud.
  • A family member with power of attorney, a joint account holder, or an employer with a signed direct deposit form can open linked accounts without a separate signature from you.
  • If you find an unauthorized account, contact the bank immediately, file a fraud report with the Federal Trade Commission, and place a fraud alert with the credit bureaus.
  • The bank is responsible for verifying your identity and consent; you are not liable for fraudulent accounts opened in your name.

How banks verify your identity before opening an account

Banks use several methods to confirm you are who you say you are. The most common is a government-issued ID — a driver's license, passport, or state ID card. The bank scans or photographs this ID and compares the photo to you (in person) or to a photo you upload (online). They also run your name and Social Security number through verification databases to check for fraud flags.

Online banks add an extra layer: they may ask you to answer security questions based on your credit history, verify a phone number or email address, or confirm recent transactions on accounts linked to you. Some banks call you to confirm the application before processing it. These steps exist partly to protect the bank from fraud, but they also protect you — they make it harder for someone else to open an account using your identity.

The weakness is that identity verification is not perfect. If someone has your Social Security number, address, and date of birth — information that can be stolen in a data breach or obtained through public records — they may be able to pass these checks, especially at banks with looser verification. This is why monitoring your credit and checking your bank statements regularly matters.

What to do if you find an unauthorized account

Stop and document everything. Write down the account number, the bank name, the date you discovered it, and any transactions you see. Take screenshots or print statements. Do not close the account yourself — the bank needs to investigate it as a fraud case, and closing it can destroy evidence.

Call the bank's fraud department immediately. Tell them you did not open this account and did not authorize anyone to open it. The bank will freeze the account, investigate, and close it. They will also file an internal fraud report. Ask the bank to send you a written confirmation of the fraud report and the account closure.

File a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record and gives you a recovery plan you can show to creditors or other banks. You will receive an Identity Theft Report, which is stronger than a police report in many situations.

Place a fraud alert with the three major credit bureaus — Equifax, Experian, and TransUnion. You only need to call one; that bureau will notify the other two. A fraud alert tells creditors to verify your identity before opening new accounts in your name. It lasts one year and is free. If you want longer protection, you can place a credit freeze, which blocks access to your credit report entirely.

When someone with legal authority can open an account for you

A person with power of attorney can open accounts on your behalf. Power of attorney is a legal document you sign that gives another person the right to act in your financial interests. This is common when someone is elderly, ill, or unable to manage their own finances. The person with power of attorney must show the bank the original power of attorney document, and the bank will verify it is valid and current.

A parent or legal guardian can open accounts for a minor child. The account is in the child's name, but the parent controls it until the child reaches the age of majority (usually 18). The parent must provide proof of guardianship — a birth certificate, adoption papers, or a court order.

A joint account holder can sometimes open linked accounts or sub-accounts without your signature. For example, if you and your spouse have a joint checking account, your spouse may be able to open a linked savings account in both your names. The rules vary by bank, so check your account agreement or call the bank to ask.

An employer can open a payroll account if you signed a direct deposit authorization form. The form gives the employer permission to set up the account and deposit your wages into it. You should receive a notice of the account details, but the employer does not need a separate signature for each account opening.

How to protect yourself from unauthorized accounts

Check your credit report at least once a year. You can get a free copy from AnnualCreditReport.com, the only official site for free credit reports. Look for accounts you do not recognize. If you see an account you did not open, dispute it with the credit bureau immediately.

Monitor your bank and credit card statements every month. Set up account alerts with your bank so you receive a notification when a new account is opened, a large withdrawal is made, or a login happens from a new device. Most banks offer these alerts for free.

Protect your Social Security number. Do not carry your Social Security card in your wallet. Do not give your number to anyone who calls you unsolicited. Shred documents with your Social Security number before throwing them away. Use a strong, unique password for your online banking, and enable two-factor authentication if your bank offers it.

If you are concerned about identity theft, consider a credit freeze. This prevents anyone — including you — from opening new accounts in your name without unfreezing your credit first. It takes a few minutes to set up and is free. You can unfreeze your credit temporarily when you want to open a legitimate account.

Your rights if a bank opens an account without consent

You are not liable for an unauthorized account. Federal law protects you: the bank is responsible for verifying your identity and consent. If the bank failed to do so, the bank bears the cost of the fraud, not you. You do not have to pay any fees, overdraft charges, or negative balances on an account you did not open.

You have the right to a written explanation from the bank about how the account was opened and what verification steps failed. You can request this in writing and the bank must respond within a set timeframe (usually 30 days). Keep a copy of your request and the bank's response.

If the bank refuses to close the account or disputes your claim, you can file a complaint with the Consumer Financial Protection Bureau (CFPB). The CFPB investigates complaints against banks and can force a bank to correct errors or compensate you. You can file a complaint online at ConsumerFinance.gov.

You also have the right to pursue legal action against the bank if you suffered damages — for example, if the fraudulent account damaged your credit score and caused you to be denied a loan. Many fraud cases settle without going to court, but you can hire an attorney if the bank refuses to make things right.

The difference between fraud and negligence

Fraud means someone intentionally deceived the bank to open an account in your name. Negligence means the bank failed to verify your identity or consent properly, even if no one was trying to trick them. Both are the bank's problem, not yours, but they may be handled differently.

In a fraud case, the bank investigates who opened the account and how they did it. They may contact law enforcement. In a negligence case, the bank simply closes the account and removes it from your credit report. Either way, you should not be charged for the account or held responsible for any activity on it.

If the unauthorized account was opened by someone you know — a family member, ex-partner, or roommate — the situation is more complicated. The bank may treat it as a civil dispute between you and that person rather than bank fraud. You may need to file a police report to establish that the person did not have your permission. Keep all communications with that person that show you did not consent.

Frequently Asked Questions

Can a bank open an account if someone else has my Social Security number?

Not legally. The bank must verify your identity using government-issued ID or other documentation that matches your name and Social Security number. If someone tries to open an account using only your Social Security number, the bank should catch the mismatch. However, if the person also has your address, date of birth, and other personal details from a data breach, they may pass verification at a bank with weaker checks. This is why monitoring your credit and placing a fraud alert matters.

What if my employer opened a payroll account without asking me?

Your employer likely has the right to do this if you signed a direct deposit authorization form. That form gives them permission to set up an account for wage deposits. If you did not sign anything and did not authorize direct deposit, contact your employer's payroll department and your bank's fraud team. The bank should close the account if you can show you did not consent.

Can a joint account holder open a new account in my name?

It depends on the bank and the type of account. A joint account holder may be able to open a linked savings account or sub-account without your signature, because the bank considers you both owners of the joint account. However, they cannot open a completely separate account in only your name without your consent. Check your account agreement or call the bank to ask what linked accounts your joint account holder can create.

How long does it take to close an unauthorized account?

The bank should freeze the account immediately when you report it as fraud. Closing it usually takes 5 to 10 business days. Removing it from your credit report can take 30 to 90 days, depending on the credit bureau. If the account has a negative balance or unpaid fees, the bank may take longer to resolve it. Ask the bank for a timeline when you report the fraud.

Will an unauthorized account hurt my credit score?

Yes, temporarily. An unauthorized account will appear on your credit report and may lower your score, especially if it has a negative balance or missed payments. Once you report it as fraud and the credit bureau removes it, your score should recover within a few months. The faster you report the fraud, the less damage it will do to your credit.