Bank of America sends fraud alerts, but only for certain transactions
Bank of America does offer fraud alerts — notifications sent to your phone, email, or both when the bank's systems flag unusual activity on your account. These are not the same as credit freezes or fraud monitoring services you buy separately. They are built into your account and turned on by default for most customers, though you can adjust which alerts you receive and how.
The catch: Bank of America's alerts are reactive, not preventive. The bank sends them after a transaction has already gone through or been attempted. The alert tells you something happened; it does not stop the transaction from posting. You then decide whether to report it as fraud, which starts a separate dispute process.
What triggers an alert depends on Bank of America's internal rules about what looks suspicious — large purchases, transactions in new locations, repeated failed login attempts, or changes to account settings. The bank does not publish the exact thresholds, so you cannot predict which transaction will generate an alert and which will not.
Key Takeaways
- Bank of America fraud alerts arrive by text, email, or app notification after a transaction occurs, not before, so they warn you but do not prevent fraud.
- You can customize which alerts you receive and how often through your online banking settings or by calling the fraud department.
- An alert does not mean the transaction is fraudulent — it means the bank flagged it as unusual and wants you to confirm it was yours.
- If you report a transaction as fraud, Bank of America starts a dispute investigation that typically takes 10 business days, though the bank may credit your account temporarily while investigating.
- Fraud alerts are one layer of protection; they work best alongside a strong password, two-factor authentication, and regular account monitoring on your end.
How to turn fraud alerts on or adjust them
Log into your Bank of America online account or mobile app and navigate to Settings, then Alerts. You will see options for different alert types: large transactions, unusual activity, login attempts, card controls, and more. For each alert type, you can choose whether to receive it by text message, email, push notification, or a combination.
If you do not see the Alerts section in your account, call Bank of America's fraud department at the number on the back of your card. They can enable alerts for you over the phone and set the dollar threshold that triggers a "large transaction" alert. Some customers set this at $500; others at $1,000 or higher. The lower the threshold, the more alerts you will receive.
You can also set up Card Controls through the app, which lets you turn your debit or credit card on and off instantly, block certain types of merchants (like gas stations or online retailers), or restrict transactions to specific locations. These are preventive — they stop a transaction before it posts — whereas fraud alerts are informational.
What happens when you report a transaction as fraudulent
When you receive a fraud alert and recognize the transaction as unauthorized, tap "Report as Fraud" in the alert itself, or log into your account and dispute the transaction directly. Bank of America will ask you to confirm details: the merchant, the amount, the date, and whether you recognize the card or account that was used.
Once you report it, the bank opens a dispute investigation. This typically takes 10 business days, though Bank of America may credit your account temporarily within one to three business days while they investigate. If the bank determines the transaction was fraudulent, the credit becomes permanent and the merchant is charged back.
During the investigation, the bank may contact the merchant, review your account activity for patterns, and check whether your card or login credentials were compromised. If you report multiple transactions, they may investigate them together to identify whether a single breach or theft occurred.
Limitations of Bank of America fraud alerts
Fraud alerts are not real-time fraud prevention. By the time you receive an alert, the transaction has already been authorized and is processing. If a fraudster has your card number, they can make a purchase, receive the alert notification, and disappear before you even see it. You are then responsible for reporting it and waiting for the dispute process.
The bank's fraud detection system is automated and imperfect. It may flag a legitimate purchase you made while traveling or at an unfamiliar merchant, generating a false alarm. Conversely, it may miss fraud that looks routine — for example, small repeated charges that stay under the alert threshold, or transactions made from a device the fraudster has already compromised.
Bank of America fraud alerts do not monitor your credit report or alert you to new accounts opened in your name. For that protection, you need a separate credit monitoring service or a credit freeze through the three major credit bureaus (Equifax, Experian, TransUnion). The bank's alerts cover only transactions on accounts you already own.
Steps to take if you do not receive alerts
If you suspect fraud but have not received any alerts, check your alert settings first. Log into your account, go to Settings > Alerts, and confirm that fraud alerts are turned on and that your phone number and email address are current. If they are outdated, update them immediately.
If alerts are on and your contact information is correct but you still are not receiving notifications, call Bank of America at the number on your card. The fraud department can check whether alerts are actually being sent and troubleshoot delivery issues with your phone carrier or email provider.
If you discover unauthorized transactions and did not receive an alert, report them anyway. The absence of an alert does not affect your right to dispute the transaction. Bank of America is still required to investigate and may still credit your account while they do.
How fraud alerts work alongside other protections
Bank of America fraud alerts are one piece of a larger security picture. They work best when combined with two-factor authentication (which requires a code from your phone to log in), a strong unique password, and regular account monitoring on your end. Check your account at least weekly for transactions you do not recognize.
If you use Bank of America's mobile app, enable biometric login (fingerprint or face recognition) so that even if someone has your password, they cannot access your account without your phone. The app also shows recent login activity and device information, so you can spot unauthorized access.
For credit card fraud specifically, consider using a virtual card number through Bank of America's service, which generates a one-time card number for online purchases. This keeps your real card number off merchant databases and limits the damage if that merchant is breached.
What to do if your card is lost or stolen
If you lose your card or believe it has been stolen, do not wait for a fraud alert. Call Bank of America immediately at the number on your statement or online account. The bank can freeze your card within minutes, preventing any new transactions. You can also freeze it instantly through the mobile app using Card Controls.
Once your card is frozen, the bank will mail you a replacement, usually within 7 to 10 business days. In the meantime, you can use your other cards, online banking, or mobile wallet (Apple Pay, Google Pay) to make purchases. If fraudulent charges appear before the replacement arrives, report them as described above.
Frequently Asked Questions
Will Bank of America stop a fraudulent transaction if I report it in the alert?
No. The alert arrives after the transaction has been authorized. If you report it immediately, the bank may be able to contact the merchant and ask them to cancel it, but there is no may provide. The dispute process begins after the fact, not during the transaction.
Can I set a fraud alert for a specific dollar amount?
Yes, for "large transaction" alerts. You can set the threshold through your online account settings or by calling the fraud department. Transactions above that amount will trigger an alert. You cannot set alerts for specific merchants or account types through the standard settings, but Card Controls allow you to block certain merchant categories.
How long does it take Bank of America to refund fraudulent charges?
Bank of America may credit your account temporarily within one to three business days while investigating. The full investigation takes up to 10 business days. If the bank determines the charge was fraudulent, the temporary credit becomes permanent. If they find it was authorized, the credit is reversed.
Do I need to pay a bill if I reported the charge as fraud?
No. Once you report a transaction as fraudulent, it should not appear on your bill while the dispute is under investigation. If it does, contact the bank immediately. Do not pay a charge you have reported as fraud; doing so may complicate the dispute.
What if Bank of America denies my fraud claim?
If the bank investigates and concludes the transaction was authorized, you have the right to dispute that decision. Request a written explanation of their findings and ask what evidence they reviewed. You can also file a complaint with the Consumer Financial Protection Bureau (CFPB) if you believe the bank handled the dispute incorrectly.