Banking fraud is when someone uses deception to take money or information from a bank account that isn't theirs, or tricks a bank into moving money they have no right to.
The person committing fraud might be a stranger, someone you know, a bank employee, or even a criminal network. The method might be forging a check, stealing your card, hacking your login, impersonating you on the phone, or creating a fake website that looks real. What makes it fraud rather than a simple mistake is the intent to deceive and the goal of taking something of value.
Banking fraud is a federal crime. If you discover it on your account, your bank is required by law to investigate and, in most cases, return your money within a set timeframe. But the speed of that return and what you have to prove depends on which type of fraud happened and how quickly you report it.
Key Takeaways
- Banking fraud involves deception to steal money or account information, and it is a federal crime investigated by the FBI and Secret Service.
- The most common types are card fraud, account takeover, wire fraud, check fraud, and identity theft — each with different reporting timelines and recovery rules.
- You are protected by federal law if you report unauthorized transactions within 60 days of your statement; waiting longer can reduce or eliminate your protection.
- Your bank must investigate and typically return your money within 10 business days for debit card fraud, though the timeline varies by fraud type.
- Reporting fraud to your bank is the first step, but you may also need to file a police report, contact the Federal Trade Commission, or place a fraud alert with credit bureaus.
The main types of banking fraud
Card fraud happens when someone uses your credit or debit card without permission. They might have stolen the physical card, copied the number from a receipt or website, or intercepted it in the mail. The fraudster makes purchases or withdrawals in your name. If you report it within 60 days of your statement, federal law limits your liability to $50 on a debit card and often $0 on a credit card, depending on your card issuer's policy.
Account takeover is when a criminal gains access to your online banking login, usually through a phishing email, malware, or a data breach. Once inside, they change your password, transfer money out, open new accounts in your name, or lock you out of your own account. This is harder to catch than card fraud because the transactions come from your account and your device's location data might look normal.
Wire fraud involves tricking you or your bank into sending money to an account the fraudster controls. You might receive an email that looks like it is from your bank asking you to "verify" your account by wiring funds. Or a criminal might pose as a contractor, landlord, or business partner and request a wire transfer for a fake invoice. Once the money leaves your bank, it is extremely difficult to recover.
Check fraud includes forging your signature, altering the amount on a check you wrote, or depositing a check in your name that you never issued. A criminal might steal blank checks from your mailbox, intercept a check you mailed, or create counterfeit checks using your account number.
Identity theft is when someone uses your personal information — name, Social Security number, date of birth, address — to open bank accounts, credit cards, or loans in your name. They might do this to commit fraud themselves or sell your information to other criminals. Identity theft often goes unnoticed for months because the fraudster is using a new account, not your existing one.
How banks detect and investigate fraud
Banks use automated systems that flag unusual activity: a purchase in a city you do not live in, a large withdrawal at an unusual time, multiple failed login attempts, or a wire transfer to a new recipient. These systems are designed to catch fraud before it happens, but they are not perfect and sometimes block legitimate transactions.
When you report fraud, your bank opens an investigation. They pull transaction records, check security logs, review surveillance footage if the fraud involved a branch or ATM, and contact merchants or receiving banks. For debit card fraud, they must complete the investigation and return your money within 10 business days if they find the transaction was unauthorized. For other types of fraud, the timeline can be 30 to 45 days.
If the bank concludes the transaction was authorized — meaning they believe you made it or approved it — they can deny your claim. This happens most often with wire fraud, because wire transfers are generally not reversible and banks argue that you initiated the transfer, even if you were tricked into doing so. You can dispute this decision, but the burden of proof is on you to show you were deceived.
What you must do to protect yourself and your money
Report fraud to your bank immediately, either by phone, in person, or through your online banking portal. Do not wait for your statement to arrive. Most banks have a fraud department that operates 24/7. When you call, have your account number ready and be prepared to describe what happened: when you first noticed the fraud, which transactions were unauthorized, and how you think the fraudster gained access.
Ask your bank to freeze or close the compromised account and issue you a new card or account number. Request written confirmation of your fraud report, including the date, time, and name of the person you spoke with. This documentation is important if you need to dispute the bank's decision later or file a police report.
For debit card fraud, federal law requires you to report it within 60 days of your statement to receive full protection. If you wait longer, your liability can increase to $500 or more, depending on how long you waited. For account takeover and wire fraud, report as soon as you discover it; the sooner you act, the better your chances of recovery.
Place a fraud alert with the three credit bureaus — Equifax, Experian, and TransUnion — by contacting one of them and asking them to notify the others. A fraud alert tells creditors to verify your identity before opening new accounts in your name. You can do this for free by visiting IdentityTheft.gov or calling the bureaus directly. The alert lasts one year and can be renewed.
When to file a police report and contact the FTC
File a police report if the fraud involved identity theft, a large amount of money, or if you believe the fraudster is part of an organized crime ring. You can file online through your local police department's website or in person at a precinct. The police report gives you documentation for your bank, credit bureaus, and insurance companies. It also creates an official record that law enforcement can use if they investigate the fraudster.
Report the fraud to the Federal Trade Commission at ReportFraud.ftc.gov. The FTC does not investigate individual cases, but it collects reports to identify patterns and trends in fraud. Your report helps the FTC warn the public and work with law enforcement. You will receive a recovery plan and a copy of your report that you can share with your bank and creditors.
If the fraud involved a wire transfer, contact the receiving bank immediately. Provide them with the wire details and ask them to freeze the account and reverse the transfer. The receiving bank can sometimes recover the money if it has not been withdrawn yet, but this window is often very small — sometimes only hours.
How long recovery takes and what you might recover
Recovery depends on the type of fraud and how quickly you reported it. For debit card fraud reported within 60 days, your bank must return your money within 10 business days. For credit card fraud, you are typically not liable for unauthorized charges at all, and the card issuer removes them from your bill. For account takeover, recovery can take 30 to 90 days because the bank must investigate more thoroughly.
Wire fraud is the hardest to recover from. Once money is wired, it is in another bank's account, and that bank is not required to reverse it just because you say you were tricked. If the receiving bank is in the United States, law enforcement can sometimes freeze the account and return the money, but this requires a court order and can take weeks or months. If the money was wired internationally, recovery is extremely unlikely.
Some types of fraud — like identity theft that results in accounts opened in your name — do not involve your existing bank account at all. Recovery means disputing the fraudulent accounts with the creditors who opened them and working with credit bureaus to remove the accounts from your credit report. This process can take months and may require sending letters and documentation to multiple companies.
Frequently Asked Questions
Can I get my money back if I wired it to a scammer?
It depends on how quickly you act and whether the receiving bank is in the United States. Contact your bank and the receiving bank immediately and ask them to freeze the account. If the money has not been withdrawn, there is a small chance it can be recovered. If it has been moved, recovery is unlikely. Wire fraud is not covered by the same federal protections as debit card fraud.
What if my bank says the transaction was authorized and refuses to refund me?
You can dispute the bank's decision by sending a written complaint to the bank's fraud department and requesting a formal review. Include documentation of the fraud — emails, screenshots, police reports, or anything showing you did not authorize the transaction. If the bank still refuses, you can file a complaint with your bank's regulator: the Office of the Comptroller of the Currency for national banks, the Federal Reserve for state member banks, or the FDIC for state non-member banks.
Do I need to file a police report to get my money back from the bank?
No. Your bank must investigate and return your money based on their own investigation, not on whether police file charges. However, a police report strengthens your case and provides documentation for credit bureaus and other creditors. It also creates an official record if law enforcement decides to investigate the fraudster.
How do I know if someone opened a bank account in my name?
Check your credit report at AnnualCreditReport.com, which is free once per year. Look for accounts you do not recognize. You can also place a fraud alert with the credit bureaus, which requires creditors to verify your identity before opening new accounts. If you find fraudulent accounts, contact the creditor immediately and ask them to close the account and remove it from your credit report.
What is the difference between fraud and a mistake?
Fraud involves intentional deception to steal money or information. A mistake is an error — you authorized a transaction but the amount was wrong, or the merchant charged you twice by accident. Mistakes are usually resolved quickly once you contact the merchant or bank. Fraud requires an investigation and may involve law enforcement.