How to spot unauthorized activity in your account

A hacked bank account usually shows itself through transactions you did not make, withdrawals you do not recognize, or login attempts from places you have never been. The most common sign is a missing balance — money gone to an account you do not own. Other red flags include charges from merchants you have never heard of, checks written in your name that you did not write, or a sudden drop in available credit on a linked card.

Some hacks are obvious and immediate. Others are slow: small charges that look like subscriptions, transfers of a few dollars at a time, or someone using your account to send money to themselves through peer-to-peer apps. The slower ones often go unnoticed for weeks because they blend in with legitimate spending.

The fastest way to know is to check your account regularly — at least weekly, and daily if you use online banking. Most banks let you set up alerts for transactions over a certain amount, low balances, or login attempts from new devices. These alerts arrive by text or email within minutes of the activity.

Key Takeaways

  • Missing money, unrecognized transactions, or login attempts from unfamiliar locations are the clearest signs your account has been compromised.
  • Contact your bank immediately by phone using the number on your card or statement — do not use a number from an email or text, which could be fake.
  • Your bank will freeze the account, cancel your debit card, and investigate the fraudulent transactions while you are on the call.
  • Federal law limits your liability to $50 if you report fraud within two business days, and to $500 if you report it within 60 days.
  • You will receive a new debit card and temporary access to your funds, usually within one to three business days.

What to do in the first hour

Call your bank immediately using the phone number on your debit card or a recent statement. Do not use a number from an email, text, or website — scammers often send fake alerts with fake customer service numbers. When you reach the bank, tell them you believe your account has been compromised and describe the unauthorized activity you found.

Your bank will ask you to verify your identity — usually your Social Security number, date of birth, and answers to security questions you set up when you opened the account. They will then freeze your account to stop further unauthorized transactions. This happens instantly. Your debit card will be canceled, and the bank will begin investigating the fraudulent charges.

Ask the bank representative for the following before you hang up: the fraud case number, the name and direct phone number of the investigator assigned to your case, the timeline for getting your money back, and whether you can access your funds while the investigation is underway. Most banks offer temporary access or a replacement card within 24 hours.

How much money the bank will return

Federal law protects you under the Electronic Funds Transfer Act. If you report the fraud within two business days of discovering it, your liability is capped at $50 — meaning the bank covers everything else. If you report it between three and 60 days after the unauthorized transaction, your liability rises to $500. After 60 days, you may lose the entire amount, though many banks will still investigate and return the money as a courtesy.

The clock starts when you discover the fraud, not when it happened. If someone drained your account three weeks ago but you only noticed today, you are still within the two-day window. Banks count business days, so a Friday discovery gives you until the following Tuesday to report.

The bank's investigation typically takes 10 business days. During this time, the money remains frozen. Once the bank confirms the transactions were unauthorized, they will return the funds to your account. Some banks credit the money back immediately while the investigation continues; others wait until it is complete.

Protecting your account while it is being investigated

You will need access to money while your account is frozen. Ask your bank whether they can issue a temporary debit card, provide a cash advance, or transfer funds to a linked savings account. Many banks do this on the same call. If your account is completely empty, ask whether the bank can advance you funds against the expected fraud recovery.

If you have automatic bill payments set up on the hacked account, contact those billers now — your mortgage company, utility, insurance, loan servicer — and tell them your account has been compromised. Ask them to pause payments until you provide new account information. This prevents your bills from bouncing and damaging your credit.

Do not use the hacked account for new transactions until the bank confirms it is secure. Once the investigation closes and your money is returned, the bank will issue a new debit card and you can resume normal use.

Checking your credit report and monitoring for identity theft

A hacked bank account sometimes means a hacker has your personal information — name, address, Social Security number, date of birth. They may use this to open new accounts in your name or take out loans. Pull your credit report from all three bureaus (Equifax, Experian, and TransUnion) through annualcreditreport.com, which is the only free, official source.

Look for accounts you did not open, inquiries from lenders you did not contact, or addresses that are not yours. If you find unauthorized accounts or inquiries, contact the bureau that reported them and file a dispute. You can also place a fraud alert on your credit file, which tells lenders to verify your identity before opening new accounts in your name.

A fraud alert lasts one year and is free. A credit freeze is stronger — it blocks lenders from accessing your credit file entirely — but takes longer to set up and remove. You can place a freeze through each of the three bureaus' websites.

Changing passwords and securing your devices

Once your bank account is frozen and you have reported the fraud, change your password for online banking. Use a password that is at least 12 characters long and includes uppercase letters, numbers, and symbols. Do not reuse passwords across different accounts.

If you logged into your bank account from a computer or phone you share with others, or from a public Wi-Fi network, assume that device may be compromised. Run a malware scan using your device's built-in security tool or a free scanner like Malwarebytes. If you use a shared computer, change your banking password from a different device that only you use.

Enable two-factor authentication on your bank account if it is not already on. This means the bank will send a code to your phone or email every time someone tries to log in from a new device. Even if a hacker has your password, they cannot access your account without that code.

What happens if the hacker used your account to send money to someone else

If the unauthorized transactions were transfers to another person's account — through wire transfer, ACH, or a peer-to-peer app like Venmo or PayPal — the recovery process is slower. Your bank will still investigate and may recover the money, but it depends on whether the receiving bank cooperates and whether the money has already been withdrawn.

Wire transfers and ACH transfers are generally harder to reverse than debit card charges because they are treated as completed transactions. However, your bank can still file a claim with the receiving bank and ask them to freeze the funds while they investigate. This can take 20 to 30 days.

If the money was sent through a peer-to-peer app, contact that app's fraud team immediately. Apps like Venmo, PayPal, and Cash App have their own fraud investigation processes and may be able to reverse the transfer if it was recent. Provide them with your bank's fraud case number and the details of the unauthorized transfer.

Frequently Asked Questions

What if I do not notice the fraud for three months?

You can still report it and the bank will investigate, but your liability may increase to $500 under federal law. Many banks will still return the full amount as a courtesy, especially if you can show you checked your account regularly and the fraud was well-hidden. Call your bank and ask — the worst they can say is no.

Can I get my money back if the hacker used my account to buy things online?

Yes. Debit card fraud is easier to reverse than ACH or wire transfers. Your bank will investigate the merchant charges and remove them from your account. The merchant's bank will then pursue the hacker for the refund. This usually takes 10 business days.

What if my bank says the transactions were authorized because I used my PIN?

Tell the bank you did not authorize those transactions and did not share your PIN with anyone. The bank must investigate. If someone had your PIN, it means they either watched you enter it, found it written down, or obtained it through a data breach. The bank should still cover the fraud under federal law.

Do I have to pay my bills while my account is frozen?

Contact your billers and explain that your account has been compromised. Most will pause payments for 10 to 15 days while you sort it out. Once your bank issues a new account number, provide that to your billers and resume payments. Late fees may be waived if you explain the fraud.

Should I close the hacked account or keep it open?

Ask your bank whether you should close it or let them reopen it with a new account number. Closing it is simpler if you have few automatic payments linked to it. Keeping it open with a new number preserves your account history and routing number, which some billers prefer. Either way, you will get a new debit card.