What identity theft means for your bank account

Identity theft is when someone uses your personal information—usually your Social Security number, date of birth, or account details—to open accounts or move money without your permission. A thief with your bank account number and routing number can set up unauthorized transfers or bill payments. A thief with your full identity can open new bank accounts in your name, take out loans, or drain existing accounts.

The difference matters because the steps to stop it and recover from it are different. If someone has only your account number, your bank's fraud department can reverse unauthorized transactions and issue you a new account number. If someone has opened accounts in your name, you will need to contact those banks directly, place fraud alerts with the credit bureaus, and file a report with the Federal Trade Commission (FTC).

The speed of your response determines how much damage you can prevent. Most banks cover unauthorized transfers if you report them within 60 days, but the sooner you act, the less time a thief has to move money or open new accounts.

Key Takeaways

  • Check your bank statements weekly or set up transaction alerts so you catch unauthorized activity within days rather than weeks.
  • If you see fraud, call your bank's fraud line immediately—do not email—and ask them to freeze the account and issue a new card and account number.
  • Place a fraud alert with Equifax, Experian, or TransUnion (one call triggers all three) to make it harder for a thief to open new accounts in your name.
  • File a report with the FTC at IdentityTheft.gov so you have an official record if you need to dispute fraudulent accounts or debts.
  • Consider a credit freeze if you are not actively opening new accounts, because it blocks lenders from checking your credit without a PIN you control.

Catch fraud early by monitoring your account

The fastest way to stop identity theft is to see it before it spreads. Set up transaction alerts through your bank's app or website so you get a notification every time money leaves your account—or only for transactions over a certain amount if you prefer fewer alerts. Most banks offer this for free.

Check your bank statements at least once a week, not once a month. If you wait for the monthly statement, a thief has had 30 days to move money and open new accounts. Weekly checks mean you catch unauthorized activity within days.

Watch for small test transactions too. A thief may charge $1 or $5 to your account first to confirm the number works before attempting a larger transfer. Report even small charges you do not recognize.

Stop the bleeding: what to do the moment you spot fraud

Call your bank's fraud line immediately. Do not email or use the app—call. The phone number is on the back of your card or on your bank's website. Tell them you see unauthorized transactions and ask them to:

  • Freeze or close the account immediately.
  • Reverse the fraudulent transactions (most banks do this automatically for unauthorized transfers).
  • Issue a new debit card and new account number.
  • Confirm whether any new accounts were opened in your name at that bank.

Write down the date, time, and name of the person you spoke to. Ask for a confirmation number or reference number for the call. Your bank should send you a written summary of the fraud report within a few days.

Most banks cover unauthorized transfers if you report them within 60 days of the statement date. Some cover them longer if you report quickly. The sooner you call, the better your position.

Place a fraud alert to block new accounts

A fraud alert tells credit bureaus and lenders that you may be a victim of identity theft. When a lender sees the alert, they must contact you by phone to verify your identity before opening a new account in your name. This stops a thief from opening credit cards, loans, or new bank accounts using your Social Security number.

Call any one of the three major credit bureaus—Equifax, Experian, or TransUnion—and ask to place a fraud alert. One call triggers all three bureaus. You do not need to call each one separately. The alert lasts one year and is free.

The bureau will ask for your name, address, date of birth, and Social Security number to confirm your identity. They will give you a confirmation number. Write it down.

After you place the alert, the bureau will mail you a free copy of your credit report. Review it for accounts you do not recognize. If you see fraudulent accounts, contact those lenders directly and tell them you are a victim of identity theft.

File a report with the FTC

Go to IdentityTheft.gov, the official FTC website for identity theft reports. Answer questions about what happened—when you discovered the fraud, what accounts were affected, and what steps you have already taken. The FTC will generate an official Identity Theft Report that you can use as proof when disputing fraudulent accounts or debts.

The report is free and takes about 10 minutes to complete. You will get a summary immediately and can download or print it. Keep a copy for your records.

You do not have to file an FTC report to dispute fraud with your bank or credit bureaus, but having one makes the process faster. Lenders and debt collectors are more likely to remove fraudulent accounts quickly if you can show them an official FTC report.

Consider a credit freeze for longer-term protection

A credit freeze locks your credit file so that lenders cannot check it without a PIN that only you know. This makes it nearly impossible for a thief to open new accounts in your name, even if they have your Social Security number and other personal details.

You can place a freeze with each of the three credit bureaus for free. Go to Equifax.com, Experian.com, or TransUnion.com and follow the steps to freeze your credit. You will create a PIN and receive a confirmation number. Write down both.

A freeze stays in place until you remove it. If you need to open a new credit card, car loan, or mortgage, you will need to temporarily unfreeze your credit by entering your PIN. This takes a few minutes and can usually be done online.

A freeze is stronger protection than a fraud alert because it blocks lenders from checking your credit at all. A fraud alert only requires them to call you first. If you are not actively opening new accounts, a freeze is worth the small effort to set up.

Protect your information going forward

After you have stopped the immediate fraud, take steps to prevent it from happening again. Use a strong, unique password for your bank account—at least 12 characters with uppercase, lowercase, numbers, and symbols. Do not use the same password across multiple accounts.

Enable two-factor authentication on your bank account if it is available. This means you need both your password and a code from your phone (or email) to log in. Even if a thief has your password, they cannot access your account without your phone.

Do not share your Social Security number, bank account number, or routing number unless you initiated the contact and you are certain the organization is legitimate. Scammers call pretending to be from your bank or the IRS.

Shred documents with personal information before throwing them away. Monitor your credit reports regularly—you can get a free report from each bureau once a year at AnnualCreditReport.com.

Frequently Asked Questions

How long does it take to recover from identity theft?

Stopping unauthorized transactions usually takes a few days to a week once you call your bank. Removing fraudulent accounts from your credit report can take weeks to months, depending on how many accounts were opened and how quickly lenders respond to your disputes. An official FTC report speeds up the process.

Will my bank refund the money if someone stole from my account?

Yes, if you report unauthorized transfers within 60 days of the statement date. Your bank is required by federal law to reverse them. Report fraud as soon as you see it to stay well within this window.

What if the thief opened a credit card in my name?

Contact the credit card company directly and tell them you are a victim of identity theft. Ask them to close the account and send you a written statement that the account is fraudulent. Dispute the charges in writing. Provide a copy of your FTC Identity Theft Report if you have one.

Can I remove a fraud alert before one year is up?

Yes. Call the credit bureau that placed the alert and ask them to remove it. You will need to provide your confirmation number. One call removes it from all three bureaus.

Do I need to close my bank account if it was compromised?

Not necessarily. If your bank issued you a new account number and debit card, and you have reversed the fraudulent transactions, you can keep the account open. Close it only if you feel unsafe or if the bank recommends it. Closing an old account can affect your credit history, so ask your bank whether closing is necessary.