Report the theft to your bank immediately
Call your bank's fraud line right now—do not wait for business hours or send an email. The phone number is on the back of your debit card or in your online banking portal. Tell them you have unauthorized transactions and ask them to freeze your account. Most banks can stop pending transfers within minutes if you catch them before they clear.
Your bank will create a fraud case and assign it a reference number. Write this down. They will ask you to describe what you noticed—when you first saw the unauthorized transaction, what amount, and which merchant or recipient. Be as specific as possible about dates and amounts. If you do not know exactly, say so; banks have transaction records and can pull details you cannot remember.
Ask the bank to reverse the fraudulent transactions. They will tell you whether they can do this immediately or whether it will take a few days. Some banks credit your account the same day; others take up to ten business days while they investigate. Do not hang up until you know the timeline for your specific case.
Key Takeaways
- Call your bank's fraud line immediately—before you do anything else—and ask them to freeze your account and reverse unauthorized transactions.
- Your bank must investigate fraud claims and typically refunds money within ten business days, though many do it faster.
- You have stronger legal protection if you report the theft within 60 days of receiving your bank statement, so act as soon as you notice.
- File a police report and get the report number, because your bank may ask for it and it creates an official record of the crime.
- Change your passwords, enable two-factor authentication, and monitor your credit report for months afterward, because thieves often use stolen account access to open new accounts in your name.
Understand your legal protection window
Federal law limits your liability for unauthorized transactions, but only if you report them within a specific timeframe. If you report the theft within two business days of discovering it, you are liable for no more than $50 of fraudulent charges. If you wait longer than two business days but report within 60 days of your bank statement, you are liable for up to $500.
If you do not report the theft within 60 days of receiving your statement, you lose all protection and could be liable for the full amount stolen. This is why speed matters. Even if you are not sure whether the transactions are fraud, call your bank and ask them to investigate. They can determine whether the charges are legitimate.
These limits apply to debit cards and unauthorized electronic transfers. Credit card fraud has different rules—your liability is capped at $50 regardless of when you report it, and many card issuers waive even that. But if the thief accessed your bank account directly through online banking or stole your debit card number, the debit card rules apply.
File a police report and get the report number
Contact your local police department's non-emergency line or file a report online through their website. You do not need to go to the station in person; many departments accept fraud reports by phone or through an online portal. Tell them the amount stolen, the date you discovered it, and which bank account was compromised.
The police will give you a report number or case number. Save this. Your bank may ask for it during their investigation, and it creates an official record that protects you if the thief tries to dispute charges or open accounts in your name later. If the theft involved identity theft—meaning the thief used your personal information to open new accounts—the police report becomes even more important.
You do not need a police report to recover money from your bank, but having one strengthens your case and helps if you later discover the thief opened credit cards or loans in your name.
Secure your account and prevent further theft
Change your online banking password immediately, using a password you have never used before. Make it at least 12 characters long and include numbers, uppercase letters, and symbols. Do not reuse passwords across different accounts. If you used the same password for your email, social media, or other sites, change those too—thieves often use a compromised password to access multiple accounts.
Enable two-factor authentication on your bank account if it is not already on. This means you will need to enter a code from your phone or email every time you log in from a new device. It makes it much harder for a thief to access your account even if they have your password. Ask your bank which two-factor methods they support—text message, authenticator app, or security key—and choose the strongest option available.
If the thief had access to your email account, change that password too and review your email recovery options. Thieves often use email access to reset passwords on other accounts. Check your email forwarding rules and connected apps to make sure nothing suspicious is set up.
Monitor your credit report for new accounts opened in your name
Request a free copy of your credit report from all three bureaus—Equifax, Experian, and TransUnion—at annualcreditreport.com. This is the official government site; do not use other sites that claim to be free. Review each report carefully for accounts you did not open, especially credit cards, loans, or utility accounts.
If you find accounts you did not open, contact the credit bureau immediately and dispute them. The bureau must investigate within 30 days and remove the account if it is fraudulent. You can also place a fraud alert on your credit report, which tells lenders to verify your identity before opening new accounts in your name. A fraud alert lasts one year and is free.
Check your credit reports again in three months, six months, and one year. Thieves sometimes wait weeks or months before opening new accounts, so ongoing monitoring catches fraud early. If you discover new fraudulent accounts later, you can place another fraud alert or request a credit freeze, which prevents anyone—including you—from opening new accounts until you unfreeze it.
What to do if your bank denies your fraud claim
If your bank investigates and concludes the transactions were authorized, you have the right to dispute their decision. Ask the bank for a written explanation of why they denied your claim. Request the transaction details, including the IP address or device used, the merchant name, and any authorization records.
If you did not make the transaction and the bank's explanation does not make sense, file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov. The CFPB can investigate the bank's handling of your fraud claim and force them to reconsider. Include your bank's written denial, your police report number, and a detailed explanation of why you believe the transaction was fraudulent.
You can also contact your state's banking regulator or attorney general's office. Many states have fraud units that investigate complaints against banks. Having a police report and documentation of your dispute strengthens your case significantly.
Recover money stolen through wire transfer or ACH
If the thief transferred money out of your account using a wire transfer or ACH (Automated Clearing House) transfer, recovery is harder but sometimes possible. Wire transfers are nearly impossible to reverse once they leave your bank, but ACH transfers can sometimes be recalled within one to two business days.
Tell your bank immediately which transfers were unauthorized and ask them to attempt a recall. They will contact the receiving bank and ask them to reverse the transfer. If the receiving bank agrees, the money returns to your account within a few days. If the receiving bank refuses or the money has already been withdrawn, your bank cannot force them to return it.
Your bank is still required to investigate and may refund the money under fraud protection rules, but this takes longer—usually 10 business days or more. If the receiving bank is outside the United States, recovery becomes much more difficult. In these cases, your police report and CFPB complaint become your main tools for pressure.
Frequently Asked Questions
How long does it take to get my money back?
Most banks refund fraudulent debit card charges within 10 business days, though many do it faster—sometimes the same day. Wire transfers are rarely recovered. ACH transfers can sometimes be recalled within 48 hours. Your bank will give you a specific timeline when you call.
Can I be held responsible for fraud if I shared my password with someone?
If you voluntarily gave someone your password and they stole money, your bank may not refund it because the transaction was technically authorized. However, if someone tricked you into sharing your password through a phishing email or fake website, that is still fraud and you should be protected. Tell your bank exactly how the thief got your password.
What if the thief used my debit card in person at a store?
In-person debit card fraud is treated the same way as online fraud. Call your bank, report the unauthorized transactions, and ask them to reverse the charges. Your liability is still limited to $50 if you report within two business days, or $500 if you report within 60 days.
Do I need to close my bank account?
You do not have to close your account, but you may want to if you feel unsafe or if the thief had access to your online banking for a long time. If you close it, open a new account at the same bank or a different one. Your bank can transfer any remaining balance to the new account. Closing the account does not affect your fraud investigation.
What if my bank says the transactions were made from my device?
Banks sometimes claim transactions were authorized because they came from your phone or computer's IP address. This does not prove you made the transaction—malware on your device, a compromised password, or a hacker on your home network can all result in transactions from your device. Push back and ask your bank to investigate further, including whether you were logged in at the time and whether the transaction matches your usual spending patterns.