Chase is insured by the FDIC and uses encryption to protect your account, but safety depends on what you do with your password and which scams you fall for

Chase Bank is a legitimate, federally regulated bank. Your deposits are insured up to $250,000 per account category through the Federal Deposit Insurance Corporation (FDIC), which means if Chase fails, the government reimburses you. Chase uses industry-standard encryption to protect data moving between you and their servers, and they monitor accounts for fraud.

But "safe" is not the same as "risk-free." Chase cannot protect you from phishing emails that trick you into handing over your password, or from you sending money to a scammer who pretends to be someone else. Chase also cannot prevent you from losing money if you authorize a payment yourself—even if you later regret it. The safety of your account depends partly on Chase's systems and partly on your own behavior.

Key Takeaways

  • Chase deposits are insured by the FDIC up to $250,000 per account type, so your money is protected if the bank fails.
  • Chase uses encryption and fraud monitoring, but these do not stop you from being tricked into sending money to a scammer.
  • If someone else accesses your account without permission, Chase's fraud liability rules limit your loss if you report it quickly.
  • Phishing emails and fake Chase websites are common; Chase will never ask for your password or PIN in an email or text.
  • Money you send to the wrong person or to a scammer is usually not recoverable, even if Chase processes the payment.

FDIC insurance: what happens if Chase fails

The FDIC insures deposits at Chase up to $250,000 per depositor, per bank, per account category. This means if Chase Bank becomes insolvent and closes, the FDIC pays you back up to that limit. The account categories that matter most are: single accounts (in your name only), joint accounts (shared with one other person), and retirement accounts (IRAs, SEP-IRAs, and similar). Each category is insured separately, so you can have $250,000 in a single account and another $250,000 in a joint account at the same Chase branch and both are covered.

Money market accounts, savings accounts, and checking accounts all count toward the same $250,000 limit within a single account category. If you have $300,000 in a Chase savings account, the FDIC covers $250,000 and you lose $50,000. If you want to insure more than $250,000, you would need to split it across different banks or different account categories (like moving some to a joint account with a spouse).

FDIC insurance does not cover investment products like stocks, bonds, or mutual funds held at Chase, even if you bought them through a Chase brokerage account. Those are covered under different rules. It also does not cover safe deposit boxes or their contents.

Fraud monitoring and what Chase covers

Chase monitors accounts for suspicious activity and can freeze or block transactions if they look fraudulent. If someone else uses your debit card or account number without permission, Chase's fraud liability rules say you are not responsible for unauthorized charges if you report them. The catch is timing: if you report the fraud within two business days, your liability is capped at $50. If you wait longer than two business days but less than 60 days, you could be liable for up to $500. If you wait more than 60 days, you could lose everything.

This protection applies to debit card fraud and unauthorized transfers from your account. It does not apply to money you send yourself—even if you were tricked into sending it. If a scammer convinces you to wire $5,000 to their account and you authorize the transfer, Chase processed your own instruction. You authorized it, so you are not protected by fraud liability rules. Recovery is possible only if you report it immediately and Chase can reverse the transfer before the scammer withdraws the money, which is rare.

Credit card fraud has different rules. If someone uses your Chase credit card without permission, your liability is capped at $50 under federal law, and many issuers waive that entirely. Chase credit cards also offer zero-liability protection, meaning you pay nothing for unauthorized charges if you report them.

Encryption and data security

Chase uses TLS encryption (Transport Layer Security) to protect data sent between your device and Chase's servers. This means if you log in to your account on Chase.com or the Chase mobile app, the information traveling between you and Chase is encrypted and cannot be read by someone intercepting your internet connection. Chase also requires multi-factor authentication on online and mobile accounts—you log in with your password, then confirm your identity with a code sent to your phone or generated by an authenticator app.

Encryption protects data in transit, but it does not protect you if your password is weak or if you reuse it across multiple websites. If a hacker breaks into an unrelated website where you used the same password, they can try that password on your Chase account. Chase cannot stop this if the password itself is compromised. You can strengthen your account by using a unique, complex password and enabling multi-factor authentication.

Chase also stores your data on secure servers with access controls and monitoring. But no bank can may provide that a data breach will never happen. If Chase experiences a breach, they are required by law to notify you within a reasonable time and to offer credit monitoring. This has happened to other large banks; it is not unique to Chase.

Common scams targeting Chase customers

Phishing is the most common attack. You receive an email or text that looks like it is from Chase, asking you to "verify your account" or "confirm your identity" by clicking a link and entering your username and password. The link goes to a fake website that looks identical to Chase.com but is actually controlled by a scammer. Once you enter your credentials, the scammer has access to your account. Chase will never ask for your password, PIN, or full account number in an email or text message. If you receive such a request, it is a scam.

Another common scam is the fake customer service call. A scammer calls you claiming to be from Chase fraud prevention, saying suspicious activity was detected on your account. They ask you to "verify" information or to move money to a "secure account" for protection. Real Chase fraud calls do happen, but Chase will not ask you to move money or to provide your password. If you are unsure, hang up and call Chase directly using the number on the back of your card or on Chase.com.

Money transfer scams are also widespread. A scammer poses as someone you trust—a family member, a romantic interest, a job recruiter—and asks you to send money via Chase QuickPay, wire transfer, or another payment method. Once the money leaves your account, it is nearly impossible to recover. Chase processes the transfer as you instructed; they have no way to know the recipient is a scammer.

What Chase cannot protect you from

Chase cannot protect you from authorizing your own payment to a scammer. If you send money to someone you believe is a friend but is actually a criminal, that is not fraud—it is a mistake you made. Chase processed your instruction correctly. The money is gone, and recovery depends on whether the receiving bank can freeze the account before the scammer withdraws it. This is possible but uncommon, and it requires you to report the scam within hours, not days.

Chase also cannot protect you from weak passwords, reused passwords, or passwords you share with others. If your roommate, ex-partner, or family member knows your password and transfers money out of your account, that is not unauthorized access in the legal sense—you gave them the password. Chase will not reverse the transfer because you authorized access to the account.

Chase cannot protect you from social engineering. If a scammer calls you pretending to be from Chase and convinces you to read your one-time code out loud, they can log into your account even with multi-factor authentication enabled. The protection only works if you refuse to share the code with anyone.

Steps to reduce your risk at Chase

Use a unique, complex password that you do not use anywhere else. A password manager like Bitwarden, 1Password, or KeePass can generate and store strong passwords so you do not have to remember them. Enable multi-factor authentication on your Chase account—use an authenticator app rather than SMS text if possible, because SMS can be intercepted in rare cases.

Never click links in emails or texts claiming to be from Chase. Instead, go directly to Chase.com or open the Chase mobile app. If you receive a suspicious email, forward it to phishing@chase.com. If you receive a suspicious text, reply with STOP to report it.

Monitor your account regularly. Check your transactions at least weekly and set up Chase alerts for large purchases, transfers, or login attempts from new devices. If you see something unfamiliar, report it to Chase immediately—within two business days if possible, to stay within the fraud liability window.

Do not send money to people you have not met in person or verified through a trusted channel. If someone you know asks you to send money urgently, call them back using a phone number you know is theirs—not a number they provided in the message. Scammers often impersonate people you trust.

Frequently Asked Questions

What if I see a charge on my Chase account that I did not make?

Report it to Chase within two business days to cap your liability at $50. Call the number on the back of your card or log into your account and use the fraud reporting tool. Chase will investigate and can reverse the charge if it is confirmed as unauthorized. If you wait longer than 60 days, you may not be protected.

Is it safe to use Chase's mobile app?

Yes, the official Chase mobile app uses the same encryption and security as Chase.com. Make sure you download it from the official App Store or Google Play, not from a third-party source. Fake banking apps exist; verify you are downloading from Chase Bank USA before installing.

What happens if Chase gets hacked?

Chase is required by law to notify you if your personal information is compromised. They must do so within a reasonable time and typically offer free credit monitoring. Your FDIC-insured deposits are not at risk; your account access and identity are the concern. Change your password immediately if you are notified of a breach.

Can Chase reverse a wire transfer I sent to a scammer?

Only if you report it within hours and the receiving bank can freeze the account before the scammer withdraws the money. This is rare. Wire transfers are designed to be irreversible, so once the money leaves your account, recovery is unlikely. Always verify the recipient's account number and bank before sending a wire.

Is my money safer at Chase than at a smaller bank?

Both are equally protected by FDIC insurance up to $250,000. Larger banks like Chase have more resources for fraud monitoring and security infrastructure, but they are also larger targets for scammers. Safety depends more on your own behavior—your password strength, whether you fall for phishing, and whether you send money to scammers—than on which bank you choose.