Chase Secure Banking is Chase's fraud prevention system for online and mobile banking

Chase Secure Banking is a set of security tools built into Chase's online and mobile banking platforms. It monitors your account for unusual activity, requires extra verification steps when you log in from new devices, and alerts you to transactions that look suspicious. The system does not prevent all fraud, but it reduces the window of time a thief has to move money out of your account before Chase or you can stop it.

The tools work automatically once you set up your Chase account. You do not need to pay extra or sign up separately. Chase Secure Banking runs in the background on every login and transaction, checking for patterns that match known fraud schemes.

Key Takeaways

  • Chase Secure Banking uses automatic monitoring to flag unusual login locations, device changes, and transaction patterns that resemble fraud.
  • When you log in from a new device or location, Chase will ask you to verify your identity using a code sent to your phone or email before you can access your account.
  • Transaction alerts notify you by text, email, or in-app message when Chase detects activity that does not match your normal pattern.
  • Chase Secure Banking reduces fraud losses but does not may provide protection; you are responsible for reporting unauthorized transactions within 60 days to dispute them.

How the login verification step works

When you try to log into Chase online banking or the mobile app from a device or location Chase has not seen before, the system stops and asks you to prove your identity. Chase sends a one-time code to the phone number or email address on file. You enter that code before the login completes.

This step takes less than a minute if you have your phone nearby. If a thief has your username and password but not your phone, they cannot get past this barrier. If you lose access to your phone number or email, you can contact Chase to update your contact information or verify your identity another way, such as answering security questions or visiting a branch in person.

You can also set up Chase Secure Banking to recognize devices you use regularly. After you log in successfully from your home computer or phone, Chase remembers that device and will not ask for a code the next time you use it. You can remove devices from the trusted list at any time in your account settings.

What transaction alerts tell you

Chase monitors every transaction you make and compares it to your history. If a charge looks out of place—a purchase in a city where you do not live, a wire transfer much larger than you normally send, a series of small charges that look like testing—Chase sends you an alert. The alert arrives by text, email, or through the Chase mobile app, depending on how you set your preferences.

Alerts are not always signs of fraud. A legitimate charge from a new merchant, a trip to another state, or a one-time large purchase will also trigger an alert. The point is to give you a chance to review the transaction and report it if you did not make it. You have up to 60 days from the transaction date to report it as unauthorized.

You control which alerts you receive. In your Chase account settings, you can choose to be notified about large purchases, international transactions, new payees, or all activity. Turning off alerts is not recommended, because you lose visibility into your account.

How Chase handles a reported unauthorized transaction

If you report a transaction as unauthorized, Chase opens a dispute. During the dispute period, Chase temporarily credits your account for the amount while it investigates. The investigation usually takes 10 business days, though Chase can extend it to 45 days if needed.

Chase will contact the merchant or the bank that processed the transaction and ask for proof that you authorized it. If the merchant cannot provide proof, Chase closes the dispute in your favor and the credit becomes permanent. If the merchant provides a receipt or signature that matches your account, Chase may rule against you and reverse the credit.

Your liability for unauthorized transactions depends on how quickly you report them. If you report within 2 business days of discovering the fraud, your liability is capped at $50. If you wait longer than 60 days, you lose the right to dispute the charge entirely and are liable for the full amount.

What Chase Secure Banking does not cover

Chase Secure Banking protects your account from unauthorized access and fraudulent transactions, but it does not protect you if you voluntarily send money to a scammer. If someone tricks you into wiring money to their account or paying them through a third-party service like PayPal or Venmo, Chase cannot reverse that transaction. The money is gone once it leaves your account.

Similarly, if you give your login credentials to someone you think you trust—a family member, a tech support person, or someone posing as Chase—and they drain your account, Chase Secure Banking will not have flagged the activity as fraud because the login came from a trusted device. You are responsible for keeping your password and codes private.

Chase also does not cover losses from a compromised debit card number used at a merchant. Debit card fraud is covered under different rules than online account fraud, and your liability depends on when you report the card as compromised.

Steps to strengthen your Chase account beyond Secure Banking

Chase Secure Banking is the baseline. To reduce your fraud risk further, use a strong password that you do not reuse on other websites. A password manager like Bitwarden or 1Password can generate and store unique passwords for each account. Change your Chase password every few months, especially if you use a shared computer.

Enable two-factor authentication on your email account as well. If a thief gains access to your email, they can reset your Chase password and bypass the phone verification step. Protect your email with a strong password and a second verification method.

Do not click links in emails or texts that claim to be from Chase. Instead, go directly to Chase.com or open the Chase app on your phone. Scammers send fake emails that look identical to real Chase messages and direct you to a fake login page designed to steal your credentials.

Frequently Asked Questions

What should I do if I cannot receive the verification code?

Contact Chase immediately by phone or visit a branch. Chase can verify your identity using other methods, such as security questions or a video call, and update your contact information. If your phone was stolen, report it to your carrier as well so the thief cannot intercept codes meant for you.

Can I turn off Chase Secure Banking?

No. Chase Secure Banking is a standard feature of all Chase accounts and cannot be disabled. You can adjust which alerts you receive and which devices are trusted, but the monitoring system itself runs continuously.

If Chase credits my account during a dispute, do I have to pay it back if I lose?

Yes. If Chase's investigation concludes that you authorized the transaction, Chase will reverse the temporary credit and you will owe the amount again. The credit is provisional only while the dispute is open.

Does Chase Secure Banking protect me if someone steals my debit card?

Debit card fraud is handled separately from online account fraud. Report a stolen or compromised card to Chase immediately. Your liability is limited to $50 if you report within 2 business days, but the dispute process and timeline differ from online fraud disputes.

What if I recognize a transaction as mine but Chase flagged it as suspicious?

You do not need to do anything. Simply confirm in the alert that the transaction was yours, or ignore the alert. Chase will note that you recognized it and adjust its monitoring to reduce false alerts for similar transactions in the future.