The most common ways someone steals from your checking account

Theft from a checking account usually happens one of five ways: someone uses your debit card without permission, sets up an unauthorized transfer to another bank, uses your account number to write checks or make ACH payments, gains access to your online banking login, or commits identity theft to open a fake account in your name. Most of these leave a trail in your transaction history or bank statements, which is why catching the theft early matters.

The person stealing does not need physical access to your card or checkbook. They need either your card number and CVV, your full account and routing number, your online login credentials, or enough personal information to convince your bank they are you. Each method has a different detection window and a different recovery path.

Key Takeaways

  • Debit card fraud, ACH transfers, and check fraud are the three fastest ways money leaves a checking account without your knowledge.
  • Your bank's fraud liability limits your personal loss to $50 if you report unauthorized charges within two business days, but waiting longer can cost you thousands.
  • Checking your statements weekly or setting up transaction alerts catches most theft within days rather than weeks or months.
  • Freezing your credit and filing a police report are necessary steps if the theft involved identity theft or account takeover.

Debit card fraud and card-not-present theft

Someone with your debit card number can make purchases online or over the phone without ever holding the physical card. They need the card number, expiration date, and the three-digit CVV on the back. This information spreads through data breaches at retailers, restaurants, or gas pumps, or through phishing emails that trick you into typing it in.

Card-not-present fraud usually shows up in your transaction history within hours. Online purchases appear as pending charges, then settle within one to three business days. The thief often tests the card with a small charge first—$1 or $5—to confirm it works before making larger purchases. If you see unfamiliar small charges, report them immediately rather than waiting to see if they continue.

Your bank's fraud protection limits your liability to $50 if you report the fraud within two business days of discovering it. After two business days, your liability can rise to $500. If you wait more than 60 days to report it, you may lose all protection and be responsible for the full amount stolen. Most banks waive the $50 liability anyway, but the timeline matters for larger thefts.

ACH transfers and unauthorized bank-to-bank moves

An ACH transfer moves money directly from your checking account to another bank account using only your account number and routing number. These numbers are printed on every check you write and are not secret. Someone with this information can set up a one-time transfer or create a recurring payment without your knowledge.

ACH fraud often goes unnoticed longer than debit card fraud because the thief usually moves larger amounts and the transfer takes one to three business days to complete. By the time you see the charge, the money may already be in another account. Some thieves set up the transfer to happen on the day after payday, when your balance is highest.

Report unauthorized ACH transfers to your bank within 60 days. Your bank can attempt to reverse the transfer and may recover the money if the receiving bank has not already released it. If the receiving account is at the same bank, recovery is faster. If it is at a different bank, the process takes longer and recovery is less certain.

Check fraud and account number misuse

Someone with your account number and routing number can write checks from your account without your knowledge. They may forge your signature, use a fake name, or simply write checks in your name to themselves or an accomplice. Forged checks often clear within one to three business days because banks do not verify signatures on most checks under $5,000.

Check fraud is harder to catch than card fraud because you may not review your bank statements as often as you check your debit card. A thief might write several checks over weeks before you notice. Some people discover check fraud only when their bank notifies them of overdraft fees or when they try to deposit a check and learn their account is overdrawn.

Report forged checks to your bank and the police. Your bank will reverse the charges, but you may be responsible for overdraft fees if the forged checks caused your account to go negative. Ask your bank to flag your account for check fraud and request a new account number if the theft was extensive.

Online banking takeover and credential theft

If someone obtains your online banking username and password, they can transfer money, change your contact information, and lock you out of your own account. They may get this information through phishing emails that look like they came from your bank, through malware on your computer, or by purchasing stolen credentials from a data breach.

Account takeover is often discovered when you try to log in and cannot, or when you receive a notification that your password was changed. By that time, the thief may have already moved money out or changed the email address and phone number on file. Some thieves lock the real account holder out completely and use the account to receive fraudulent transfers or take out loans.

If you suspect your online banking has been compromised, call your bank immediately from a phone number on your bank statement or card—not from a number in an email or text. Do not use the same computer to log in. Your bank can freeze the account, reverse unauthorized transfers, and help you regain access. Change your password from a different device once your bank confirms the account is secure.

Identity theft and fake accounts opened in your name

A thief with your Social Security number, date of birth, and address can open a new checking account in your name at a different bank. They may use this account to receive fraudulent deposits, take out loans, or simply drain it and abandon it. You discover this when you check your credit report or when a debt collector contacts you about an account you never opened.

This type of theft is harder to reverse than fraud on an existing account because the account is technically in your name. You will need to file a police report, place a fraud alert on your credit file, and contact the bank that opened the account to prove you did not authorize it. The bank may close the account, but you may still be responsible for any overdrafts or fees unless you can prove identity theft.

Prevent this by freezing your credit with the three major bureaus—Equifax, Experian, and TransUnion. A credit freeze prevents anyone from opening new accounts in your name without your permission. You can place the freeze for free and lift it temporarily when you actually need to open a new account.

What to do immediately if money is missing

Check your account balance and recent transactions. Look for charges you do not recognize, transfers to unfamiliar accounts, or checks you did not write. Write down the date, amount, and description of each unauthorized transaction.

Call your bank from the phone number on your card or statement—not from a number in an email or text message. Tell them you have unauthorized charges and ask them to freeze your account and issue a new debit card. Request a detailed transaction history for the past 90 days. Ask what your liability is and what documentation they need from you.

File a dispute for each unauthorized transaction. Your bank will give you a dispute form or let you file online. Include the date, amount, and reason for the dispute. Keep copies of everything you submit.

If the theft involved your debit card number, your bank will issue a new card within five to ten business days. If the theft involved your account number or online login, ask for a new account number as well. Changing the account number stops ACH transfers and checks written against the old account.

Reporting to police and credit bureaus

File a police report if the theft was over $500 or if you suspect identity theft. You can file online in most jurisdictions or in person at your local police station. Bring your bank statements showing the unauthorized charges and your dispute documentation. The police report creates an official record that helps your bank and credit bureaus take the theft seriously.

Place a fraud alert on your credit file by contacting one of the three major credit bureaus. The alert tells lenders to verify your identity before opening new accounts. You can place a fraud alert for free and it lasts one year. If you suspect ongoing identity theft, you can place an extended fraud alert that lasts seven years.

Check your credit report at annualcreditreport.com, which is the official free source. Look for accounts you did not open, inquiries from lenders you did not contact, or addresses you do not recognize. Dispute any fraudulent accounts or inquiries with the credit bureau in writing.

Frequently Asked Questions

How long do I have to report unauthorized charges before I lose protection?

Report within two business days to limit your liability to $50. After two business days, your liability rises to $500. After 60 days, you may lose all protection. Most banks waive the $50 liability anyway, but the timeline matters for larger thefts. Report as soon as you notice something wrong.

Can my bank recover money that was transferred to another bank?

If the receiving bank is the same as yours, recovery is faster. If it is a different bank, your bank sends a reversal request, but the other bank is not required to comply if the receiving account holder has already withdrawn the money. Recovery takes longer and is less certain, but your bank will attempt it if you report within 60 days.

What if I did not notice the fraud for three months?

You may still recover the money, but you lose the legal protection that limits your liability. Contact your bank immediately and explain the delay. Many banks will still reverse charges as a courtesy, especially if the theft was extensive. File a police report to strengthen your case. Do not assume you have lost the money until your bank tells you they cannot recover it.

Should I close my checking account after fraud?

Not necessarily. Your bank can issue a new card and new account number, which stops most fraud. Closing the account may hurt your credit if the account is in good standing otherwise. Ask your bank whether a new account number is enough or whether closing and reopening is necessary. If the fraud was extensive or ongoing, closing may be the safer choice.

How do I know if someone opened a fake account in my name?

Check your credit report at annualcreditreport.com for accounts you did not open. Look for inquiries from banks you did not contact. If you receive mail about accounts you do not recognize, contact the bank immediately. Place a credit freeze with all three bureaus to prevent new accounts from being opened without your permission.