Signs that your checking account has been compromised by identity theft

Identity theft in a checking account usually shows up as unauthorized transactions, missing deposits, or accounts you don't recognize. The most common red flag is a statement that includes charges you didn't make — especially small ones at first, which thieves use to test whether you're watching. You might also see your balance drop without explanation, checks written in your name that you didn't write, or a sudden change in your account status like a frozen account or a notice of overdraft fees you didn't cause.

Another sign is mail that stops arriving or changes address without your request. If your bank statements suddenly go digital only, or you stop receiving them at all, someone may have changed your contact information. You might also discover the theft when a merchant declines your debit card, or when you try to log in and your password no longer works.

Some people learn about it indirectly: a creditor calls about a loan you didn't open, or you see a hard inquiry on your credit report from a bank you've never contacted. These point to someone using your identity to open new accounts, which often happens alongside checking account theft.

Key Takeaways

  • Unauthorized transactions, missing deposits, and unrecognized accounts are the most direct signs of checking account identity theft.
  • Thieves often start with small charges to test whether you notice, so review your statement line by line even for amounts under $10.
  • Changes to your account settings — password reset, address change, statement delivery method — without your action are a strong warning sign.
  • Contact your bank immediately if you spot suspicious activity; federal law limits your liability if you report within 60 days of receiving your statement.
  • File a report with the Federal Trade Commission at IdentityTheft.gov and get a police report number, which your bank will ask for.

What to do the moment you spot unauthorized activity

Call your bank's fraud line immediately — not the main customer service number. The phone number is on the back of your debit card or on your most recent statement. Tell them which transactions are not yours and ask them to freeze or close the account. Most banks can stop new transactions within minutes and will issue you a new card and account number.

Do not wait for the next statement or assume the bank will catch it. Your liability for unauthorized transactions is limited by federal law, but only if you report within 60 days of receiving the statement showing the fraudulent charge. After 60 days, you may be responsible for the full amount.

While you're on the phone with the bank, ask them to flag your account for fraud and request a detailed transaction history for the past 90 days. Ask specifically whether anyone changed your password, address, phone number, or email. This tells you how much access the thief had and how long they may have been in your account.

Stopping the thief from using your account again

Your bank will issue a new debit card and may offer you a new account number. Accept both. The old card and account are compromised and should not be used, even if the fraudulent charges are reversed. Set up a new password that is at least 12 characters long and includes uppercase letters, numbers, and symbols — do not reuse a password from any other account.

Enable two-factor authentication on your checking account if your bank offers it. This means you'll receive a code by text or email every time someone tries to log in from a new device. It's an extra step, but it stops a thief who has your password from accessing your account remotely.

Ask your bank whether they offer account monitoring or fraud alerts as part of your account. Some banks include this free; others charge a small monthly fee. If your bank doesn't offer it, you can place a free fraud alert with the three major credit bureaus — Equifax, Experian, and TransUnion — by contacting any one of them. A fraud alert tells creditors to verify your identity before opening new accounts in your name.

Reporting identity theft to the government

File a report with the Federal Trade Commission at IdentityTheft.gov. This is free and creates an official record of the theft. The FTC will generate a recovery plan and a police report number that you can use with your bank, creditors, and credit bureaus. You do not need to file a police report first — the FTC report serves that purpose for most cases.

When you file with the FTC, you'll answer questions about which accounts were affected, when you discovered the theft, and what steps you've already taken. The report takes about 10 minutes to complete. Save the confirmation number and the recovery plan; you'll need both if you dispute charges or place fraud alerts.

If the theft involved a large amount of money or you believe someone used your identity to open new accounts or take out loans, you may want to file a police report with your local police department as well. Bring the FTC report number and any documentation of the fraudulent transactions. The police report creates a second official record and can be useful if the theft is part of a larger crime.

Checking your credit report for other accounts opened in your name

Identity thieves often use a stolen checking account to open credit cards, loans, or utility accounts. Pull your credit report from all three bureaus — Equifax, Experian, and TransUnion — at AnnualCreditReport.com. This is the only free, official source for your credit reports. You get one free report per bureau per year.

Look for accounts you don't recognize, hard inquiries from lenders you didn't contact, and any negative marks that appeared recently. If you find fraudulent accounts, dispute them directly with the credit bureau that reported them. Send a letter or use the bureau's online dispute tool, and include a copy of your FTC report number. The bureau must investigate within 30 days and remove the account if it cannot verify it.

After you've filed your FTC report and checked your credit, consider placing a credit freeze with all three bureaus. A freeze prevents anyone — including you — from opening new accounts in your name without unfreezing first. It's free and can stay in place as long as you want. You'll need to unfreeze temporarily if you want to open a new credit card or loan, but the freeze stops most identity theft cold.

How long it takes to recover and what happens to the money

Your bank will usually reverse fraudulent transactions within 10 business days, though some take up to 30. During this time, your account balance may show the fraudulent charges, and you may have overdraft fees if the theft brought your balance below zero. Ask your bank to waive these fees — most will, especially if you report the theft quickly.

Once the bank reverses the charges, the money goes back into your account. If you've already paid overdraft fees or incurred other costs because of the theft, ask the bank's fraud department to reimburse them. They often will, though it may take a second request.

If the thief wrote checks on your account, your liability is limited to $50 per check under federal law, as long as you report within 60 days. If you report after 60 days, you may be responsible for the full amount of each check. The bank will cancel the old account and issue you a new one, which stops any outstanding checks from clearing.

Preventing future identity theft of your checking account

Monitor your account regularly — at least weekly, and daily if possible. Most banks offer free online banking and mobile apps that show transactions in real time. Set up account alerts so your bank texts or emails you whenever a transaction over a certain amount occurs, or whenever someone logs in from a new device.

Protect your debit card and account information the same way you protect your Social Security number. Do not share your PIN with anyone, do not write it down, and do not use a PIN that is easy to guess like your birth year. Shred bank statements and checks before throwing them away. Do not leave mail in your mailbox overnight, and consider a locked mailbox or a PO box if theft is common in your area.

Be cautious about where you enter your PIN. Cover the keypad with your hand at ATMs and checkout counters. Do not use public Wi-Fi to access your bank account — use your phone's cellular data or a secure home network instead. If you receive an email or text claiming to be from your bank asking you to verify your account, do not click the link. Call your bank directly using the number on your card or statement.

Frequently Asked Questions

Can the bank make me pay for fraudulent transactions if I report them late?

Federal law limits your liability to $50 per unauthorized transaction if you report within 60 days of receiving your statement. After 60 days, you may be responsible for the full amount. Some banks offer better protection voluntarily, so ask yours what their policy is. If you have a strong history with the bank and report quickly, they often waive liability even if you're outside the window.

What if the thief used my checking account to open a credit card in my name?

Dispute the credit card account with the credit bureau that reported it, and include your FTC report number. The bureau must investigate within 30 days. Contact the credit card company directly as well and tell them the account is fraudulent. Ask them to close it and confirm in writing that you're not responsible for charges. Place a credit freeze with all three bureaus to prevent further accounts from being opened.

Do I have to file a police report, or is the FTC report enough?

The FTC report is sufficient for most cases and creates an official record that banks and creditors will accept. A police report is optional but useful if the theft involved a large amount of money, multiple accounts, or if you believe the thief is someone you know. If you file a police report, bring your FTC report number and documentation of the fraudulent transactions.

How do I know if someone is still accessing my account after I've closed it?

Once your bank closes the old account and issues a new one with a new account number, the old account is dead — no one can access it or use it. However, if the thief has your personal information, they may try to open new accounts. Monitor your credit report monthly and keep your fraud alert active for at least one year. Consider a credit freeze if you're concerned about ongoing theft.

What if my bank won't reverse the fraudulent charges?

File a complaint with the Consumer Financial Protection Bureau (CFPB) at ConsumerFinance.gov. Include documentation of the fraudulent transactions, your FTC report number, and copies of all communication with your bank. The CFPB investigates complaints and can pressure banks to reverse charges. You can also contact your state's banking regulator or attorney general's office for additional support.