Another person can withdraw from your account only if you give them explicit permission — and the method matters
No one can legally take money from your bank account without your consent. But "consent" has different meanings depending on how you set it up. If you add someone as an authorized user, give them a debit card, or list them on the account as a joint owner, they can withdraw funds. If you simply tell them your PIN or password, they can also withdraw — but the bank won't protect you if they take more than you agreed to. The key difference is whether the bank knows about the arrangement and what rights you've actually given them.
The person's ability to withdraw depends entirely on the legal status you've created with your bank. A joint owner has equal rights to all money. An authorized user can access the account but doesn't own it. Someone with only your PIN has access but no legal standing. Understanding which arrangement you have — or which one someone is trying to create — protects you from both theft and disputes over money that was legitimately withdrawn.
Key Takeaways
- Joint account holders have equal legal rights to all money in the account, and either can withdraw everything without the other's permission.
- Authorized users can withdraw money but do not own the account; the primary account holder can remove them at any time.
- Sharing your PIN or password is not the same as giving legal permission — the bank may not cover unauthorized withdrawals if you voluntarily shared access.
- If someone withdraws money without your knowledge or permission, report it to your bank immediately; most banks have a window to reverse fraudulent transactions.
- Power of attorney and guardianship are legal documents that allow someone to access your account for specific reasons, but they require court approval or your signed authorization.
Joint account holders have equal rights to withdraw everything
When you open a joint account with another person, both of you own the money equally in the eyes of the law and the bank. Either person can withdraw the entire balance without permission from the other. The bank will not stop a withdrawal just because one owner disagrees with it. This is true even if one person deposited most or all of the money.
If you are in a joint account and want to prevent the other person from withdrawing funds, you cannot do it through the bank. Your only option is to close the account and move your money to a new account in your name alone. Some banks will freeze a joint account if you report a dispute, but this is temporary and requires proof of fraud or theft — disagreement about how the money should be used is not enough. Once the freeze is lifted, the other owner can withdraw again.
Authorized users can withdraw but do not own the account
An authorized user is someone you add to your account who can make withdrawals and deposits but does not legally own the money. You remain the primary account holder. The difference matters: you can remove an authorized user at any time without their consent, and the account stays yours if they die or become incapacitated.
When you add an authorized user, the bank issues them a debit card and PIN linked to your account. They can withdraw cash, make purchases, and transfer money just like you can. However, the account is still in your name, and you are responsible for all activity. If the authorized user overspends or makes unauthorized transfers, you are liable — the bank will not reverse those transactions simply because you did not personally approve each one.
Sharing your PIN or password is risky and may not be protected
If you give someone your PIN or online banking password, they can withdraw money, but this is not a formal arrangement the bank recognizes. If they take more than you agreed to, or if they take money after you end the arrangement, you may not have fraud protection. Banks typically protect you against unauthorized transactions only if someone obtained your credentials through theft, hacking, or social engineering — not if you voluntarily shared them.
If you have shared your PIN with someone and they later withdraw money without your permission, report it to your bank immediately. Some banks will still reverse the transaction as a courtesy, especially if you report it within a few days. But you have less legal protection than you would with a fraudulent charge made by someone who stole your information. To be safe, change your PIN and password as soon as you no longer want someone to have access.
Power of attorney and guardianship allow access for specific reasons
A power of attorney is a legal document you sign that gives another person the right to manage your finances, including withdrawing money from your account. You can create a power of attorney that takes effect immediately or only if you become incapacitated. The person holding the power of attorney (called the agent or attorney-in-fact) must act in your best interest and keep records of how they spend your money.
Guardianship is different: a court appoints a guardian to manage finances for someone who cannot do so themselves — usually a minor, an elderly person, or someone with a serious illness or disability. The guardian must file reports with the court and follow strict rules about how the money is spent. Both arrangements require legal paperwork, and both give the other person real access to your account. You can revoke a power of attorney at any time, but guardianship requires a court order to end.
What to do if someone withdraws money without your permission
If you discover an unauthorized withdrawal, contact your bank immediately — do not wait. Tell them the date, amount, and that you did not authorize the transaction. The bank will open an investigation and may freeze the account while they look into it. Most banks have a window of 30 to 60 days to reverse fraudulent transactions, though some will act faster if you report it right away.
Bring any evidence you have: statements showing the withdrawal, emails or texts proving you did not approve it, or a police report if you believe it was theft. If the withdrawal was made in person at a branch, the bank may have video footage. If it was made online or at an ATM, the bank can trace the IP address or ATM location. The faster you report it, the better your chances of recovery. Document everything in writing and keep copies of all correspondence with the bank.
How to add or remove someone from your account
To add an authorized user, visit your bank in person or call the account services line. You will need the other person's full name, date of birth, and Social Security number. The bank will verify their identity and issue them a debit card. The process usually takes a few days to a week.
To remove an authorized user, call your bank or visit a branch. You can do this without the other person's knowledge or consent. The bank will cancel their debit card and revoke their access immediately. If you are removing someone from a joint account, that is more complicated — you cannot remove a joint owner without closing the account or converting it to a single-name account, which may require their signature depending on your bank's rules. Ask your bank what options are available for your specific account type.
Frequently Asked Questions
Can my spouse withdraw money from my account without asking?
Only if you are on a joint account together. If the account is in your name alone and they are not an authorized user, they cannot legally withdraw money. If you are on a joint account, either spouse can withdraw the entire balance without permission from the other.
What if I added someone to my account and now they are taking money I did not agree to?
Remove them immediately by calling your bank. Once they are removed, they cannot make further withdrawals. For money already taken, contact your bank to report it. If you can show the withdrawal was unauthorized, the bank may reverse it, though this depends on how much time has passed and your bank's policy.
Can a parent withdraw money from their adult child's account?
Only if the adult child added them as an authorized user or joint owner, or if the parent has power of attorney. Parents have no automatic right to access an adult child's account. If a parent is withdrawing money without permission, report it to the bank as unauthorized.
Will the bank protect me if I shared my password and someone stole money?
Probably not. Banks protect you against fraud when someone obtains your credentials through theft or hacking, but not when you voluntarily shared them. If you shared your password and the person later took more than you agreed to, the bank may not reverse it. Change your password immediately if this happens.
What is the difference between a joint account and an authorized user?
A joint account holder owns the money and can withdraw everything. An authorized user can withdraw money but does not own the account and can be removed anytime. You remain liable for all activity on both types of accounts.