Who can legally access your bank account
Your bank account is not automatically open to anyone. Access requires either your permission, a legal order, or a specific role you have authorized. The people who can access your account without your consent are: the bank itself (for its own operations and fraud prevention), a court through a judgment or garnishment order, the IRS or state tax authority through a tax levy, a creditor who has won a lawsuit against you, and anyone you have explicitly named as an authorized user or given power of attorney.
Your spouse cannot access your account just by being married to you, unless your name is on the account. A parent cannot access an adult child's account. A creditor cannot touch your account without a court order. An employer cannot access your account without your written consent. The bank itself cannot give your account information to anyone else — not even to police without a subpoena, and not to the IRS without a tax levy.
The most common way someone gains access is because you gave it to them: adding them as an authorized user, giving them your debit card, sharing your login credentials, or signing a power of attorney document. The second most common way is through a legal process you may not have known was happening — a wage garnishment, a tax levy, or a judgment lien.
Key Takeaways
- Only people you authorize, your bank for its own operations, and creditors with court orders can access your account.
- Adding someone as an authorized user gives them full access to withdraw money, and you remain liable for what they spend.
- A court judgment, tax levy, or wage garnishment can freeze or drain your account without your permission.
- If someone accesses your account without authorization, report it to your bank immediately and file a fraud claim within 60 days.
- Sharing your login credentials or debit card number is the fastest way to lose control of your account.
What "authorized user" actually means
Adding someone as an authorized user on your account gives them the same access you have. They can withdraw money, make transfers, pay bills, and see your balance and transaction history. You remain the account owner and remain liable for overdrafts and any debt the account incurs. If an authorized user overspends or makes unauthorized transfers, you cannot reverse those transactions through the bank — the money was legally withdrawn by someone you authorized.
Authorized users are different from joint account holders. A joint account holder is a co-owner, meaning both people own the account equally and both are liable for any debt. An authorized user is someone you have given permission to use your account, but you remain the sole owner. When you remove an authorized user, they lose access immediately, but any transactions they made while authorized stay on the account.
If you add a family member as an authorized user to help you pay bills or manage money, understand that you are giving them full control. They can drain the account, close it, or change the password. There is no way to restrict an authorized user to certain transactions or a spending limit through the bank — those limits have to be enforced by you or through a separate agreement.
How courts and tax authorities access your account
A creditor who wins a lawsuit against you can obtain a judgment, which is a court order saying you owe them money. Once they have a judgment, they can ask the court to issue a garnishment order or levy, which tells your bank to freeze or drain your account to pay the debt. The bank must comply with this order. You will receive notice from the bank that your account has been frozen or that money has been removed, but the creditor did not need your permission.
The IRS and state tax authorities have even broader power. They can issue a tax levy without going to court first. A tax levy is a direct order to your bank to turn over money in your account to cover unpaid taxes. The IRS can levy your account if you owe federal income tax, and state tax authorities can do the same for state taxes. Your bank must comply within a few business days. You will receive notice, but the levy has already happened.
A wage garnishment works differently — it targets your paycheck, not your account. Your employer is ordered to withhold a portion of your wages and send it to the creditor. However, if a creditor has both a judgment and your bank account information, they can also freeze your account directly in some states. The process varies by state, so the speed and amount they can take depends on where you live and what type of debt it is.
Protecting your account from unauthorized access
The strongest protection is to keep your login credentials and debit card number private. Do not share your password with anyone, even family members or your bank. Your bank will never ask for your password. If someone asks for it, they are attempting fraud. Use a unique, strong password — at least 12 characters with uppercase, lowercase, numbers, and symbols — and change it every few months.
Enable two-factor authentication (2FA) on your account if your bank offers it. This means that even if someone has your password, they cannot log in without a code sent to your phone or email. Most banks now offer this as an option. Turn it on immediately. Some banks also offer biometric login — fingerprint or face recognition — which adds another layer of protection.
Set up account alerts so you are notified of large withdrawals, transfers, or login attempts from new devices. Most banks let you customize these alerts through their app or website. If you see a transaction you did not make, report it to your bank within 24 hours. You have up to 60 days to dispute an unauthorized transaction, but reporting it sooner gives the bank more time to investigate and recover the money.
If you need to give someone temporary access to pay a bill or manage money, do not add them as an authorized user. Instead, use your bank's bill pay feature to make a one-time payment, or transfer money to their account and let them pay from theirs. This keeps your account credentials private and limits their access to only what you transfer.
What to do if someone accesses your account without permission
Call your bank immediately — do not wait. Most banks have a fraud line that operates 24/7. Tell them which transactions were unauthorized and ask them to freeze your account. The bank can reverse fraudulent transactions, but only if you report them quickly. Federal law gives you up to 60 days to dispute an unauthorized transaction, but the sooner you report it, the better your chances of recovery.
Your bank will likely cancel your debit card and issue a new one. Ask them to flag your account for fraud so they monitor it more closely going forward. Request a copy of your account statement for the period when the fraud occurred — you will need this for your records and for any dispute you file.
If the unauthorized access was through your debit card number (not your login credentials), file a dispute with your bank in writing. Include the transaction details, the date you discovered the fraud, and the date you reported it. Keep copies of everything. The bank has 10 business days to investigate and must resolve the dispute within 45 days.
If someone you know accessed your account without permission — a family member, roommate, or ex-partner — you can also file a police report. This is a criminal matter, not just a civil one. Provide the police with your bank statements showing the unauthorized transactions and any evidence of who accessed the account (like login location data from your bank).
Protecting your account from legal claims
If you owe money to creditors, understand that a judgment can lead to account garnishment. The best protection is to resolve the debt before it reaches that stage. If you cannot pay in full, contact the creditor to negotiate a payment plan or settlement. Many creditors will work with you rather than pursue a lawsuit.
If you have already been sued and lost, or if you know a judgment is coming, ask your bank about exempt accounts. Some types of accounts — like certain retirement accounts (IRAs, 401(k)s), Social Security deposits, and disability payments — are protected from garnishment by federal law. If your bank deposits go directly into your account and include Social Security or disability payments, those deposits may be partially protected. The rules vary by state and by the type of debt, so contact your bank or a legal aid organization to understand what protections apply to you.
If your account is garnished and you believe the creditor made an error — for example, they garnished the wrong account, or the debt was already paid — you can file a dispute with the court. You will need to act quickly, usually within 10 to 30 days depending on your state. Contact the court that issued the garnishment order or speak with a legal aid attorney.
Frequently Asked Questions
Can my bank access my account without telling me?
Your bank can access your account for its own operations — to process deposits, apply fees, or investigate fraud — without asking permission first. However, they must notify you of any action that affects your balance. If your bank freezes your account due to suspected fraud, they will contact you. If they apply a fee, it appears on your statement. They cannot secretly withdraw money or close your account without notice.
What if I added someone as an authorized user and now want to remove them?
Contact your bank and ask to remove the authorized user. The removal is effective immediately, and they lose access to the account right away. However, any transactions they made while authorized remain on the account and cannot be reversed unless they were fraudulent. If they spent money you did not authorize, you would need to pursue that separately — the bank will not reverse it just because you removed them.
Can a creditor access my account if I have not been sued?
No. A creditor needs a court judgment before they can garnish your account. If you are behind on a debt but have not been sued, the creditor cannot legally access your account. However, they can sue you, and if they win, they can then garnish. If you receive a lawsuit notice, respond to it — ignoring it makes it easier for the creditor to win a default judgment.
Does my spouse have access to my account if we are married?
Not unless your name is on the account or you have given them authorization. Marriage does not automatically give either spouse access to the other's accounts. If you want your spouse to have access, you must add them as an authorized user or joint account holder. If you are going through a divorce, a court can order access to accounts as part of dividing marital assets, but that requires a court order.
What if someone has my account number but not my password?
An account number alone is not enough to access your account online, but it can be used for certain transactions. Someone with your account number and routing number can set up automatic transfers out of your account if they have other information like your name and address. If you suspect this, contact your bank immediately and ask them to flag your account. You can also place a fraud alert with the credit bureaus to prevent someone from opening new accounts in your name.