What banks are actually required to do — and what they are not

Bank rules are not one unified set of laws. They come from federal regulators (the Federal Reserve, the FDIC, the OCC), state banking departments, and the banks' own policies. This mix means that some statements you hear about banking are true everywhere, some are true only under certain conditions, and some are simply false. The false ones usually fall into a few patterns: they assume banks must do something they are not required to do, they confuse one type of account with another, or they mistake a bank's choice for a legal requirement.

The most common false statements involve deposit insurance limits, overdraft protection, fraud liability, and what banks must tell you. Each one sounds plausible because it touches on real rules — but gets the rule itself wrong. Knowing which statements are false matters because acting on them can cost you money or leave you unprotected when something goes wrong.

Key Takeaways

  • The FDIC insures up to $250,000 per depositor per bank, not per account, so opening multiple accounts at the same bank does not multiply your coverage.
  • Banks are not required to cover overdrafts; overdraft protection is optional, and opting out means transactions will be declined rather than covered.
  • Your liability for unauthorized transactions depends on when you report them — the sooner you report, the lower your liability cap, but banks can still hold you responsible for delays.
  • Banks must disclose fees and terms in writing, but they can change them with notice; you are not may have access to to keep the same terms forever.
  • A bank account is not a safe deposit box, and banks are not liable for theft or loss of items inside a box unless the bank itself was negligent.

Deposit insurance does not multiply across accounts at the same bank

False statement: "If I open ten savings accounts at the same bank, each one is insured for $250,000, so I have $2.5 million in coverage."

The FDIC insures deposits by depositor and by bank, not by account. If you have $250,000 in a checking account and $250,000 in a savings account at the same bank, the FDIC covers only $250,000 total — not $500,000. The type of account does not matter. The number of accounts does not matter. What matters is that it is your money at that one bank.

You can increase your coverage by using different banks (each bank gets its own $250,000 limit) or by using different ownership categories at the same bank — for example, an account in your name alone is insured separately from an account you hold jointly with a spouse. But simply opening more accounts at the same bank under the same ownership does not add coverage.

Banks can refuse to cover overdrafts, and many do

False statement: "Banks are required to cover overdrafts so you do not bounce checks."

Banks are not required to cover overdrafts at all. Overdraft protection is optional. A bank can choose to cover overdrafts and charge a fee (usually $30 to $35 per transaction), or it can decline the transaction and return it unpaid. Many banks now default to declining rather than covering, especially for debit card transactions.

If you want overdraft protection, you have to opt in — and you can opt out at any time. When you opt out, transactions that would overdraw your account are simply declined at the point of sale. You will not bounce a check because the check will not clear. This is actually safer than overdraft coverage, because you avoid the fees, but it means you need to monitor your balance.

Some banks offer overdraft protection linked to a savings account or credit line, which is different from overdraft coverage. That is a service you request, not something the bank must provide.

Fraud liability depends on how fast you report, not on the amount

False statement: "Banks are liable for all unauthorized transactions on my account."

Your liability for unauthorized transactions is capped, but the cap depends on when you report the fraud. If you report within two business days of discovering the unauthorized transaction, your liability is capped at $50. If you report after two business days but within 60 calendar days, your liability can be up to $500. If you wait longer than 60 days, you may lose all protection.

The bank is not liable for the full amount — you are. The bank's liability is limited to the amount you did not report promptly. This is why checking your statements regularly and reporting fraud immediately matters so much. A $5,000 unauthorized transaction reported after 90 days is your loss, not the bank's.

Some banks offer fraud protection that goes beyond the legal minimum, but that is their choice, not a requirement. Read your account agreement to see what your bank actually covers.

Banks can change terms and fees with notice

False statement: "Once I open an account, the bank must keep the same interest rate and fees forever."

Banks can change account terms, interest rates, and fees at any time, as long as they give you notice. The notice period varies by bank and by the type of change — usually 30 days for most changes, though some changes require less notice. You will typically receive notice by mail, email, or a statement insert.

You have the right to close the account if you do not like the new terms, but you do not have the right to keep the old terms. This is especially true for interest rates on savings accounts and money market accounts, which can drop to nearly zero when the Federal Reserve lowers rates. Your bank is not required to maintain a rate that was attractive when you opened the account.

The one exception is if your account agreement explicitly locks in a rate for a specific period — for example, a promotional rate may provide for 12 months. Even then, the bank can change the rate after the promotional period ends.

Safe deposit boxes are not insured by the FDIC

False statement: "My valuables in a safe deposit box are covered by FDIC insurance."

The FDIC insures deposits — money and certain securities held in accounts. A safe deposit box is not a deposit. The contents of your box are your responsibility. If someone breaks in and steals your jewelry, documents, or cash, the FDIC does not cover it. Your homeowners or renters insurance might, but that depends on your policy.

Banks are liable for the contents of a safe deposit box only if the bank itself was negligent — for example, if a bank employee stole from your box, or if the bank failed to maintain reasonable security. If a third party breaks in, the bank is generally not liable unless you can prove the bank did not maintain the lock or security system properly.

This is a critical distinction: your money in a bank account is insured. Your valuables in a bank box are not. If you keep important documents or valuables in a safe deposit box, you need separate insurance or you need to keep them somewhere else.

Banks do not have to offer you a loan

False statement: "If I have a checking account in good standing, the bank must offer me a line of credit or a loan."

Having a bank account does not may have access to you to credit. Banks decide whether to lend based on creditworthiness, income, debt-to-income ratio, and their own lending standards. A clean checking account history helps, but it does not may provide approval. A bank can decline a loan application for any reason that is not discriminatory.

Some banks offer overdraft lines of credit to customers with good account history, but this is a marketing choice, not a requirement. You have to apply, and you can be denied. The same is true for credit cards, personal loans, and home equity lines of credit.

Frequently Asked Questions

Can a bank freeze my account without telling me?

A bank can freeze your account if it suspects fraud or illegal activity, and it may do so immediately without advance notice. However, the bank must tell you within a reasonable time after the freeze. If the freeze is related to a legal hold or court order, the bank will notify you. If you believe your account was frozen in error, contact your bank's customer service immediately.

If I report a lost debit card, am I liable for charges made after I report it?

No. Once you report the card lost or stolen, you are not liable for any unauthorized charges made after that report. Your liability only covers charges made before you reported the loss. Report lost or stolen cards immediately by phone, not by mail or email, so the bank has a record of the exact time you reported it.

Does a bank have to tell me before it closes my account?

Banks can close accounts without cause, but most are required to give you notice — usually 30 days. Some banks close accounts immediately if they suspect fraud or illegal activity. Check your account agreement or contact your bank to see what notice period applies. If your account is closed, you have the right to withdraw your funds.

Can my bank sell my information to other companies?

Banks can share your information with affiliated companies and third-party service providers, but they must follow privacy rules. You have the right to opt out of some sharing under the Gramm-Leach-Bliley Act. Your bank must provide a privacy notice explaining what information it shares and how you can opt out. Read your privacy notice or ask your bank for details.

If I dispute a charge on my debit card, how long does the investigation take?

The bank must begin an investigation within 10 business days of your dispute and complete it within 45 calendar days. During the investigation, the bank may provisionally credit your account. If the bank finds the charge was unauthorized, it must remove it permanently. If the bank finds the charge was authorized, it can remove the provisional credit and you remain liable.