Bank fraud is when someone uses your account, card, or identity to move money without your permission

Bank fraud means an unauthorized person gains access to your bank account, debit card, credit card, or online banking login and uses it to steal money or open new accounts in your name. The fraudster might drain your checking account, make purchases on your card, take out loans, or open credit lines. The key difference from other theft is that the fraud happens through your bank or a financial institution—not just a stolen wallet or pickpocketed cash.

Bank fraud can happen in several ways. Someone might steal your card number and use it online. They might intercept your mail to get account statements or new cards. They might call your bank pretending to be you and convince them to change your password or transfer funds. They might install malware on your computer to capture your login credentials. Or they might use your Social Security number and personal information to open a completely new account in your name without your knowledge.

The speed matters. Some fraud happens instantly—a stolen card used at a gas station pump. Other fraud takes weeks or months to discover, especially if it involves accounts opened in your name that you never see.

Key Takeaways

  • Bank fraud occurs when someone accesses your account or uses your identity to move money or open new accounts without your permission.
  • Fraudsters use stolen card numbers, intercepted mail, phishing calls, malware, and identity theft to commit bank fraud.
  • Federal law limits your liability to $50 if you report unauthorized debit card charges within two business days, and $0 if you report within 60 days.
  • Contact your bank immediately when you notice suspicious activity—the sooner you report, the more protection you have and the faster the bank can freeze accounts.
  • Monitoring your statements monthly and setting up account alerts can catch fraud early before large sums are stolen.

How fraudsters get access to your account

Fraudsters use multiple entry points. Card skimming—placing a hidden reader on an ATM or gas pump—captures your card number and PIN. Phishing emails and texts trick you into clicking a link that looks like your bank's website but actually sends your login credentials to a criminal. Phone calls where someone pretends to be your bank and asks you to "verify" your account details are common, especially targeting older adults.

Data breaches at retailers, healthcare providers, or other companies expose millions of card numbers and personal information at once. Malware on your computer or phone records keystrokes or takes screenshots of your banking session. Mail theft gives criminals your account statements, new cards, or tax documents with your Social Security number. Weak or reused passwords make accounts easy to crack if a criminal has your email address.

Social engineering—manipulating someone into breaking security rules—is surprisingly effective. A fraudster might call your bank's customer service, claim to be you, and say they lost their phone and need to update the phone number on file. Once they do, they can request a password reset and lock you out of your own account.

What happens to your money when fraud occurs

The moment a fraudster accesses your account, money can move in seconds. With a debit card, they can drain your checking account at an ATM or make purchases online. With credit card fraud, they rack up charges that you don't owe but that appear on your statement. With identity theft, they open new credit cards, take out loans, or open bank accounts in your name—and you don't find out until collection agencies start calling or you check your credit report.

The damage extends beyond the stolen amount. Fraudulent accounts damage your credit score, making it harder to borrow money, rent an apartment, or get a job. Debt collectors may pursue you for accounts you never opened. Your bank account might be frozen while the fraud is investigated, leaving you unable to access your own money temporarily. Some fraud takes months to fully resolve.

The good news: federal law protects you. For debit cards, your liability is capped at $50 if you report the fraud within two business days of discovering it. If you report within 60 days, your liability is still capped at $50 to $500 depending on your bank's policy. For credit cards, your liability is capped at $50 by federal law, and many issuers offer $0 liability. The bank absorbs the loss, not you—but only if you report it.

Signs that your account has been compromised

Check your statements monthly for charges you don't recognize. Small fraudulent charges—$1 or $2—are sometimes test transactions to see if you're paying attention before the fraudster makes larger purchases. Missing statements or bills arriving late can mean mail theft. Calls from creditors about accounts you never opened are a red flag for identity theft. Unexpected credit card offers in your name suggest someone used your information to apply.

Your bank might alert you to suspicious activity through text, email, or a call. Some banks flag unusual patterns—a purchase in another state hours after a local transaction, or a large withdrawal from an ATM you don't normally use. Credit monitoring services and free credit reports can show new accounts opened in your name. Your credit score dropping suddenly without explanation often points to fraud.

If you notice any of these signs, contact your bank immediately. Do not wait for a statement to arrive or assume the charge will reverse on its own. The sooner you report, the sooner the bank can freeze the account and investigate.

Steps to take immediately after discovering fraud

Call your bank's fraud department right away—do not use the number on your card or statement, because a fraudster may have intercepted your mail and changed the number. Look up the official number on your bank's website or call directory assistance. Tell them which transactions are fraudulent and ask them to freeze your account and cancel your card. Request a new card with a new number.

File a report with the Federal Trade Commission at IdentityTheft.gov. This creates an official record and gives you a recovery plan. If the fraud involved identity theft—accounts opened in your name—place a fraud alert on your credit file by contacting one of the three major credit bureaus (Equifax, Experian, or TransUnion). One call triggers alerts at all three. A fraud alert tells lenders to verify your identity before opening new accounts.

Consider a credit freeze, which prevents anyone from opening new accounts in your name without your permission. You can place a freeze for free at each of the three bureaus. Document everything: save emails, screenshots of fraudulent charges, and notes of phone calls with dates and names. Keep copies of your fraud report and any letters from your bank.

How long it takes to recover from bank fraud

Simple debit card fraud—a stolen card number used for a few purchases—can be resolved in days. The bank investigates, confirms the charges were unauthorized, and credits your account. You receive a new card within 5 to 10 business days.

Identity theft is slower. The bank may take 10 to 30 days to investigate and confirm fraudulent accounts. You may need to contact each creditor separately to dispute accounts opened in your name. Removing fraudulent accounts from your credit report can take months. Some cases require a police report or court documents to fully resolve.

During the investigation, your bank may temporarily freeze your account or limit access to funds. This protects you but also means you cannot withdraw money until the investigation clears. Ask your bank for a timeline and what you can expect at each stage. Some banks assign a fraud investigator who updates you regularly; others require you to call for status updates.

How to reduce your risk of bank fraud

Monitor your statements every month—weekly is better. Set up account alerts through your bank's app so you get notified of large purchases, ATM withdrawals, or login attempts from new devices. Use strong, unique passwords for your bank account and email (which is the gateway to resetting your bank password). Enable two-factor authentication on your bank account and email if your bank offers it.

Protect your card: never share your PIN, never give your full card number over the phone unless you initiated the call, and cover the keypad when entering your PIN at an ATM. Shred documents with account numbers or Social Security numbers. Do not click links in emails or texts claiming to be from your bank—go directly to your bank's website or app instead. Be skeptical of unsolicited calls asking you to verify account information.

Use your bank's secure online banking portal or app rather than public Wi-Fi for banking. Keep your computer and phone updated with the latest security patches. Consider using a credit monitoring service or checking your free credit report annually at AnnualCreditReport.com to catch identity theft early.

Frequently Asked Questions

Can I get my money back if my debit card is used fraudulently?

Yes, but the timeline depends on when you report it. If you report within two business days, your liability is capped at $50 and the bank usually credits your account quickly. If you report between two and 60 days, your liability can be up to $500. After 60 days, you may lose all protection. Report fraud immediately to maximize your protection.

What's the difference between bank fraud and identity theft?

Bank fraud is unauthorized use of your existing account or card. Identity theft is when someone uses your personal information to open new accounts or take out loans in your name. Identity theft is a type of fraud, but not all fraud involves identity theft. Both require immediate reporting to your bank and the FTC.

Will my bank account be closed if it's been compromised?

Not automatically. Your bank will investigate and may freeze the account temporarily while they confirm the fraud. Once resolved, your account usually reopens. However, if fraud happens repeatedly or the bank suspects you were negligent (like sharing your password), they may close the account. Ask your bank about their policy.

Do I need a police report to dispute fraudulent charges?

Not for simple debit or credit card fraud—your bank can investigate and credit your account without one. However, a police report is helpful for identity theft cases, especially when disputing fraudulent accounts with credit bureaus or creditors. Some creditors require a police report before removing fraudulent accounts from your credit file.

How do I know if someone opened a credit card in my name?

Check your credit report at AnnualCreditReport.com, which is free once per year. You can also place a fraud alert with the credit bureaus, which requires lenders to contact you before opening new accounts. If you see accounts you don't recognize, contact the creditor immediately and file a dispute with the credit bureau.