What PayPal can and cannot do with your bank account

PayPal cannot make withdrawals from your checking account unless you have explicitly authorized it to do so. Once you link a bank account to PayPal, you control what PayPal can access. PayPal can only pull money when you initiate a transaction—sending money to someone, paying for a purchase, or transferring funds to your PayPal balance. PayPal cannot unilaterally decide to withdraw money on its own.

The confusion often comes from the authorization you give when you link your account. That authorization is limited to the transactions you approve. It does not give PayPal a blank check to take whatever it wants, whenever it wants. If money leaves your checking account through PayPal, either you authorized that specific transaction, or something has gone wrong—and those are two very different problems.

Key Takeaways

  • PayPal can only withdraw money from your checking account when you actively authorize a transaction, not on its own initiative.
  • If you see an unauthorized withdrawal, the cause is usually a compromised PayPal account, a fraudulent transaction by someone else, or a payment you forgot you set up.
  • You have the right to dispute any withdrawal you did not authorize, and your bank can reverse it within a set timeframe.
  • Removing your bank account from PayPal stops all future withdrawals, but does not undo past ones.
  • PayPal's dispute process and your bank's chargeback process are separate—you can use both, but using both can complicate recovery.

How PayPal accesses your checking account

When you link a checking account to PayPal, you authorize PayPal to access that account through the ACH (Automated Clearing House) network. This is the same system banks use to process direct deposits and bill payments. The authorization you sign is called an ACH authorization, and it tells your bank that PayPal is allowed to initiate transfers on your behalf.

That authorization is not a one-time permission for one transaction. It is a standing authorization that remains active until you revoke it. However, it only covers transactions that you initiate or that you have previously authorized PayPal to make on a recurring basis—like automatic bill payments or subscription renewals. PayPal cannot use that authorization to pull money for transactions you did not approve.

Your bank also has a role here. Banks are required by federal law to monitor for unauthorized ACH transfers and to reverse them if you report them within a certain timeframe. If PayPal initiates a withdrawal that you did not authorize, your bank should treat it as an unauthorized transaction, even though PayPal has a valid ACH authorization on file.

Why money might disappear without your knowledge

If you see a withdrawal from your checking account that you do not recognize, the most common cause is that your PayPal account has been compromised. Someone with access to your PayPal login can authorize transactions from your linked bank account. This is different from PayPal itself taking money—it is a third party using your PayPal account to do it.

The second common cause is a transaction you authorized but forgot about. This includes subscriptions that renew automatically, payments you set up to happen on a specific date, or money you sent to someone and then forgot. Check your PayPal transaction history and your email for confirmation messages. PayPal sends a receipt for every withdrawal, even if you deleted the email.

A third possibility is that someone used your bank account information directly to set up a PayPal account or to link your account to their PayPal profile. This is less common but does happen. If you do not recognize the PayPal account that initiated the withdrawal, this may be what occurred.

Rarely, a merchant or service provider may have stored your PayPal information and charged you for something you thought you canceled. Subscription services are the most common culprit here.

Steps to take if you see an unauthorized withdrawal

First, log into your PayPal account and check your transaction history. Look for the withdrawal in question and see what it is labeled as. If you do not recognize it, click on it to see more details—the merchant name, the date, and the amount. Take a screenshot of this information.

If the transaction is not in your PayPal history at all, the withdrawal may have come from a different source. Check whether you have other payment apps linked to that bank account, such as Venmo, Square Cash, or a merchant's own payment system. Some withdrawals labeled as coming from PayPal may actually originate elsewhere.

If the transaction is in your PayPal history and you did not authorize it, open a dispute through PayPal. Go to your Resolution Center, select the transaction, and choose "I do not recognize this transaction" or "Unauthorized transaction." PayPal will ask you to describe what happened and may request documentation. PayPal's dispute process typically takes 10 business days, though it can extend to 180 days if the case is complex.

At the same time, contact your bank and report the withdrawal as unauthorized. Your bank can reverse ACH transactions within a specific window—usually 60 days from when the transaction posted, though some banks allow longer. Your bank does not need PayPal's permission to reverse an unauthorized ACH transfer; it can do so based on your report alone. This is your strongest protection because your bank can return the money while the dispute is still being investigated.

The difference between PayPal disputes and bank chargebacks

PayPal has its own dispute process, separate from your bank's chargeback process. When you dispute a transaction through PayPal, PayPal investigates and decides whether to refund you. When you dispute through your bank, your bank reverses the transaction and returns the money to your account while it investigates. These are two different systems with different timelines and outcomes.

You can report the same transaction to both PayPal and your bank, but doing so can create complications. If your bank reverses the transaction and returns the money, and then PayPal also refunds you, you will have received the money twice. PayPal may then pursue you to recover the duplicate refund, or it may restrict your account. Some banks also charge you a chargeback fee if you dispute through both channels simultaneously.

The safest approach is to start with your bank. Report the unauthorized withdrawal to your bank first and ask them to reverse it. Your bank can usually do this within 1 to 3 business days. Once your bank has reversed it, you can then dispute through PayPal if you want to ensure PayPal investigates the source of the unauthorized transaction. This protects you from the duplicate-refund problem.

How to prevent future unauthorized withdrawals

If your PayPal account was compromised, change your password immediately. Use a strong password that is unique to PayPal—do not reuse a password from another site. Enable two-factor authentication on your PayPal account. This requires a code from your phone or email every time someone tries to log in, which makes it much harder for a thief to access your account even if they have your password.

Review the bank accounts and credit cards linked to your PayPal account. Remove any that you do not recognize or no longer use. Go to your Wallet settings and check which payment methods are active. If you see a bank account you did not link, remove it immediately and report it to PayPal.

If you want to stop PayPal from accessing your checking account entirely, unlink the account from PayPal. Go to your Wallet, select the bank account, and choose to remove it. This stops PayPal from being able to initiate any future withdrawals from that account. However, it does not reverse past withdrawals or disputes that are already in progress.

Monitor your checking account regularly. Set up alerts with your bank so that you are notified of any withdrawal over a certain amount. The sooner you notice an unauthorized transaction, the sooner you can report it and the easier it is to reverse.

What happens if PayPal itself makes an error

Occasionally PayPal makes a genuine error—it withdraws the wrong amount, withdraws twice for a single transaction, or withdraws from the wrong account. If this happens, PayPal is responsible for correcting it. Contact PayPal's customer service and explain the error. Provide your transaction ID, the date, and the amount. PayPal can reverse the erroneous withdrawal and return the money to your account.

If PayPal does not correct the error within a reasonable timeframe, you can dispute it through your bank. Your bank can reverse the transaction based on your report that it was an error, even though PayPal initiated it with a valid authorization. The key difference is that you are reporting an error, not fraud—but the result is the same: your bank can return the money.

Frequently Asked Questions

Can PayPal withdraw money for fees or penalties without asking me first?

PayPal can charge fees for certain services, such as sending money as a business payment or using certain features, but it must disclose these fees before you use the service. PayPal cannot charge surprise fees or penalties without your knowledge. If you see a fee you did not authorize, report it as an unauthorized transaction to both PayPal and your bank.

What if I linked my bank account to PayPal years ago and forgot about it?

That old authorization is still active unless you removed the account. If you no longer use PayPal, unlink your bank account now. If you see withdrawals from an old PayPal account you thought was closed, log in and check your transaction history. If the account was hacked or someone else is using it, report it to PayPal and your bank immediately.

How long does my bank have to reverse an unauthorized withdrawal?

Federal law gives banks 60 days from the date the transaction posted to reverse an unauthorized ACH transfer. Some banks allow longer, so check your bank's policy. The sooner you report it, the sooner your bank can act. Do not wait until the deadline approaches.

Can I get my money back if I wait more than 60 days to report it?

Your bank's obligation to reverse the transaction expires after 60 days, but you may still have options. You can dispute through PayPal's Resolution Center, which has a longer timeframe. You can also contact your bank to ask if they will make an exception. Some banks will reverse transactions beyond the 60-day window if you have a good reason for the delay, but they are not required to.

What if the unauthorized withdrawal was from a linked credit card, not a checking account?

Credit card transactions have different protections than bank account transactions. Contact your credit card company and report the charge as unauthorized. Credit card companies typically reverse unauthorized charges within 30 to 60 days. Your credit card company may also issue you a new card number to prevent future unauthorized charges.