Contact your bank immediately after unauthorized access, meaning any account use without your permission. State you did not authorize the transfer and ask it to reverse the debit.
Ask it to freeze, close, or restrict the compromised account. The Consumer Financial Protection Bureau gives that direct instruction for unauthorized checking-account withdrawals in its guidance on unauthorized withdrawals. Fast action starts the error process and limits further withdrawals.
Table of Contents
- Call Your Bank First
- Why Reporting Speed Limits Your Loss
- How Does the Bank Investigation Work?
- Block Identity Theft and Secure Accounts
Call Your Bank First
Call the fraud department using the number on your card or statement. Explain what happened, identify the unauthorized transfers, and confirm you did not share access.
Ask for a case number and written confirmation. Use the call to stop more losses at the source: Write down dates, names, amounts, and instructions you receive. Keep copies of statements showing the disputed transfers.
- ask the bank to reverse the unauthorized debit
- ask it to freeze, restrict, or close the exposed account
- replace cards and account numbers tied to the access
- turn on alerts for new debits, logins, and balance changes
Why Reporting Speed Limits Your Loss
Liability for unauthorized electronic transfers rises quickly when notice is delayed. If your access device is lost or stolen and you notify the bank within two business days of learning of the loss, your loss is capped at the lesser of 50 dollars or pre-notice transfers, according to the Consumer Financial Protection Bureau in its Regulation E liability rule.
If you miss that window but report within 60 days after the statement showing the transfer was sent, liability can rise to 500 dollars. After 60 days, you can owe the full amount of later transfers before notice. Check statements promptly and report each unknown transfer at once.
How Does the Bank Investigation Work?
You must send the bank an error notice no later than 60 days after it sends the statement or provides passbook documentation. Describe the suspected error, give account details, and state why you believe it is unauthorized. Keep proof that you sent the notice on time.
The Consumer Financial Protection Bureau explains in its Regulation E error-resolution rule that the bank must investigate and generally provisionally credit the alleged error within 10 business days. The bank generally has up to 45 days to complete the investigation. Respond quickly to requests for documents or written confirmation.
Block Identity Theft and Secure Accounts
Report identity theft to the Federal Trade Commission at IdentityTheft.gov to obtain an Identity Theft Report and personalized recovery plan, according to the Federal Trade Commission in its IdentityTheft.gov announcement. That plan generates affidavits and prefilled letters for bureaus, businesses, police, collectors, and tax authorities.
Ask one major credit bureau to place a free initial one-year fraud alert or a credit freeze. Review all three credit reports at AnnualCreditReport.com and dispute unauthorized accounts using your FTC report. Change online-banking passwords, PINs, and security questions, file a local police report with identification and evidence, and submit a CFPB complaint if the bank does not resolve the error.
You Might Also Like
- Will Banks Compensate Customers After a Financial Data Breach?
- How Long Should a Financial Data Breach Investigation Take?
- Data Breach Exposed Your Date of Birth: Which Security Questions Should You Replace?