Finder makes money from featured partners, but editorial opinions are our own.
Advertiser disclosure
Bank Account Hacked? How to Fix it
If you notice any unusual activity, notify your bank immediately.
Cyber attacks on banks happen all too frequently. Thankfully, most banks are well protected against hackers, and the threat of a cyber attack shouldn’t deter you from using a financial institution.
But should your hard-earned money be compromised, here’s how to regain control of your account.
Key takeaways
- Signs of hacking: Watch for strange purchases, unfamiliar transactions, blocked logins and calls from your bank.
- Take action if hacked: Verify activity, call your bank, freeze your account, change pins/passwords and check credit history.
- Prevent hacking: Use strong passwords, avoid public Wi-Fi and enable two-factor authentication.
- Choose secure banks: Opt for banks with robust fraud protection like Ally, Bank of America or Capital One.
What to do if your bank account is hacked
If you believe your account has been hacked, there are a few important steps you should take:
1. View and verify account activity. First, go through your account activity to confirm any fraudulent charges. Some legitimate transactions may seem fraudulent if the company does business under a different name.
2. Call your bank. Once you’ve confirmed that your account has been hacked, call your bank to report the fraud. They can help you solve the issue and possibly return funds to your account.
3. Freeze your account. If possible, freeze your bank account online, on the app or by speaking with customer service.
4. Change your pins and passwords. Change your bank account pin to something entirely different and secure. Also, consider changing the passwords to your online banking account, email and other online accounts — and try not to use the same password.
5. Check your credit history. If your bank account is hacked, it’s possible that the hacker tried to open a credit card in your name. Speak with your bank to find out if they can check your credit history for free.
6. File a police report. Finally, consider filing a police report. It’s unlikely that you’ll have any information on the person who hacked you, but reports from multiple victims could increase the chances of the thief being caught. If caught, they could face fines up to $1 million or go to prison for up to 30 years.
What to do if you don’t agree with your bank’s fraud resolution
In most cases, you won’t be liable for funds lost due to hacking and fraud. However, if you don’t agree with your bank’s fraud resolution, here’s what you can do:
- Keep a record of all communications with your bank
- Speak with the fraud department directly
- Escalate your case to a manager or supervisor
- File a complaint with the Consumer Financial Protection Bureau
- If all else fails, you can consider taking legal action
Who is most likely to be researching bank account fraud?
Finder data suggests that men aged 25-34 are most likely to be researching this topic.
| Response | Male (%) | Female (%) |
|---|---|---|
| 65+ | 5.57% | 6.16% |
| 55-64 | 7.18% | 8.67% |
| 45-54 | 8.12% | 8.98% |
| 35-44 | 9.78% | 10.78% |
| 25-34 | 10.91% | 8.79% |
| 18-24 | 8.56% | 6.50% |
Source: Finder sample of 16,779 visitors using demographics data from Google Analytics
Signs your bank account has been hacked
Keep a close eye on these warning signs that your account could be compromised:
- Strange purchases. Seeing activity that’s out of the ordinary may be the first clue that a hacker has infiltrated your account. Watch for transactions made in locations where you haven’t been.
- Unfamiliar transactions. Sometimes you’ll notice small yet unfamiliar purchases. Thieves often do that to test if your card will work before making larger ones.
- Blocked login. If a hacker accesses your account from an unfamiliar location or tries your password too many times, your account may block you from logging in.
- Phone call from your bank. If your account is compromised, your bank may call to notify you of the recent breach. However, it’s essential that you don’t provide the caller with any personal information.
- Closed or emptied account. In more extreme cases, you may find that your bank account has been emptied or closed altogether.
- Denied card. If your account is compromised, your account could be emptied or your card could be frozen by your bank, leading to denied transactions.
Depending on your bank, it will notify you of suspicious activity and automatically cancel fraudulent charges and issue you a new card.
How to prevent bank account hacking
Stay safe online
- Check for site security. Most legitimate sites will have privacy and security terms that you can review. Secure URLs start with https — not http.
- Avoid public networks for banking. That means no quick peeks at your finances while you’re out shopping or working. Using public networks can compromise your personal security and put your information at risk.
- Don’t give your contact info to strangers. Confirm who’s calling or writing first before providing any information.
- Run antivirus and anti-malware software. Doing so could prevent computer viruses and the loss of your information.
- Beware of spam. Email software is effective at getting rid of spam most of the time. However, hackers design sites that mimic bank websites, so random emails that ask you to go to the bank’s website to confirm your information are most likely a scam.
Use strong passwords
- Don’t use the same passwords. Avoid using the same passwords for multiple online accounts. Otherwise, a security breach on one website could compromise all of your accounts.
- Keep your passwords and pins safe. That means not giving them out to anyone, including family, friends or anyone soliciting them over email. Also, try not to write them down.
- Strong security questions. The answers to your security questions won’t be verified, so you can choose any answer you’d like. Consider making the questions difficult or the answers harder to guess.
- Two-factor authentication. If possible, sign up for two-factor authentication. This security measure will require you to confirm your identity with your phone or email, decreasing the chances of unauthorized access.
- Use more characters — and symbols — in your password. The more characters in your password, the better. A mix of random letters, numbers and special characters will take much longer to crack than a simple word or series of numbers.
Be vigilant
- Report suspicious activity. Report any suspicious people or unverifiable companies soliciting your banking information. You may also want to contact your bank.
- Double-check your transactions. Look over your statements for any fraudulent purchases and report anything suspicious right away.
- Keep an eye on your credit history. If someone gets access to your bank account, they could sign up for credit cards and other financial products that would affect your credit. Check your credit history if you think your account is at risk.
- Sign up for text alerts. Apps and text alerts can send you a notification whenever your debit card is used. This can help you track spending and immediately know where and when your card is used.
Types of bank account hacking and fraud
Knowing the weak spots that hackers look for and the tricks they use can go a long way in protecting you from cyber theft:
- Weak passwords. Using simple, easy to guess passwords can put your accounts at risk.
- Fraudulent texts and phone calls. Beware of any emails or phone calls from numbers claiming to be your bank. They might just be looking to steal your information to access your account.
- Phishing links. Watch out for unfamiliar links in emails or while browsing online. While they might look legitimate, these links and websites are designed to look official to trick you into entering your information.
- Malware. This type of virus can be picked up from sketchy websites and emails, infecting your computer and possibly intercepting your information and passwords.
- Leaks. Websites and banks affected by security breaches can allow unauthorized people to access your info. It’s essential that you use different passwords for all of your online accounts. Otherwise, a breach on one website could affect all of your online accounts.
- Public Wi-Fi. Avoid logging into your bank account on public Wi-Fi, as hackers could use the public connection to intercept your information and access your accounts.
- Social engineering. Some hackers will go the extra mile to access your information by calling your bank and impersonating you. And since most banks will use your personal information to verify your identity, it’s important to not give your personal information to strangers.
- Card scanners. These devices — when placed over an existing, legitimate card scanner — will take a picture of your card and could record your pin. When using an ATM in an unfamiliar location, wiggle the card socket to check for a fraudulent card scanner.
How banks keep your accounts safe from hackers
Banks are liable
If a hacker steals money from a bank, the customer won’t lose money since the bank is liable to refund money for fraudulent debit transactions. However, it’s important to report fraud as soon as possible, as the bank’s liability decreases over time.
If you report a lost or stolen card immediately and before it’s used, you can’t be held liable for any charges. If you report a charge within 48 hours, you could be responsible for up to $50, or up to $500 if you wait longer than two days. Beyond 60 days, your bank is no longer responsible for the lost funds and you might be out any money that was stolen.
Banks are improving security
Since banks are constantly under attack, they need to ensure every aspect of their security is up to date. This means they generally have the latest software designed to protect you and your money.
Ensure your account is not vulnerable
Most banking websites allow you to activate a feature called “remember your password” when you log in online. This allows you to skip several layers of security the next time you log in since the bank recognizes your computer’s IPv4 address — a unique identifier for each Internet connection.
However, malware is a tool that hackers use to imitate your IPv4 address in order to gain access to your bank account. And since you usually won’t know that they have control over your computer, it’s best to disable the “remember your computer” feature.
Your guide to finding a bank account that meets your needs
How these 6 banks approach fraud protection
Common fraud protections banks put in place to prevent fraud include using AI and machine learning to monitor transactions, verifying someone’s identity through biometrics and two-factor authentication and evaluating the bank’s processes for legal compliance. These six banks take security a step further.
1. Ally Bank
Ally Bank monitors your account activity for potential fraud and automatically logs your banking session when you’re inactive. Plus, offers these fraud protection measures:
- Site and app monitoring. Ally checks on websites and app stores to identify scam sites and apps that may target Ally, a proactive approach to combating fraud.
- No-liability fraud guarantee. Ally Bank guarantees that you won’t be liable for fraudulent transactions if you report them within 60 days of getting your account statement.
- Webroot SecureAnywhere. Banking customers get access to this anti-virus software for free on up to three devices. Webroot blocks viruses and malware and alerts you to malicious links or websites in search results.
- Email confidentiality. Ally won’t email you, asking for your personal information, account information, username or password. If you do get these requests, forward the email to abuse@ally.com.
Ally Bank checking, savings and CD accounts
2. Bank of America
In addition to 24/7 account monitoring for fraud, Bank of America takes a variety of steps to protect your information, including:
- Verify Your Visa Card Is With You. This location-based anti-fraud measure compares your phone’s location to where the purchase is made. To work, you’ll need to turn on this setting
and your phone’s location services. - Free access to IBM’s Trusteer Rapport. This online fraud protection software works along with your other antivirus protection to detect and block malware and identify fake Bank of America websites.
- Secure Transfer. Bank of America sends a one-time authorization code to your phone before sending high-dollar transfers or wires. If you’re international, you can use a USB security key, a physical device that adds an extra layer of security by verifying your identity.
- Bank of America’s $0 Liability Guarantee. You won’t be responsible for fraudulent charges if you notify Bank of America in a timely manner.
- Email confidentiality. Bank of America won’t contact you via email, asking for personal information like your Social Security number or debit card PIN. Any of these requests should be forwarded to abuse@bankofamerica.com.
- Zelle transaction alerts. Bank of America verifies your enrollment in Zelle, a peer-to-peer transfer service. It also sends you alerts for new payees, password
Bank of America checking, savings and CD accounts
3. Capital One
Capital One offers customizable real-time alerts so that you can keep tabs on your money, as well as monitoring your account for suspicious activity. It puts these fraud protection measures in place:
- Free credit monitoring. Capital One gives you free access to CreditWise, a credit monitoring service that shows you your credit report in real time without hurting your score. It also sends alerts with major activities like credit inquiries and scans the internet to make sure that your personal information stays safe.
- Virtual card numbers. Eno, your Capital One virtual assistant, can create virtual card numbers for online purchases, helping you keep your real card number under wraps.
- $0 fraud liability. Like most banks, you won’t be responsible for any unauthorized purchases made with your card.
- Text message fraud alerts and debit card locking. While many banks text you about suspicious transactions, Capital One lets you text the word no if you don’t recognize a charge, locking your card. You can also lock and unlock your debit card in the app.
Capital One checking, savings and CD accounts
4. Chase
Start by signing up for Chase account alerts, notifying you about low balances, large purchases and more with personalized text, phone or email notifications. Chase also offers:
- Free credit monitoring for everyone. Anyone can sign up for Chase Credit Journey to track their credit score without hurting credit. It also monitors the internet for identity theft and sends email alerts about any major changes to their credit history.
- Tracking where card information is stored. Chase provides an account tool that shows you where you’ve stored your card information, helping you manage your data online.
- You control information with partners. View which Chase partners you’ve given information to and delete access to your account from the Linked Apps and Websites section of your online account.
- Virtual workshops for older adults. Chase partners with the AARP Foundation to bring virtual workshops, guides and worksheets to older adults. The goal is to educate adults about using online financial resources while avoiding scams.
- Business fraud prevention. Your business can get free check monitoring or validating, plus set controls for who can get ACH transfers from your business.
- Email confidentiality. No JPMorgan representatives will ask for your PIN, password or other personal information via email. However, you may get asked this information by phone.
- Zero liability policy. You’re not responsible for unauthorized charges tied to your card or bank account.
- Lock or unlock your card. If you misplace your card or it gets stolen, you can block its use until you find yours or get a new card.
Chase checking, savings and CD accounts
5. Discover
Along with setting up fraud alerts to receive texts about transactions and account activity, Discover provides additional security with:
- Card number on back of card. Discover cards come with the number printed on the back to keep your number secure when you’re out.
- Holds on suspicious transactions. If Discover’s fraud team sees suspicious activity on your account, it places a hold on the transaction. This action keeps the money in your account safe while confirming the transaction with you.
- Opening a new account. Discover doesn’t just send you a new card when fraud happens — it also closes your account and opens a new one to give you a new account number.
- $0 Fraud Liability Guarantee. Like most banks, you’re not held responsible for unauthorized purchases on your card or account.
- Email identifiers. Legitimate Discover emails will address you by name, include the last four digits of your account number and won’t ask for personal information. Always navigate to your Discover account separately, rather than clicking links from an email.
- Freezing your card. You can lock or unlock your debit card via the mobile app, online or by phone to pause new purchases and ATM transactions.
Discover checking, savings and CD accounts
6. Wells Fargo
Wells Fargo monitors your accounts for changes to your personal information or sign-in attempts. You can also set up alerts to track your purchases and temporarily turn your cards on or off if you misplace your debit card.
Plus, Wells Fargo offers these features for extra security:
- Voice verification. You can choose to say a passphrase when calling Wells Fargo customer service. Unlike other banks that only require a passcode, Wells Fargo’s verification offers heightened account protection because it identifies you by your unique voice.
- Turn off biometric sign-in for the app. If your phone gets lost or stolen, you can call Wells Fargo to turn off fingerprint or other biometric sign-in features. The person with your phone may be able to add their fingerprint to your device and access your apps.
- Advanced Access. Wells Fargo requires an access code with certain types of activities like adding a new Zelle payee. Only enter the access code if you started the transaction.
- Zero Liability Protection. You won’t be responsible for unauthorized charges as long as you report them right away.
- Customer service confidentiality. Wells Fargo representatives will never ask for your account password or PIN or call or text you asking for access codes. Reps may ask for your username or access code if you call them.
- No email password resets. Wells Fargo doesn’t use your email to reset your password, preventing criminals from gaining access to your account this way.
- Review connected apps. See which apps you’ve connected to your Wells Fargo account through the Connected Apps section of your online account.
Wells Fargo checking, savings and CD accounts
Bottom line
As stressful as having your bank account hacked may be, there’s a chance you could get your money back if you act fast. Banks are generally responsible for any charges due to cybersecurity breaches, but you should still always be prepared.
There are a number of things you can do to reduce the chances of your bank account being hacked, and choosing the right bank is one of them. Compare your options to find a bank and account that meet your needs.
More resources on Finder
More guides on Finder
-
Axos Bank Bonus Offers in November 2024
The $500 Axos Bank bonus is now expired, but you can still earn $50 per qualifying referral, plus up to $400 with a new business account.
-
Best Student Bank Accounts
SoFi, Fizz, Capital One, Chase, Discover and Revolut have some of the best student bank accounts for savings, checking and building credit.
-
Fifth Third Bank promotions and bonus offers of November 2024
Fifth Third Bank currently offers a $325 checking account bonus when you open a new account and set up qualifying direct deposits.
-
Current vs. Chime®: Which fintech is right for you?
Current wins for its high-APY savings pods and positive customer reviews, but Chime is still a good pick for credit-building.
-
SoFi vs. Ally: Which Bank Is Right for You?
Ally is best for its savings products, while SoFi is best for its convenient checking and savings hybrid account. See pros and cons here.
-
9 Banks Like Varo
Close alternatives to Varo include Chime, SoFi, Revolut, Current, Juno, Fizz, Dave and Honeydue. See how these banks compare here.
-
Banks like Chime
Top online banks like Chime include Varo, SoFi, Current, Axos, Capital One, Step, Dave and Fizz. See how these Chime alternatives compare.
-
List of bank failures: 2000 to 2024
A breakdown of every bank collapse since 2000.
-
U.S. Bank vs. Bank of America
U.S. Bank offers 24/7 customer service and a student checking account, though Bank of America has higher interest rates.
-
U.S. Bank vs. Wells Fargo
Weigh the pros and cons of two of the biggest banks in the US
Ask a question
My girlfriend account was hacked and they took her money she filed fraud and bank froze account gave her a new card and refunded the money. However they issued the refund to the same account that was compromised and the money was stolen again and even put her in the negative and now they want to go after her for the money when it is their fault. For a bank to put the refund into an account that was already compromised has to be the dumbest move I have ever seen. What can we do about this ? I’m thinking about getting her to get records of all transactions that month and going to the police to file a charge . Or calling corporate and telling them this proof we have and telling them if they don’t fix it we will be filing charges on them. Please give me advice thank you . Email me would be perfect !
Hi Chris,
Thanks for leaving a question on finder.
I’m sorry you had to go through this. The Federal Reserve urges you to file a complaint if you think a bank has been unfair or misleading, discriminated against you in lending, or violated a federal consumer protection law or regulation. You can file a complaint online through the Federal Reserve’s Consumer Complaint Form in their website. I hope this gets resolved soon.
Cheers,
Joel
I was in hospital and my stepdaughter stole 30,000 from my line of credit. The bank said it was friendly fraud and I was responsible even know she got the bank to change all my passwords. She was charged last week with grand larceny. Who is responsible for my money that is missing?
Hi Mirmir,
Thanks for reaching out.
I’m sorry to hear that you got fraud charges on your account. Generally, when a bank denies a claim, the next options include filing a claim with small claims court or filing a police report and seeking assistance from the authorities on how you can possibly get your money back. You may also want to check back with your bank so they can give advice on the other steps you can take if they considered your case a friendly fraud.
You may need to go to the branch and present valid IDs for you to gain access to your accounts as she has changed your passwords. Your bank will provide the next steps that can be done with regard to protecting your accounts.
Best Regards,
Joanne
My bank account was hacked and they managed to increase my overdraft as well as take everything out of my account leaving me overdrawn. I received a txt from the bank but it took an hour to get through to the bank. In that time the overdraft was increased . My SIM card has been cloned. Will I get my money back?
Hi Ndavid,
Thanks for getting in touch with finder.
I’m sorry to hear about what had happened to your bank account. It’s an unpleasant experience to get your account hacked.
Thankfully, if your bank finds the transaction to be fraudulent, you should be refunded the missing money. Thus, the best course of action is to directly get in touch with your bank immediately and resolve the problem with them.
You might also want to read, “How can hackers steal your credit card CVV number?” This should give you more knowledge on how to avoid future problems with your bank account.
I hope this helps. Should you have further questions, please don’t hesitate to reach us out again.
Have a wonderful day!
Cheers,
Joshua
How long do you have to recover stolen my from your bank account
Hi Talhia,
Thanks for leaving a question on finder.
Sorry to hear about that. Please note that you may or may not be able to get a refund for as the bank will have to investigate first if you have done reasonable measures to protect your account. Refund differs from bank to bank but it is usually within 60 days. It would be best to contact your bank to get a more direct answer.
Cheers,
Joel
I would like to know since my bank card was hacked, is the routing number the same or you guys change it?
Hi Yudith,
Thanks for leaving a question on finder.
Routing number and swift code is static and unique for each bank. To answer your question, it can not be changed since it is for all customers and not just for you unlike your account number.
Cheers,
Joel