Priya noticed the problem while checking her account before work: a withdrawal she did not recognize had already reduced the balance. She did not click the text message that claimed to be from her bank, and she did not call the number displayed beside the transaction. Instead, she opened the bank’s official app, wrote down the amount and date, and used the verified contact path. That sequence mattered. An unauthorized bank transaction is not a situation where guessing, delaying, or sending money to a stranger improves the outcome. The immediate goal is to secure the account, report the transaction through a trusted channel, preserve evidence, and learn what the bank needs next.
Why trust this guide: Federal consumer guidance from the Consumer Financial Protection Bureau, the Federal Deposit Insurance Corporation, the Federal Trade Commission, and the Office of the Comptroller of the Currency informs this guide. Our team draws on over 45 years of CPA experience helping households evaluate financial decisions with clarity and caution. This guide covers account security, verified reporting, evidence preservation, Regulation E distinctions, follow-up, and identity-theft escalation without promising reimbursement or a particular outcome. It is general education, not individualized financial advice; account terms, dispute procedures, deadlines, protections, and applicable law vary. This article focuses on what to do after an unauthorized bank transaction, rather than on stopping a debit that was originally authorized.
Table of Contents
Direct Answer: What Should You Do After an Unauthorized Bank Transaction?
Start by securing the affected account and contacting the bank or credit union through a verified channel. Do not use a number from an unexpected text, email, or social-media message. Note the transaction date, amount, description, account, and whether a card, password, phone, or other access device may have been exposed. Tell the institution plainly that you are reporting an unauthorized bank transaction and ask what immediate protection applies.
Report the issue promptly, even if the transaction is pending. Ask for a case number, the error-reporting process, and any written-confirmation requirement. Regulation E can provide protections for qualifying unauthorized electronic fund transfers, but timing and facts matter. The CFPB explains that a bank generally has 10 business days to investigate after notice, or 20 business days when the account is less than 30 days old, with additional rules when the investigation takes longer. CFPB guidance provides the current consumer explanation.
Keep the confirmation, statements, screenshots, call notes, and written explanation together. An unauthorized bank transaction may be an isolated error, exposed credential, or part of broader identity theft. Monitor connected accounts and follow the institution’s instructions, but do not assume an unfamiliar merchant name proves fraud or that closing an account alone resolves the problem.
Step 1: Confirm the transaction through a trusted account channel
Direct answer: Verify the unauthorized bank transaction in the bank’s official app, website, statement, or a branch record before responding to any alert. A fraudulent message can imitate a bank while trying to capture your login, one-time code, card number, or Social Security number. An unfamiliar text alone is not proof that money moved.
Write down the posted or pending date, amount, account, transaction type, merchant or recipient descriptor, and any reference number. Capture the account page without exposing your full account number in a file you plan to share. If the account shows a second unauthorized bank transaction, list each item separately rather than combining them into one vague report.
Compare the descriptor with recent purchases, subscriptions, transfers, and household activity. A payment processor may use a name different from the store or service you recognize. Ask household members whether they initiated the payment, but do not let a possible explanation delay a report when an unauthorized bank transaction remains unexplained.
Check whether the transaction is pending, posted, reversed, or duplicated. The status can affect what the bank can do immediately, but a pending status is not a reason to wait for the statement. Ask the institution how it wants pending activity reported and whether it can place a temporary account restriction.
Do not click a link or call a number from the alert itself. Open the official bank app, type the institution’s known web address, use the number on a card or statement, or visit a branch. When you verify an unauthorized bank transaction through a trusted route, you reduce the chance that the follow-up report becomes a second loss.
Next actions: Record each transaction separately, preserve the account view, identify whether it is pending or posted, and use only a verified bank contact method for the next step.
Step 2: Secure the account, card, and exposed access information
Direct answer: Tell the bank that an unauthorized bank transaction may indicate exposed account access and ask what should be locked, replaced, or monitored. The right action may involve a debit card, online-banking password, mobile wallet, access code, linked payment service, or the account itself. Do not make broad changes without asking how they will affect legitimate deposits and bills.
If a card or access device was lost or stolen, report that fact and the time you learned about it. Regulation E liability rules distinguish between notice after learning of the loss or theft of an access device and notice after an unauthorized transfer appears on a periodic statement. The eCFR describes a two-business-day rule for certain lost-or-stolen access-device situations and a 60-day periodic-statement rule for later transfers. [2]
Change a compromised password from a device you trust, and do not reuse it elsewhere. If the same password protected email, shopping, payment, or financial accounts, change those accounts through their official sites too. Never provide a one-time code to a caller who claims to be helping with an unauthorized bank transaction.
Ask whether the bank should issue a new card, change account credentials, place a fraud alert on the account, or review linked devices. If you move money to protect it, ask about pending deposits, automatic bills, overdraft rules, and whether the institution needs the account open for its investigation. Moving funds alone does not report an unauthorized bank transaction or remove an attacker’s access.
Be cautious about “recovery” offers. A person who promises to return the money for an upfront fee may be extending the fraud. Use the contact information on the back of your card, your statement, or the institution’s official website, and record the time and channel used to report the unauthorized bank transaction.
Next actions: Ask the bank what to lock or replace, change exposed credentials through trusted sites, protect your email and payment accounts, and preserve the confirmation that the unauthorized bank transaction was reported.
Step 3: Report the error with precise dates, amounts, and facts
Direct answer: Give the bank enough information to identify the unauthorized bank transaction and explain why you did not authorize it. Include the account, date, amount, recipient or descriptor, and the date you first noticed it. If a third party had permission to use an access device in the past, explain when that permission ended. Accuracy helps the institution investigate the right event.
The CFPB’s Regulation E FAQs describe an unauthorized electronic fund transfer as one initiated by someone other than the consumer without actual authority and from which the consumer receives no benefit. The same guidance says an error can include an unauthorized EFT and that an institution generally must promptly investigate oral or written notice. [3]
Ask whether the bank wants a phone report, secure message, form, letter, or more than one method. If it asks for written confirmation after a telephone report, submit it by the stated deadline and keep proof. A bank generally cannot make you wait for a police report before initiating the required error-resolution process, although it may request information for its investigation.
Describe the event without exaggerating. Say whether you saw an unauthorized bank transaction, lost a card, shared credentials after a scam, or do not recognize a merchant descriptor. A payment you made but regret is not automatically an unauthorized transfer. If the facts are uncertain, state what you know and ask the bank to classify the issue under its process.
Request the case number, the date the bank received your report, the expected next update, and the method for sending documents. Write down the representative’s name or identifier and the exact instructions. If another unauthorized bank transaction appears, call again and connect it to the existing case rather than assuming the first report covers every later event.
Next actions: Submit the report through the bank’s required channel, include precise facts, complete written confirmation if requested, and keep a dated case timeline.
Step 4: Understand the investigation timeline without assuming the result
Direct answer: Ask the institution what timeline applies to your unauthorized bank transaction and what temporary measures are available while it investigates. The CFPB says a bank or credit union generally has 10 business days to investigate an unauthorized transaction after notice, or 20 business days when the account has been open less than 30 days. The institution generally must correct an error within one business day after determining that an error occurred and report its findings within three business days after completing the investigation. [1]
If the bank cannot complete the investigation within the applicable initial period, ask whether provisional credit applies and what conditions accompany it. The CFPB explains that a temporary credit may be required in many situations, but a bank may require written confirmation after an oral report and may have exceptions. Provisional credit is not the same as a final finding that the unauthorized bank transaction qualifies for reimbursement.
Ask what documents the bank reviewed, when you can request information used in its decision, and how you will receive the result. Keep the account funded for legitimate obligations when possible, but do not borrow money or pay a supposed investigator to speed up a claim. A bank’s investigation may examine the transaction record, access method, notice date, and surrounding account activity.
Mark the next follow-up date on your calendar. If the bank misses a promised update, contact it through the same verified channel and cite the case number. A careful timeline of an unauthorized bank transaction can be more useful than repeated calls that do not identify the transaction or the earlier report.
Do not treat a temporary credit as spendable until you understand the bank’s conditions. If the bank later determines that a transaction was authorized, the CFPB says it generally must provide written notice before removing credit issued during the investigation. Ask questions before using provisional funds connected to an unauthorized bank transaction.
Next actions: Record the applicable investigation dates, ask about temporary credit and conditions, calendar the next follow-up, and preserve every bank communication.
Step 5: Separate an unauthorized transfer from an authorized-payment dispute
Direct answer: Explain whether you never gave permission for the transaction or whether you gave permission and later objected to the payment. An unauthorized bank transaction generally involves a transfer initiated without actual authority and without a benefit to the consumer. A payment that was originally authorized but later became unwanted may require a merchant dispute, cancellation, contract discussion, or another process instead.
For example, an automatic debit you once approved is not automatically an unauthorized EFT because the amount is inconvenient or the service is disappointing. Conversely, a fraudster who uses stolen credentials may initiate an unauthorized bank transaction even when the consumer shared information with a legitimate company for an unrelated purpose. The CFPB’s FAQs explain that Regulation E coverage can extend to qualifying ACH, debit-card, prepaid-account, and person-to-person electronic transfers. [3]
Tell the bank what happened in plain language: “I did not make or authorize this transfer,” or “I authorized the company previously, revoked permission on this date, and this later debit appeared.” Do not choose the stronger label simply because it sounds more likely to produce a refund. A clear description of an unauthorized bank transaction helps the institution apply the right process.
If you recognize the company but not the descriptor, contact the company through a verified channel while also protecting the bank claim. Do not let a merchant referral delay a bank notice when you believe the transfer was unauthorized. Keep a copy of any merchant response and compare the answer with the transaction record.
Article 151 addresses the separate process for stopping an authorized ACH payment. Keeping that distinction clear prevents an unauthorized bank transaction from being confused with a payment-method change. For another account-security context, see Why Was My Credit Card Account Closed?; the account-closure guide is separate from this bank-transaction response.
Next actions: State whether authority existed, include any revocation date, preserve merchant communications, and use the error-resolution process for a transfer you did not authorize.
Step 6: Monitor for identity theft and complete the recovery record
Direct answer: Keep watching the affected account and connected accounts after you report an unauthorized bank transaction. Review new statements, alerts, linked payment services, email security, and credit activity as appropriate. A single transaction may be an isolated error, but repeated activity or misuse of personal information can signal broader identity theft.
USAGov explains that identity theft can involve someone using personal or financial information without permission, including bank account numbers. It directs consumers to report identity theft to the FTC through IdentityTheft.gov, contact the fraud departments of affected banks and account providers, and report unauthorized or suspicious transactions. [4] Use those resources when the facts suggest more than one unauthorized bank transaction or broader misuse of your information.
Build a recovery folder with the statement, transaction screenshots, bank case number, written report, confirmation, replacement-card notice, password-change dates, and any identity-theft report. Do not store full account numbers or one-time codes in an unsecured document. Note which accounts were checked and when. This record helps you recognize a second unauthorized bank transaction and answer the bank’s follow-up questions.
Review direct deposits, recurring bills, mobile wallets, payment apps, and other accounts that may share credentials. Ask the bank whether a new account number is appropriate and how to move legitimate deposits or payments. If you place a fraud alert or credit freeze, understand what each measure does and keep confirmation records; neither replaces reporting an unauthorized bank transaction to the account-holding institution. For related timing and posting questions, see Why Is My Credit Card Payment Still Pending?, What Happens If a Credit Card Payment Is Reversed?, and Credit Card Overpayment; these narrower card topics do not replace reporting an unauthorized bank transaction.
Continue monitoring after the immediate claim is closed. If a later unauthorized bank transaction appears, report it promptly and identify the earlier case. If the bank denies a claim, ask for the explanation and the information used, then consider an appropriate complaint or professional-help route. Do not pay an unverified company that promises guaranteed recovery.
Next actions: Review connected accounts, secure reused credentials, preserve the recovery record, use IdentityTheft.gov when broader identity theft is possible, and report later activity separately.
What to Do Next
Set aside 30 minutes today. First, verify the unauthorized bank transaction through the official account channel and write down the date, amount, descriptor, and status. Second, contact the bank or credit union using the number on your card, statement, or official website. Third, ask for a case number and the institution’s exact written-confirmation process.
Before ending the call, ask what should be locked or replaced, when the next update is expected, whether temporary credit may apply, and what documents the bank needs. Put the follow-up date on your calendar. If the transaction is close to a statement deadline or an access device was lost, say so plainly and ask how the timing rule applies.
After the report, change exposed credentials through trusted sites, review connected accounts, and save every confirmation. If the event suggests identity theft, use the FTC’s IdentityTheft.gov recovery process and contact each affected provider. Keep the underlying record until the bank’s investigation and any related account-security work are complete.
Frequently Asked Questions
What is the first thing to do after an unauthorized bank transaction?
Secure the account and contact the bank or credit union through a verified channel. Record the amount, date, descriptor, and account, and do not use a number or link from an unexpected alert. Report the unauthorized bank transaction promptly and ask for a case number.
Should I call the bank if the transaction is still pending?
Yes. A pending status can affect what the institution can do, but it is not a reason to wait. Tell the bank that you see a possible unauthorized bank transaction, ask whether it can place a restriction, and record the instructions.
How quickly should I report an unauthorized electronic transfer?
Report it as soon as you learn of it. Regulation E has different timing rules for certain lost or stolen access-device situations and for unauthorized transfers appearing on a periodic statement. The eCFR describes a two-business-day rule in one situation and a 60-day statement rule in another. Ask the bank how the rule applies to your unauthorized bank transaction.
Can the bank require a police report before investigating?
The CFPB’s Regulation E FAQs say a financial institution generally must begin its investigation after oral or written notice and may not delay the process while waiting for a police report or other consumer documentation. The bank may still request information as part of its investigation. Report the unauthorized bank transaction first and follow the institution’s written instructions.
What if I recognize the merchant name?
Recognizing a company does not answer whether you authorized the specific transfer. Check the agreement, date, amount, and account, and contact the company through a verified route if needed. Tell the bank whether you authorized the payment, revoked it, or never gave permission for the unauthorized bank transaction.
Will the bank refund the money automatically?
No outcome is automatic. The bank must follow applicable error-resolution rules for qualifying electronic fund transfers, but the result depends on the facts, notice timing, account type, and investigation. Ask about provisional credit, keep the case record, and do not spend a temporary credit connected to an unauthorized bank transaction until you understand the conditions.
Is an unauthorized bank transaction the same as identity theft?
Not necessarily. It may be an isolated account error, credential compromise, or part of identity theft. Review connected accounts and personal-information misuse. USAGov directs consumers to the FTC’s IdentityTheft.gov process when identity theft is possible. Continue monitoring after reporting the unauthorized bank transaction.
Should I close my bank account?
Do not close an account as the first or only step without asking the bank how it will affect deposits, legitimate bills, pending transactions, records, and the investigation. Start with verified reporting, account-security instructions, and the bank’s process. A broader account change may be appropriate after an unauthorized bank transaction, but the institution should explain the consequences.
What records should I keep?
Keep the statement, transaction details, screenshots, report date, case number, written confirmation, call notes, bank messages, replacement-card notice, and any identity-theft report. Keep a timeline for every unauthorized bank transaction and every response. Do not include full account numbers or one-time codes in ordinary email or unsecured files.
Here Are More Articles That Might Interest You
Credit Freeze vs Fraud Alert: Which Protection Fits? explains two different responses when personal information may be exposed.
How to Stop an Automatic ACH Payment covers the separate process for a debit that was originally authorized.
How to Clean Your ChexSystems Report addresses a related bank-account record issue.
What to Do When You Have a Negative Bank Account Balance covers cash-flow problems that may follow account disruption.
Bank Account Closed Due to Overdraft explains steps after an account closure.
How to Stop Recurring Overdraft Fees focuses on repeated account charges.
How to Ask Your Bank to Refund an Overdraft Fee provides a related bank-conversation framework.
Missed a Mortgage Payment? What to Do Next offers another time-sensitive financial response plan.
Join Our Newsletter
From time to time, we’ll send you information and resources that we believe may be helpful to you.
Subscribe to The Debt Survival Guide Newsletter
Disclaimer: The Debt Survival Guide provides educational content only. We are not attorneys, tax professionals, or financial advisors. This information should not be considered legal, tax, housing, credit, or individualized financial advice. Circumstances, agreements, deadlines, laws, and available options vary by person, account, location, and situation. Please review your records and written terms and consult a qualified attorney, legal-aid organization, HUD-approved housing counselor, tax professional, credit counselor, or financial professional before making decisions about your specific situation.