What to do first when you suspect bank account identity theft
If you think someone used your personal information to access or open a bank account, act immediately.
The first hours matter because fast reporting can limit losses, preserve evidence, and help your bank reverse unauthorized activity.
Identity theft involving a bank account can include debit card fraud, unauthorized electronic transfers, new accounts opened in your name, or a takeover of an existing account.
The right response depends on whether the fraud is limited to one account or has spread to your credit file, tax records, or other financial accounts.
How to report identity theft involving your bank account to your bank
Contact the bank’s fraud department right away using the number on the back of your card, the mobile app’s secure messaging feature, or the bank’s official website.
If the account is compromised, ask the representative to freeze or close the account, block new transactions, and issue a replacement card or account number.
When you report identity theft involving your bank account, be specific about what happened.
State whether you saw unauthorized withdrawals, pending transfers, new payees, changes to your contact information, or login activity you do not recognize.
What information should you provide?
- Your full name and account number
- The date and time you noticed suspicious activity
- Details of each unauthorized transaction
- Names of merchants, transfer recipients, or linked accounts if visible
- Any changes to email, phone number, password, or mailing address
Ask for a case number and the name or department of the person handling your report.
Request written confirmation of the fraud claim and keep copies of every message, letter, and form the bank sends.
Should you visit a branch in person?
If possible, yes.
An in-person visit can help you verify your identity, complete affidavits, and reduce delays.
Bring a government-issued photo ID, recent statements, screenshots of suspicious activity, and any police report number if you already filed one.
How to dispute unauthorized transactions
Under the Electronic Fund Transfer Act and Regulation E, consumers generally have rights to dispute unauthorized electronic fund transfers on consumer accounts.
Timing matters, so submit disputes promptly after noticing the problem.
Dispute each transaction separately if the bank requires it.
Confirm whether the bank needs the complaint in writing, and note the deadline for provisional credit if your account is covered by Regulation E.
What counts as unauthorized activity?
- Debit card purchases you did not make
- ATM withdrawals you did not authorize
- Online bill payments set up by an intruder
- Wire transfers or ACH transfers you did not approve
- Cash advances or cash app transfers made through compromised credentials
Keep receipts, bank statements, text alerts, and screenshots that show the transaction history.
If the bank initially denies your claim, ask for the written reason and the evidence it relied on.
How to file an identity theft report with the Federal Trade Commission
File a report at IdentityTheft.gov, the Federal Trade Commission’s official identity theft recovery site.
The FTC report helps create an identity theft affidavit and a recovery plan that you can use with banks, creditors, and other institutions.
Fill out the report with accurate dates, account details, and a description of how the fraud was discovered.
Save the FTC affidavit as a PDF and keep both digital and printed copies.
Why the FTC report matters
- It documents the fraud in a standardized format
- It supports disputes with financial institutions
- It helps show that you acted quickly
- It can help reduce requests for repeated explanations
When to file a police report
Many banks and credit bureaus will ask for a police report, especially if the identity theft involves a large loss, account takeover, or multiple institutions.
File with your local police department or the agency where the crime occurred, and bring your FTC affidavit, account statements, and any supporting evidence.
Ask for a copy of the report or the report number.
If officers decline to take a full report, request a written incident record that notes your complaint and the date it was made.
How to protect your credit after bank account identity theft
Bank fraud can be the first sign of broader identity theft, so check your credit reports with Equifax, Experian, and TransUnion.
Review new accounts, hard inquiries, addresses, and employer information that you do not recognize.
Consider placing a fraud alert or credit freeze if you suspect someone is using your identity to open loans, cards, or deposit accounts.
A fraud alert tells lenders to verify identity before issuing new credit, while a credit freeze restricts access to your credit file until you lift it.
Other places to monitor
- Your email accounts for password-reset messages
- Your phone records for SIM swap or port-out signs
- Your Social Security Administration account, if you have one
- Your tax transcript and IRS account for tax-related identity theft
- Other bank, credit union, or payment app accounts
How to document the fraud for faster recovery
Good records make it easier to recover money and prove the scope of the problem.
Create a simple timeline that includes when you first noticed suspicious activity, when you contacted the bank, what the bank said, and what actions you took next.
Store copies of statements, dispute letters, FTC reports, police reports, screenshots, and emails in one secure folder.
If you mail documents, use certified mail or another tracking method so you can prove delivery.
Useful evidence to keep
- Bank statements showing unauthorized charges
- Transaction IDs and confirmation numbers
- Fraud case numbers from the bank
- Emails or texts from the bank and merchants
- Screen captures of login alerts or profile changes
How to secure your bank accounts and devices
After the initial report, strengthen access so the fraud does not repeat.
Change passwords for your bank, email, and payment apps, and use unique passwords with a password manager.
Enable two-factor authentication wherever it is available, ideally with an authenticator app instead of text messages.
Review connected devices, authorized users, saved payees, and recurring transfers.
Log out of all sessions, remove unknown devices, and ask the bank to disable old cards or account access tokens if needed.
Security steps that reduce repeat fraud
- Set real-time account alerts for transfers and logins
- Use strong device passcodes and biometric locks
- Avoid public Wi-Fi for banking activity
- Monitor your credit and bank accounts weekly
- Replace compromised debit cards immediately
What to say if the bank challenges your claim
If the bank says the transaction was authorized or questions your timeline, remain factual and consistent.
Explain exactly why you believe the activity was fraudulent, reference your evidence, and request the bank’s denial in writing.
Ask whether you can escalate the claim to a supervisor, a fraud specialist, or the bank’s executive complaints team.
If necessary, file complaints with the Consumer Financial Protection Bureau, the Office of the Comptroller of the Currency, or your state regulator, depending on the institution.
How long identity theft recovery can take?
Recovery may take days for a simple debit card fraud claim or months if the theft includes account takeovers, new accounts, or repeated transfers.
The more complete your reporting is, the easier it is for institutions to verify the fraud and restore access.
Keep checking statements even after the bank closes the case.
Identity thieves sometimes return using stored credentials, linked payment apps, or recently exposed personal information.
Common mistakes to avoid during the reporting process
- Waiting to report because the loss seems small
- Closing the bank account before saving records
- Failing to get a case number or written confirmation
- Ignoring credit reports after the bank fraud is resolved
- Using the same password on email and banking sites
Reporting quickly, saving evidence, and following up in writing are the three actions that most improve your outcome.
If you know how to report identity theft involving your bank account and document each step, you are more likely to stop further damage and restore control sooner.