What to Do If Your Bank Account Was Hacked

A hacked bank account can feel urgent and personal. Someone may have accessed your online banking, made unauthorized transfers, changed your contact information, linked an outside account, or used your debit card without permission.

The first priority is to stop more money from leaving. Then secure your login, document what happened, and follow up until the bank resolves the claim.

In this guide, you’ll learn what to do if your bank account was hacked and how to protect the account from repeat access.

TL;DR: Quick Decision Guide

• If money is missing → contact your bank’s fraud department immediately.
• If your login was compromised → change your password from a trusted device.
• If your email or phone was hacked too → secure those before resetting bank access.
• If unauthorized transfers happened → ask the bank to reverse them and open a fraud claim.
• If personal information was exposed → consider a credit freeze and identity theft report.

Step 1: Contact Your Bank Immediately

Speed matters. If you see unauthorized transfers, withdrawals, debit card purchases, or account changes, contact your bank or credit union right away.

The FTC says if a scammer made an unauthorized transfer from your bank account, contact your bank, tell them it was an unauthorized debit or withdrawal, and ask them to reverse the transaction and return your money.

What to do:

• Call the number on your debit card, bank statement, or official bank website.
• Ask for the fraud department.
• Report every unauthorized transaction.
• Ask whether the account should be locked, closed, or replaced.
• Ask for a claim or case number.
• Write down the date, time, and representative’s name.

Do not use phone numbers from suspicious texts, emails, pop-ups, or search ads.

👉 Compare: Identity Protection Tools in the Marketplace →

Step 2: Secure Your Online Banking Login

If someone accessed your account online, assume your login information may be compromised.

What to do:

• Change your online banking password from a trusted device.
• Turn on two-factor authentication.
• Remove unknown devices or browsers.
• Check whether new payees, external accounts, or transfer methods were added.
• Review your email, phone number, and mailing address in account settings.
• Update security questions if your bank still uses them.

If your email account was also hacked, secure your email first. A hacker with email access may be able to reset your bank password again.

Smile Money Tip: Do not only change the bank password. Check the doors around the bank account too: email, phone, devices, and recovery settings.

👉 Related: How to Protect Your Email Account From Hackers →

Step 3: Review All Recent Account Activity

Look beyond the one transaction that caught your attention. Hackers may test an account with small transfers or changes before moving larger amounts.

Review:

• Recent withdrawals
• Transfers
• Debit card charges
• ATM activity
• Zelle or payment app transfers
• External bank links
• New payees
• Bill pay activity
• Address or phone changes
• Login activity, if available

Under federal electronic fund transfer rules, unauthorized electronic transfers are treated as errors, and reporting quickly matters. The CFPB explains that if you notify your bank or credit union within two business days of discovering a lost or stolen debit card, your liability is limited to the lesser of $50 or the amount of unauthorized transactions; waiting longer can increase potential liability.

What to do:
Make a list of suspicious activity with dates, amounts, merchants, and transaction IDs. Send the list to your bank if requested and keep a copy.

Step 4: Protect Connected Accounts

A hacked bank account may be part of a bigger account takeover.

Check accounts connected to your bank:

• Email
• Phone carrier
• Payment apps
• Debit card
• Credit cards
• Budgeting apps
• Investment apps
• External bank accounts
• Shopping accounts with saved debit cards

The CFPB states that transfers made by fraudsters using stolen account access information can qualify as unauthorized electronic fund transfers when the consumer receives no benefit from the transfer.

What to do:

• Change passwords for connected accounts.
• Turn on two-factor authentication.
• Remove linked apps you do not recognize.
• Lock or replace your debit card if needed.
• Contact payment apps if transfers moved through them.
• Watch for phishing messages pretending to be your bank.

👉 Related: How to Recover From a Payment App Scam →

Step 5: Document and Follow Up

A bank fraud claim may take time. Keep your own records so you can track what was reported and when.

What to save:

• Fraud claim number
• Bank messages
• Transaction screenshots
• Letters or emails from the bank
• Names of representatives
• Dates and times of calls
• Copies of written statements
• Police report, if filed
• Identity theft report, if needed

If identity theft was involved, IdentityTheft.gov can help you create a recovery plan and report. The FTC says IdentityTheft.gov provides step-by-step advice, checklists, and sample letters for recovery.

What to do:
Set a reminder to follow up with the bank. If the issue is not resolved or the response is unclear, ask for the next review step in writing.

Common Mistakes to Avoid

• Waiting to report unauthorized transactions
• Calling a phone number from a suspicious bank text
• Changing the bank password but not securing email
• Ignoring small test transactions
• Deleting messages or screenshots too soon
• Reusing the same password after the account is restored

What to Do If the Bank Does Not Resolve It

If your bank or credit union does not resolve the issue:

• Ask for a written explanation.
• Submit any missing documents.
• Escalate to the fraud or claims department.
• File a complaint with the CFPB if the issue involves a bank, credit union, money transfer, or other financial product.
• Report related scams to ReportFraud.ftc.gov.

The CFPB accepts consumer complaints about financial products and services and sends them to companies for response.

FAQs

Final Thought

A hacked bank account is urgent, but it is manageable when you move quickly. Contact the bank, secure your login, review all activity, and keep records until the claim is resolved.

The sooner you report and document the problem, the stronger your recovery path becomes.

Next Steps:

• 👉 Learn: How to Secure Your Financial Accounts From Fraud →
• 👉 Read: How to Recover From Identity Theft Step-by-Step →
• 👉 Read: What to Do If Someone Opened an Account in Your Name →
• 👉 Compare: Identity Protection Tools in the Marketplace →