Your Bank Account Was Hacked—What to Do in the First 24 Hours

Act Fast, but Don’t Panic

If your bank account was hacked, contact your bank immediately, lock affected cards, change your login credentials, and document every suspicious transaction. Then secure your email and phone, check connected payment apps, and report possible identity theft. The faster you act, the better your chances of stopping additional losses and recovering money.

A hacked account can feel terrifying. Your checking account may contain money for rent, groceries, utilities, and everything else your household needs. Seeing an unfamiliar transfer can make it seem as though your entire financial life is collapsing.

Take a breath. You do not need to solve everything at once. Your first goal is simply to stop the damage, secure your information, and create a clear record of what happened.

The First Hour: Contact Your Bank

Call your bank or credit union immediately. Use the phone number printed on your debit card, listed on a bank statement, or found inside the official banking app. Do not call a number sent through a suspicious text, email, or social media message.

Tell the representative that you believe your account has been compromised. Be specific about whether you see:

• Debit card purchases you did not make
• ATM withdrawals you do not recognize
• Electronic or ACH transfers
• Checks you did not write
• Changes to your contact information
• A new payment recipient or linked account
• A transfer through a payment app

Ask the bank to freeze or block the affected card and prevent additional unauthorized transfers. Depending on what happened, the bank may close the compromised account and open a replacement with a new account number.

Also ask the representative to:

1. Open a formal fraud claim.
2. Identify any pending transactions.
3. Stop eligible payments or transfers.
4. Replace your debit card and PIN.
5. Give you a claim or case number.
6. Explain whether written confirmation is required.
7. Review recent changes to your profile.

Federal protections can depend partly on how quickly you report a lost card, stolen credentials, or unauthorized electronic transaction, so do not wait until the next business day if your bank offers 24-hour fraud support. The Consumer Financial Protection Bureau’s guidance on unauthorized bank transactions explains why prompt reporting matters.

Understand What “Hacked” May Mean

Not every suspicious payment is technically the same. A criminal may directly access your account and move money without permission, or a scammer may manipulate you into sending the money yourself.

Explain exactly what occurred when speaking with your bank. Avoid guessing, but do not minimize the situation. A transfer initiated by a criminal using stolen banking credentials can qualify as an unauthorized electronic fund transfer under federal rules.

Hours 1–3: Document Every Detail

Once the bank has been notified, create a record of the incident. Good documentation can help your claim and prevent you from repeatedly trying to remember details during a stressful time.

Write down:

• When you first noticed the problem
• The date, amount, and description of each transaction
• Whether your physical debit card is missing
• Any suspicious calls, emails, or text messages
• The names or identification numbers of bank representatives
• Your fraud claim number
• What the bank agreed to block, replace, or investigate

Take screenshots of suspicious transactions before account access changes. Save relevant emails and text messages, but do not click their links or download their attachments.

Review at least the previous 60 days of activity. Criminals sometimes test stolen information with a small purchase before attempting a larger withdrawal. The CFPB recommends reporting suspicious activity immediately, including unfamiliar transactions for small amounts.

Hours 3–6: Secure the Digital Door

Changing only your banking password may not be enough. If a criminal accessed your bank account through your email, phone, or infected device, that person may be able to return.

Start with your email account because it is often used to reset financial passwords. Create a strong, unique password that you have never used elsewhere. Then turn on multifactor authentication, preferably through an authenticator app when available.

Next, secure:

• Your online banking account
• Credit card accounts
• Payment apps
• Mobile wallet
• Investment and retirement accounts
• Cellphone carrier account
• Shopping websites storing payment information
• Cloud storage containing financial documents

Do not simply add a number to your old password. Use a completely new passphrase, and never reuse your bank password on another website.

If you clicked a suspicious link or installed unfamiliar software, update your device and run a security scan. Consider performing sensitive account changes from another trusted device until you are confident that the original one is secure. The FTC also recommends changing compromised passwords, enabling two-factor authentication, and scanning a device if a scammer gained access.

Hours 6–12: Protect Your Identity

A hacked bank account does not automatically mean your entire identity was stolen. However, take extra precautions if the criminal may have obtained your Social Security number, birth date, driver’s license information, or other sensitive data.

Visit IdentityTheft.gov for an official recovery plan. You may also consider freezing your credit with Equifax, Experian, and TransUnion. A credit freeze makes it harder for someone to open a new credit account in your name, and placing one is free.

Check your credit reports for accounts or inquiries you do not recognize. If you want a beginner-friendly explanation of what you are seeing, review this guide to reading a credit report and fixing errors.

A credit freeze does not repair your bank account or stop transactions on an existing card. It is an additional shield against criminals using your identity to borrow money.

Hours 12–24: Protect Your Essential Bills

Fraud can create a second problem even after the criminal is locked out. If your bank closes the account, legitimate automatic payments may fail.

Make a list of anything connected to the compromised account, including:

• Rent or mortgage payments
• Utility bills
• Insurance premiums
• Loan and credit card payments
• Subscription services
• Payroll direct deposit
• Government benefits
• Transfers to savings or investment accounts

Prioritize housing, utilities, insurance, transportation, and minimum debt payments. Contact companies before payments are missed, explain that the bank account was compromised, and ask whether fees can be waived.

If your paycheck was scheduled for direct deposit, speak with your employer’s payroll department. Verify any new account instructions through a trusted contact method before providing them.

[quote[ Keep a small amount of emergency money at a separate financial institution when possible. A backup account cannot prevent fraud, but it may help you pay for food, transportation, and essential bills while your primary account is restricted or under investigation. ]quote]

This is one reason an emergency reserve matters. If you are building one from scratch, use this beginner’s guide to creating an emergency fund.

Know What Happens After You File a Claim

For many unauthorized electronic fund transfer disputes, a bank generally has 10 business days to investigate. If it needs more time, it may sometimes take up to 45 days, but it generally must provide provisional credit within the applicable period and let you use those temporary funds while the investigation continues. Special timelines can apply to certain transactions and newer accounts.

Provisional credit is temporary. Do not assume the claim is finished until the bank confirms its final decision.

If the bank asks you to confirm the dispute in writing, follow the instructions promptly and keep proof of delivery. Ask for copies of the documents used in the investigation if your claim is denied, and consider filing a complaint with the CFPB if you believe the matter was not handled properly.

Watch Your Accounts for the Next 30 Days

Your work is not over after the first day. Monitor your replacement account, credit reports, email, and phone service closely.

Turn on alerts for:

• Purchases
• ATM withdrawals
• Transfers
• Password changes
• New payment recipients
• Contact-information changes
• Low balances and overdrafts

A short weekly review can make unusual activity easier to catch. The 10-minute weekly money checkup is a simple habit for staying connected to your money without becoming overwhelmed.

Most importantly, do not trust anyone who calls and says you must move money to “protect” it. Do not share one-time verification codes. End the conversation and contact the real institution yourself. The FTC warns that demands to transfer supposedly endangered money are a common impersonation scam.

Turn a Scary Day Into a Stronger Financial System

Having your bank account hacked is not proof that you are careless or bad with money. Modern criminals use convincing messages, stolen data, fake websites, and sophisticated account-takeover methods.

What matters now is your response. By acting quickly, documenting everything, strengthening your security, and building a backup financial cushion, you can move from panic to control.

Wealth is not only about growing money. It is also about protecting the money, identity, and opportunities you have already worked hard to build.