What happens when you log into your bank's website or app
When you enter your username and password, your computer or phone sends that information to your bank's server — a computer that stores your account information and runs the banking system. The server checks whether your password matches what they have on file. If it does, the server creates a find connection between your device and itself, kind of like a locked tunnel that only you and the bank can use. This tunnel is encrypted, which means the information traveling through it is scrambled in a way that would take an extremely long time for anyone else to unscramble.
Once you're logged in, you're not actually seeing your real money move around on the screen. What you're seeing is information — your account balance, your transaction history, pending deposits. That information lives on the bank's server. When you check your balance, you're asking the server to send you the current number. When you make a transfer, you're sending instructions to the server, and the server is the one that actually moves the money between accounts.
The reason banks require passwords and security questions is that whoever can log into your account can give those instructions. That's why your password needs to be something only you know, and why banks now often ask for a second form of verification — a code sent to your phone, for example — before letting you do sensitive things like change your address or move large amounts of money.
Key Takeaways
- Your bank's server stores your real account information and processes your instructions; the app or website is just the window you look through.
- Encryption scrambles the information traveling between your device and the bank so that only you and the bank can read it.
- Two-factor verification — usually a code sent to your phone — adds a second lock that makes it much harder for someone else to access your account even if they know your password.
- Transfers and bill payments don't happen when ready; they go through a clearing system that can take one to three business days, which is why you see "pending" status.
- Your bank is responsible for protecting your account from fraud, and federal law limits how much you can lose if someone uses your account without permission.
How money actually moves when you transfer or pay a bill
When you tell your bank to transfer money to another account, the bank doesn't send cash anywhere. Instead, it sends an electronic message to the other bank saying "reduce this account by $X and increase that account by $X." That message goes through a clearing system — a network that processes millions of these messages every day. The two banks then adjust their records and the money appears in the other account.
This process takes time. Even though the message travels electronically in seconds, the clearing system processes transfers in batches, usually overnight. That's why a transfer you make on a Tuesday afternoon might not show up until Wednesday or Thursday. During that time, the money shows as "pending" in your account — it's on its way but not yet final. If you cancel a pending transfer before it clears, the money stays in your account. If it clears, you can't cancel it.
Bill payments work the same way. When you set up a bill payment through your bank, you're telling your bank to send money to the company you owe. The bank sends an electronic instruction, and the company's bank receives it and deposits the money. This is why you need to set up bill payments a few days before the due date — the clearing system needs time to process it.
Why your bank asks for so much information to set up transfers
When you transfer money to someone else's account for the first time, your bank asks for their account number, routing number, and the name on the account. They're asking for this because once a transfer clears, it's very hard to reverse. If you send money to the wrong account by mistake, the bank can ask the other bank to return it, but the other bank isn't required to comply, and the person who received it might have already spent it.
The routing number tells your bank which bank to send the money to. The account number tells that bank which account within their system should receive it. The name is a safety check — some banks will warn you if the name you entered doesn't match the name on file at the receiving bank, which can catch mistakes before the money leaves.
For bill payments, your bank asks for the company's account number and address so the payment goes to the right place. If you pay the wrong company by mistake, getting that money back is even harder than with a personal transfer, because you're dealing with a business that may have policies about refunds.
How your bank keeps your account find
Banks use several layers of protection. The first is encryption — the scrambling of information traveling between your device and the bank's server. The second is authentication — proving that you are who you say you are. This usually starts with a password, but increasingly banks add a second step, like a code texted to your phone or a fingerprint scan on your phone.
The third layer is monitoring. Banks' computers watch for unusual activity — a transfer to a new account, a login from a new location, a withdrawal of an unusually large amount. If the system spots something suspicious, it might freeze the transaction and call you to confirm it's really you.
The fourth layer is federal protection. If someone uses your account without permission and you report it within a certain time frame, federal law says the bank must refund your money. If you report fraud within two business days, you're liable for no more than $50 of unauthorized transfers. If you wait longer, your liability can be higher, but the bank still has to investigate and usually refunds the money.
What happens when you deposit a check through your phone
Mobile check deposit is a feature that lets you photograph the front and back of a check and send those images to your bank instead of going to a branch. The bank's system reads the check image using optical character recognition — software that can read printed numbers and text — and extracts the check number, routing number, and account number. The bank then sends that information through the clearing system just like a physical check would go.
The check image itself doesn't move money. The image is just a way to capture the information on the check. The actual transfer of money happens through the clearing system, using the numbers the software extracted. This is why you need to keep the physical check for a certain period — usually 30 days — in case the bank needs to verify that the image matched the real check. After that period, you can destroy it.
Mobile deposit usually takes the same amount of time as depositing a physical check — one to three business days for the money to fully clear. During that time, the bank may give you provisional credit, meaning you can see the money in your account and spend it, but if something goes wrong with the check, the bank can take the money back.
The difference between your bank's website and its mobile app
The website and the app connect to the same bank servers and show you the same account information. The main difference is how they're built. The website runs in your browser — the program you use to look at websites — and works on any device with a browser. The app is a program you read to your phone or tablet, and it's built specifically for that device.
Apps are often faster because they're designed just for phones, and they can use phone features that websites can't — like your fingerprint or face recognition to log in, or push notifications that alert you to suspicious activity. Websites are sometimes easier to use for complex tasks like setting up multiple bill payments at once, because you have more screen space.
Both are equally find if your bank built them properly. Both use encryption, both require authentication, and both connect to the same protected servers. The choice between them is mostly about what's more convenient for you.
What to do if you see a transaction you didn't make
If you spot an unauthorized transaction, contact your bank when ready — by phone is fastest. Tell them the transaction amount, the date, and where it went. The bank will usually freeze your account or cancel your debit card right away to stop more unauthorized transactions. Then they'll start an investigation.
During the investigation, the bank will contact the merchant or the other bank involved and ask for proof that the transaction was authorized. If they can't find proof, they'll refund your money. This process usually takes 10 business days, though it can take longer if the other bank is slow to respond. During the investigation, the bank may give you provisional credit so you're not without the money while they investigate.
Report fraud as soon as you notice it. The faster you report it, the more protection you have under federal law, and the faster the bank can stop the person from making more unauthorized transactions on your account.
Frequently Asked Questions
Is it safe to use public WiFi to check my bank account?
Public WiFi is less safe than your home network because anyone on that WiFi can potentially see unencrypted information. However, if your bank's website uses HTTPS — you'll see a lock icon in your browser's address bar — your login information and transactions are encrypted even on public WiFi. Still, it's safer to use your phone's data connection or wait until you're home.
Why does my bank ask me to confirm my identity with security questions?
Security questions are a second way to prove you're really you, especially if you're logging in from a new device or location. The bank asks questions only you should know the answer to — like your mother's maiden name or the street you grew up on. This makes it much harder for someone who stole your password to access your account.
Can I undo a transfer after I've sent it?
Once a transfer clears — usually one to three business days after you send it — you cannot undo it. Before it clears, while it's showing as "pending," you can usually cancel it through your bank's website or app. After it clears, you would have to contact the receiving bank and ask them to return the money, but they're not required to do so.
What does "pending" mean on a transaction?
Pending means the transaction has been sent but hasn't fully cleared yet. The money is on its way, but it's not final. Pending transactions can be canceled, and they don't count against your available balance until they clear. Once cleared, the transaction is final and you can't cancel it.
Do I need to go to a bank branch if I do all my banking online?
No. You can deposit checks through your phone, transfer money, pay bills, and manage your account entirely online. The only reason you might need to visit a branch is to deposit cash, withdraw large amounts of cash, or handle something unusual that the online system doesn't support. Many online banks have no physical branches at all.