Bank of America sends fraud alerts through text, email, and phone calls when it detects suspicious activity on your account

Bank of America's fraud alert system is called Fraud Detection Services. When the bank's monitoring systems flag unusual activity—a purchase in a different state within hours of another, a large withdrawal, a login from an unfamiliar device—it sends you a notification. The alert arrives through whatever contact method you have set up: text message, email, or a phone call. You do not have to turn this on; it runs automatically on most accounts.

The alert itself is a warning, not a block. Bank of America will tell you what triggered it—"unusual purchase in Miami" or "login attempt from a new device"—and ask you to confirm whether you made the transaction. If you say no, the bank can freeze the transaction and begin an investigation. If you say yes, the alert closes and the transaction proceeds. The timing matters: you typically have a limited window to respond before the bank makes its own decision about whether to let the transaction through.

What Bank of America does not do is prevent all fraud before it happens. The alerts are reactive—they catch things after the system notices them. A thief using your card number for a small purchase at a gas station near your home may not trigger an alert at all, because it looks normal. A large, out-of-pattern transaction is more likely to flag.

Key Takeaways

  • Bank of America's fraud alerts arrive by text, email, or phone when the system detects unusual activity, and you respond by confirming or denying the transaction.
  • The alerts are automatic and cannot be turned off, though you can change how you receive them through your online banking settings.
  • Responding quickly to an alert—within hours—gives the bank time to stop a fraudulent transaction before it clears your account.
  • Bank of America's monitoring catches many common fraud patterns, but small purchases or activity that matches your normal behavior may not trigger an alert.
  • If you ignore an alert or do not respond, the bank will eventually make its own decision about the transaction, which may mean letting it through.

How to set up and manage your alert preferences

You control how Bank of America reaches you, not whether it reaches you. Log into your Bank of America online account or mobile app, go to Settings, and look for "Alerts" or "Notifications." From there you can choose to receive fraud alerts by text, email, both, or phone call. You can also set the dollar amount threshold—some customers want alerts for any unusual activity, while others only want to hear about transactions over $500.

The mobile app is the fastest way to respond to an alert when it arrives. When you get a text or email saying "Did you authorize this transaction?", you can tap the link and confirm or deny it within seconds. If you respond through the app, the bank processes your answer when ready. If you call the number in the alert, you will reach Bank of America's fraud team, which can also freeze the transaction on the spot.

Do not ignore an alert thinking it will go away. If you do not respond within a set period—usually 24 to 48 hours—the bank's system will make a decision for you. That decision is often to let the transaction through, because the bank cannot hold money indefinitely without your input. If a fraudulent charge does go through, you can still dispute it later, but stopping it before it clears is simpler.

What triggers a fraud alert and what does not

Bank of America's system looks for patterns that break your normal behavior. A purchase in a city you have never visited, a withdrawal of several thousand dollars when you usually withdraw $200, a login from a country where you do not live—these trigger alerts. The system also watches for known fraud patterns: rapid-fire small purchases at different merchants, attempts to change your account password, or transfers to new external accounts.

What does not trigger an alert: a purchase at your regular grocery store, a gas station fill-up near your home, a login from your usual device and location, a transfer to an account you have used before. The system learns your patterns over time. If you travel frequently, it learns that. If you shop online every day, it learns that. A transaction that matches your history usually passes through without a notification.

This is why fraud alerts are imperfect. A thief who steals your card and makes one small purchase at a store near your home may not trigger anything. A legitimate large purchase you make while traveling might trigger an alert even though it is your own money. The system is tuned to catch obvious outliers, not every possible fraud.

What happens after you respond to an alert

If you confirm the transaction is yours, the alert closes and the charge processes normally. Your account shows the transaction as authorized. Nothing else happens—no investigation, no hold, no delay.

If you deny the transaction, Bank of America freezes it when ready. The charge does not post to your account. The bank then opens a fraud investigation, which means it will contact the merchant, review the transaction details, and determine whether to reverse it permanently or return it to the merchant. This process usually takes a few days to a week. During that time, the money is held and not available to you or the fraudster.

If you do not respond at all, the bank will eventually process the transaction anyway. The exact timeline varies, but most transactions clear within 24 to 48 hours whether you respond or not. Once a transaction clears, disputing it becomes more complicated—you have to file a formal dispute claim rather than straightforward denying it in the moment.

The difference between a fraud alert and a fraud freeze

A fraud alert is what Bank of America sends you when it sees suspicious activity on your existing account. It is a notification asking you to verify a transaction. A fraud freeze (also called a credit freeze) is something different: it is a restriction you place on your credit file to prevent someone from opening new accounts in your name. Bank of America does not place a credit freeze for you—you request that from the three credit bureaus (Equifax, Experian, TransUnion) yourself.

If your Bank of America account has been compromised and you are worried about identity theft, you may want both: the fraud alerts on your bank account to catch unauthorized charges, and a credit freeze to stop someone from opening a credit card or loan in your name. The bank's alerts protect your existing account. The credit freeze protects your credit profile.

What to do if you are not receiving alerts

If you think fraud is happening on your account but you are not getting alerts, check your notification settings first. Log into your account and confirm that alerts are turned on and that your phone number and email address are current. If you changed your phone number recently and did not update it in your Bank of America profile, alerts will go to the old number.

If your settings are correct and you still are not receiving alerts, contact Bank of America directly through the phone number on the back of your card or through your online banking portal. The bank can check whether alerts are actually being sent and whether they are being blocked by your phone carrier or email provider. Some carriers filter text messages aggressively, and some email providers send bank notifications to spam folders.

If you discover unauthorized charges on your account and did not receive an alert, report them to Bank of America when ready. You can dispute the charges even without an alert, though the process takes longer. The bank will investigate and typically reverse fraudulent charges within 10 business days if you report them promptly.

Frequently Asked Questions

Can I turn off fraud alerts from Bank of America?

No, fraud alerts cannot be disabled entirely. They are a core security feature of the account. You can change how you receive them—text, email, phone—and you can adjust the dollar threshold, but you cannot opt out of the system itself. If you are receiving too many alerts, lowering the threshold or changing your notification method may help.

What should I do if I get a fraud alert but I actually made the transaction?

Confirm it in the app or through the phone number in the alert. This tells the bank the transaction is legitimate and closes the alert. The charge will process normally. If you confirm it, the bank will not investigate further.

If I deny a transaction in a fraud alert, will I get my money back?

Yes, if the transaction is confirmed to be fraudulent. The bank freezes the charge when ready when you deny it, and after investigation, reverses it permanently. The money returns to your account. If the investigation finds the transaction was actually legitimate, the bank will re-post it and contact you to explain.

How long does a fraud investigation take after I report unauthorized charges?

Bank of America typically completes fraud investigations within 10 business days. During that time, the disputed amount is held and not available. Once the investigation concludes, the bank either reverses the charge or confirms it was authorized. You will receive written notice of the outcome.

Can Bank of America's fraud alerts prevent me from being a victim of identity theft?

Fraud alerts on your bank account catch unauthorized charges, but they do not prevent identity theft. If someone opens a credit card or loan in your name, the bank's alerts will not catch that. For identity theft protection, you need a credit freeze through the credit bureaus or identity theft monitoring services. The bank's alerts protect your existing account; they do not protect your credit profile.