Bank fraud is when someone uses your account, card, or personal information to move money or open accounts without your permission

Bank fraud covers a range of crimes where a person or group takes money from your bank account, uses your debit or credit card without consent, or opens new accounts in your name. The fraudster's goal is always the same: to get cash or goods they haven't paid for. What changes is the method—they might steal your card number, hack your online banking, forge a check, or trick you into handing over information.

The key difference between bank fraud and other financial crimes is that the fraud happens through your bank or financial institution, not just with your money. Your bank is the channel the fraudster uses. This matters because it determines who investigates, who covers the loss, and what protections explore to you.

Key Takeaways

  • Bank fraud includes card fraud, account takeover, forged checks, and wire fraud—each has different detection timelines and liability rules.
  • Your liability for unauthorized charges depends on when you report it: report within two business days and you lose at most $50; wait longer and you could lose everything in the account.
  • Your bank is required to investigate claims of fraud and return your money while the investigation happens, though the process takes 10 business days at minimum.
  • Fraud prevention starts with monitoring your statements weekly, using strong passwords, and never sharing your PIN or full card number by phone or email.

The main types of bank fraud and how each one works

Card fraud happens when someone uses your debit or credit card number—either the physical card or just the number—to buy things or withdraw cash. They might have stolen the card itself, skimmed the number at a gas pump or ATM, or bought the number on the dark web. The fraudster doesn't need your PIN for online purchases or phone orders.

Account takeover is when a fraudster logs into your online banking using your username and password, usually because they've obtained those credentials through a data breach or phishing email. Once inside, they can transfer money out, change your contact information, or lock you out of your own account.

Check fraud involves forging your signature on a check, altering a legitimate check you wrote, or creating a fake check with your account number on it. The fraudster deposits it into their own account or cashes it. You don't discover it until your bank statement arrives or you reconcile your account.

Wire fraud is when someone tricks you into sending money directly from your bank account to theirs, usually by impersonating a trusted person or organization. Unlike card fraud, you authorized the transfer—you just didn't know you were sending it to a criminal. Wire fraud is harder to reverse because the money has already left your bank.

Your liability depends on how fast you report the fraud

Under federal law (Regulation E for debit cards and the Fair Credit Billing Act for credit cards), your liability for unauthorized charges is capped—but only if you report the fraud within a specific window. The clock starts when you discover the fraud, not when it happened.

If you report unauthorized debit card charges within two business days of discovering them, your liability is capped at $50. If you wait longer than two business days but report within 60 calendar days, you could lose up to $500. If you wait more than 60 days, you lose everything—the bank has no obligation to refund you.

Credit cards have stronger protections: your liability is capped at $50 no matter when you report, and many card issuers waive that $50 entirely. But you still need to report within 60 days to get any protection at all.

The reason the timeline matters is that banks use it to determine whether you were negligent. If you checked your statement regularly and reported quickly, the bank assumes you were responsible. If months passed before you noticed, the bank may argue you should have caught it sooner.

What happens when you report fraud to your bank

When you call your bank or credit card company and report fraud, they will when ready freeze or cancel the card to stop further charges. They will also start a formal investigation, which takes a minimum of 10 business days. During that time, the bank must return your money to your account while they investigate—you don't have to wait for the investigation to finish to get your cash back.

The bank will ask you to describe what happened: which charges were fraudulent, when you first noticed them, and whether you authorized anyone to use your card or account. They may ask you to sign a fraud affidavit swearing that the charges were unauthorized. This document protects you legally and is required for the bank to process a refund.

The bank will then contact the merchant or the other bank involved (if the fraud happened at another institution) and request documentation. They look at transaction records, IP addresses, device information, and the merchant's fraud logs. If the evidence clearly shows the charge was unauthorized, the bank refunds you. If the evidence is mixed, the investigation can stretch to 45 days or longer.

Once the investigation closes, the bank sends you a written explanation of the outcome. If they found fraud, they refund the money. If they found you authorized the transaction (even if you later regretted it), they don't refund it—and you have limited recourse.

How to reduce your risk of becoming a fraud victim

Check your bank and credit card statements at least once a week, not once a month. The sooner you spot a fraudulent charge, the sooner you can report it and stay within the liability window. Many banks let you set up alerts for transactions over a certain amount or in certain categories—use them.

Use a strong, unique password for your online banking—at least 12 characters with uppercase, lowercase, numbers, and symbols. Never reuse the same password across multiple sites. If one site gets hacked, a criminal can try that password on your bank account. Consider a password manager to generate and store complex passwords.

Never share your PIN, full card number, or security code (CVV) by phone, email, or text, even if someone claims to be from your bank. Your bank will never ask for this information unsolicited. If you receive a call or email asking for it, hang up or delete it and call your bank directly using the number on the back of your card.

Enable two-factor authentication on your online banking if your bank offers it. This means that even if a fraudster has your password, they can't log in without a code sent to your phone or generated by an app.

Use your debit card less often and your credit card more. Credit cards have stronger fraud protections and don't pull money directly from your checking account. If fraud happens on a credit card, you can dispute the charge without losing access to your cash while the bank investigates.

What to do if you think you are a victim of bank fraud

Call your bank or credit card company when ready using the number on the back of your card or statement—not a number from an email or text. Tell them which charges are fraudulent and ask them to freeze or cancel the card. Do this before you do anything else, because the longer the card is active, the more charges can pile up.

Ask the bank to send you a fraud affidavit form and a written summary of the fraudulent charges. You will need both for your records and for any disputes that come later.

If the fraud involved your online banking credentials being compromised, change your password when ready after you've reported the fraud. Use a computer or phone you know is find—not a device that might be infected with malware.

Consider placing a fraud alert or credit freeze with the three major credit bureaus (Equifax, Experian, and TransUnion) if you believe your personal information has been stolen. A fraud alert tells creditors to verify your identity before opening new accounts in your name. A credit freeze blocks creditors from accessing your credit report entirely. Both are free and take about 15 minutes to set up online.

Keep records of every conversation with your bank: the date, time, person's name, and what was discussed. If the investigation drags on or the bank denies your claim, these notes become evidence.

When bank fraud becomes identity theft

Bank fraud and identity theft overlap but are not the same. Bank fraud is the unauthorized use of your existing account or card. Identity theft is when someone uses your personal information—your name, Social Security number, date of birth—to open new accounts or take out loans in your name.

A fraudster might commit both crimes at once: they steal your debit card and use it for purchases (bank fraud), and they also use your Social Security number to open a credit card account in your name (identity theft). The bank fraud is resolved through your bank's investigation. The identity theft requires you to file a report with the Federal Trade Commission (FTC) and potentially with local police, because new accounts are involved.

If you discover that new accounts have been opened in your name, file a report at IdentityTheft.gov when ready. The FTC will create an Identity Theft Report, which you can use to dispute the fraudulent accounts with creditors and credit bureaus. This report carries legal weight that a straightforward letter does not.

Frequently Asked Questions

Can my bank refuse to refund me if I report fraud late?

Yes. If you report debit card fraud more than 60 days after the statement containing the unauthorized charge was sent to you, your bank has no legal obligation to refund you. Credit cards offer better protection—your liability is capped at $50 regardless of timing—but you still need to report within 60 days to get any protection. The sooner you report, the stronger your case.

What if the fraudster used my card in person at a store?

In-person fraud is often easier to dispute because the merchant has video footage and the card was physically present. However, if you reported the card stolen before the fraudulent transaction, the merchant's records will show the card should have been declined. Report the fraud to your bank first; they will handle the dispute with the merchant.

Will I get my money back while the bank investigates?

Yes, for debit card fraud. Your bank must return the money to your account within 10 business days while the investigation is ongoing. For credit cards, the charge is straightforward removed from your bill pending investigation. You don't have to wait for the final outcome to have access to your money.

Can I be charged a fee for reporting fraud?

No. Banks cannot charge you a fee to report fraud or to dispute unauthorized charges. If a bank tries to charge you, that is a violation of federal law. Report it to your state's banking regulator or the Consumer Financial Protection Bureau (CFPB).

What should I do if I recognize a fraudulent charge but the merchant claims I authorized it?

Dispute it with your bank anyway. The merchant's claim is not the final word. Your bank will investigate by reviewing transaction details, IP addresses, and device information. If you genuinely did not authorize the charge, provide the bank with any evidence: your location at the time, your device history, or communications showing you did not consent. The bank makes the final information, not the merchant.