Banking fraud is when someone uses deception to take money or information from a bank account that isn't theirs, or tricks a bank into moving money they have no right to.
The person committing the fraud might be a stranger, someone you know, a bank employee, or even a criminal organization. The method might be forging a check, stealing login credentials, creating a fake account in your name, intercepting a wire transfer, or dozens of other tactics. What ties them together is intent—the fraudster knows what they're doing is unauthorized and illegal.
Banking fraud differs from a mistake or a dispute. If you authorize a payment and later regret it, that's a dispute, not fraud. If a bank makes an error that costs you money, that's a bank error. Fraud is when someone deliberately deceives the bank or you to move money they shouldn't have access to.
Key Takeaways
- Banking fraud includes account takeover, check fraud, wire transfer fraud, and identity theft—all involving deliberate deception to move money without authorization.
- You are not responsible for fraudulent charges if you report them within the timeframes set by federal law, though the bank may investigate before refunding.
- The fastest way to stop ongoing fraud is to call your bank's fraud line when ready, not email or online chat, because phone calls create a timestamped record.
- Different types of fraud trigger different refund timelines and investigation procedures, ranging from 10 days to several months.
- Freezing your credit with the three major bureaus costs nothing and prevents a fraudster from opening new accounts in your name while you resolve the fraud.
The main types of banking fraud and how they work
Account takeover happens when a fraudster gains access to your existing bank account—usually by stealing your username and password, or by calling the bank and convincing them they are you. Once inside, they change the contact information, drain the account, or set up fraudulent transfers. This is one of the fastest-moving fraud types because the criminal already has access to real money.
Check fraud involves forging, altering, or counterfeiting checks. A fraudster might steal blank checks from your account, forge your signature, change the amount on a legitimate check you wrote, or create entirely fake checks using your account number. The check clears the bank, money leaves your account, and you discover it days or weeks later.
Wire transfer fraud occurs when a criminal tricks you into sending money to an account they control, or intercepts a wire instruction and redirects it. Unlike checks, wire transfers are usually irreversible once sent. A fraudster might pose as your employer, your accountant, a real estate agent, or someone else you trust to convince you to wire money when ready.
Identity theft in a banking context means a fraudster opens a new bank account, credit card, or loan in your name without your knowledge. They use stolen personal information—your Social Security number, address, date of birth—to pass the bank's verification. The account is real; you just never opened it.
Card fraud includes unauthorized charges on a debit or credit card. A fraudster might steal your physical card, use your card number online, or clone your card using a skimming device at an ATM or gas pump. Debit card fraud is riskier for you because the money leaves your account when ready, while credit card fraud is riskier for the card issuer.
What happens when you report banking fraud
When you call your bank and report fraud, the bank is required by federal law to investigate. The investigation timeline depends on the type of fraud and whether the fraudster is still accessing your account. If your account is actively compromised, the bank will usually freeze it within hours to stop further unauthorized activity.
For debit card fraud, federal law (Regulation E) gives you strong protection if you report it quickly. If you report unauthorized charges within two business days of discovering them, your liability is capped at $50. If you wait longer than two business days but report within 60 days, your liability can be up to $500. After 60 days, you may lose all protection. The bank must complete its investigation and refund you within 10 business days, though they can extend to 45 days if they need more time.
For account takeover and check fraud, the rules are less favorable. The bank has up to 30 days to investigate, and can take up to 90 days in some cases. You may not receive a refund until the investigation concludes. If the bank determines the fraud was your fault—for example, you wrote down your password on a sticky note—they may deny the claim entirely.
For wire transfer fraud, refunds are hardest to obtain. Once a wire leaves your bank, it is in another bank's system, and reversing it requires cooperation from that bank and the receiving account holder. If the money was sent to a fraudster's account, it may already be withdrawn or transferred elsewhere. The sending bank will try to recall the wire, but success is not may provide. This is why wire transfers are considered high-risk for fraud.
How to report fraud to your bank
Call your bank's fraud line when ready. Do not wait. Do not email. Do not use online chat. A phone call creates a timestamped record of when you reported the fraud, and that timestamp affects your liability and the bank's investigation timeline. Find the fraud number on the back of your card or on your bank's website—it is different from customer service.
When you call, have the following information ready: the date you discovered the fraud, the specific transactions that are fraudulent, the amount of money involved, and any details about how the fraud occurred if you know them. Tell the bank whether your card is still in your possession, whether you recognize the merchant or account the money was sent to, and whether you have already changed your password.
Ask the bank to freeze your account when ready if it is still active, and request a new card or account number. Ask them to send you a written summary of the fraud report and the investigation timeline. Get the name and direct number of the fraud investigator assigned to your case, and ask when you can expect an update.
After you hang up, follow up in writing. Send an email or letter to the fraud department restating what you reported by phone, including the date and time of your call and the name of the person you spoke with. This creates a paper trail if you need to dispute the bank's findings later.
Protecting yourself while the investigation is ongoing
Do not close the fraudulent account while the investigation is active. Closing it can complicate the bank's ability to trace the fraud and may be interpreted as you destroying evidence. Keep the account open and frozen until the bank tells you the investigation is complete.
Freeze your credit with Equifax, Experian, and TransUnion. A credit freeze costs nothing and prevents a fraudster from opening new accounts in your name while you are resolving the current fraud. You can place a freeze online at each bureau's website in minutes. A freeze does not affect your existing accounts or your credit score; it only stops new accounts from being opened without your permission.
If the fraud involved your Social Security number or personal information, consider placing a fraud alert on your credit file as well. A fraud alert lasts one year and tells lenders to verify your identity before opening new accounts. It is less restrictive than a freeze but offers some protection.
Monitor your bank and credit card statements closely during the investigation. If new fraudulent charges appear, report them when ready and document the dates. This shows the bank that the fraud is ongoing and may speed up their response.
What to do if the bank denies your fraud claim
Banks sometimes deny fraud claims, claiming the cardholder authorized the transaction or failed to protect their account information. If this happens, you have the right to dispute the bank's decision. Send a written dispute to the bank's compliance department within 30 days of receiving the denial. Include copies of your original fraud report, the bank's investigation summary, and any evidence that the transaction was unauthorized—such as proof you were in a different location when the charge occurred, or documentation that your password was compromised.
If the bank denies your dispute, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) or your state's banking regulator. The CFPB accepts complaints online at consumerfinance.gov and forwards them to the bank. The bank must respond within 15 days. A complaint does not may provide a refund, but it creates a record and may prompt the bank to reconsider.
If the fraud amount is small and the bank's denial stands, you may decide the time and cost of further dispute is not worth it. If the amount is large, consider consulting an attorney who specializes in consumer banking disputes. Some offer free initial consultations.
How banking fraud differs from other types of fraud
Banking fraud is distinct from wire transfer scams, romance scams, or investment fraud, even though those scams often involve banks. The difference is who is being deceived. In banking fraud, the bank itself is the target—the fraudster is tricking the bank into moving money or opening accounts. In a wire transfer scam, you are the target—the scammer tricks you into sending money to them, and the bank processes a legitimate transaction on your behalf.
This distinction matters for refunds. If you were scammed into sending a wire transfer, the bank did nothing wrong, and you have limited recourse. The bank will try to recall the wire, but if the money is already gone, it is gone. If the bank itself was defrauded—for example, someone forged a check using your account—the bank's insurance and fraud procedures protect you.
Similarly, if a fraudster opens a credit card in your name and runs up charges, that is identity theft and account fraud, and the card issuer is responsible for the charges. If a fraudster steals your existing credit card number and makes charges, that is card fraud, and your liability is capped at $50 under federal law. Both are serious, but the legal protections and investigation procedures differ.
Frequently Asked Questions
Can I get my money back if I was scammed into sending a wire transfer?
Probably not. If you authorized the wire transfer, even though you were tricked into doing so, the bank processed a legitimate transaction. The bank will attempt to recall the wire, but once the money reaches the receiving account and is withdrawn, recovery is unlikely. Wire transfer fraud is difficult to reverse, which is why wire transfers are considered high-risk for scams.
How long does a banking fraud investigation take?
For debit card fraud, the bank must complete the investigation within 10 business days, though they can extend to 45 days. For account takeover and check fraud, the bank has up to 30 days, with possible extensions to 90 days. For wire transfer fraud, there is no set timeline; it depends on whether the receiving bank cooperates and whether the money is still in the account.
Am I responsible for fraudulent charges if I didn't report them right away?
It depends on the type of fraud and how long you waited. For debit card fraud, if you report within two business days, your liability is capped at $50. If you wait longer than two business days but report within 60 days, your liability can be up to $500. After 60 days, you may lose all protection. For other types of fraud, the rules vary, so report as soon as you discover it.
What should I do if my bank says I authorized the fraudulent transaction?
Request a detailed explanation in writing. Ask the bank to provide evidence that you authorized it—such as the IP address, device, or location where the authorization occurred. If you can prove you were elsewhere or that your credentials were compromised, dispute the bank's decision in writing and escalate to the compliance department or file a complaint with the CFPB.
Does freezing my credit hurt my credit score?
No. A credit freeze does not affect your credit score or your existing accounts. It only prevents new accounts from being opened without your permission. You can lift the freeze temporarily if you need to open a new account, and you can remove it permanently at any time.