An unfamiliar withdrawal, debit card purchase, or electronic transfer can be alarming, but acting quickly can limit further damage and make the dispute process easier. The right response depends partly on how the transaction occurred, but several steps apply broadly: contact the financial institution, secure the account, document the incident, and continue monitoring for additional activity. Understanding the timelines that apply to unauthorized electronic transfers is especially important because waiting too long can affect your protections.
Contact the Bank or Credit Union Immediately
Report the transaction as soon as you determine that you did not make or authorize it. For unauthorized electronic fund transfers, federal rules require financial institutions to investigate properly reported errors and correct confirmed errors within specified timeframes.
When contacting the institution, provide the transaction date, amount, merchant or recipient name shown on the account, and why you believe it is unauthorized. Ask what dispute process applies and whether written confirmation is required after an initial telephone report. Save any case or confirmation number the institution provides.
Pay Close Attention to Reporting Deadlines
How quickly you report the problem can affect your potential liability. If a debit card is lost or stolen, notifying the financial institution within two business days after discovering the loss can generally limit liability for unauthorized transactions to no more than $50. Waiting longer can increase the potential amount for which the consumer may be responsible.
Statements matter as well. If an unauthorized electronic withdrawal appears on a periodic statement, consumers generally should report it within 60 days after the statement is sent. Additional losses that occur after that period may receive less protection if the institution can show that timely notice could have prevented them. Treat an unfamiliar transaction as something to investigate promptly rather than waiting to see whether it happens again.
Secure the Account and Login Credentials
If there is any possibility that someone obtained your debit card information, PIN, password, or online banking credentials, secure those access points immediately. Follow the bank's instructions for replacing a compromised card or account number, and change online banking passwords and PINs where appropriate.
Use a strong password that is not reused on another account, and enable multifactor authentication if the financial institution provides it. If the incident appears connected to identity theft rather than a single merchant error, changing compromised credentials can help prevent additional unauthorized access. Identity-theft recovery guidance also recommends changing logins, passwords, and PINs for affected accounts.
Review the Entire Account for Related Activity
Do not stop after identifying one suspicious transaction. Review recent account history for smaller withdrawals, unfamiliar merchants, repeated debits, new transfers, or transactions that you might previously have overlooked. Fraud can involve several transactions rather than one large withdrawal.
Also check other accounts connected to the same credentials or financial institution. If the unauthorized transaction suggests that personal information may have been stolen, review your credit reports for accounts you do not recognize. Unfamiliar bank withdrawals and unexplained credit accounts can both be warning signs of identity theft.
Stop Recurring Debits When Necessary
Sometimes the problem involves a company continuing to debit an account after authorization was revoked, rather than a stolen debit card. Consumers have the right to revoke authorization for recurring automatic payments and can tell both the company and their bank or credit union that future withdrawals are no longer authorized.
A bank may also use a stop-payment order to prevent a specified future automatic debit. Keep in mind that stopping an automatic payment does not necessarily cancel the underlying contract or eliminate money legitimately owed. If the problem involves a membership, service, or loan, address both the payment authorization and the underlying agreement separately.
Keep Detailed Records of the Dispute
Document every step you take. Save screenshots or statements showing the unauthorized transaction, copies of dispute forms, emails, letters, and notes from telephone calls. Record the date, the name or department of anyone you spoke with, and any reference number associated with the case.
Written records are especially important if the institution asks you to confirm a telephone dispute in writing. In some situations involving electronic transfers, a bank that requests written confirmation may not have to provide temporary credit during the investigation if that confirmation is not supplied within the required period.
Consider Identity-Theft Protections if the Problem Is Broader
One unauthorized transaction does not always mean that your identity has been stolen. However, multiple unfamiliar accounts, changes to contact information, unknown credit applications, or fraud across several financial accounts may indicate a larger problem.
In that situation, consider placing a credit freeze with Equifax, Experian, and TransUnion. A freeze is free and can make it harder for someone to open new credit accounts in your name. You can also report identity theft through IdentityTheft.gov, which generates a recovery plan based on the information you provide.
Continue Monitoring After the Dispute Is Filed
Reporting the transaction is only the first step. Continue checking the affected account while the investigation is underway, particularly if the card number, login credentials, or automatic-payment information may have been compromised.
Review subsequent statements and confirm that any promised credits, reversals, or account changes actually occur. If new unauthorized transactions appear, report them separately rather than assuming the original dispute automatically covers them.
Act Quickly and Keep a Clear Paper Trail
An unauthorized bank transaction is easier to address when the response is immediate and organized. Contact the bank promptly, secure compromised credentials, review the account for additional activity, and preserve documentation of every conversation and dispute.
Just as importantly, understand that different transactions can carry different protections and deadlines. Electronic transfers, lost debit cards, unauthorized checks, and recurring ACH debits are not always handled the same way. Taking action quickly and following the financial institution's dispute process carefully gives you the best chance of stopping further losses and resolving the transaction successfully.