What to Do About an Unauthorized Bank Transaction

Noticing a transaction on your bank account that you don’t recognize — whether it’s a transfer, a card charge, or a withdrawal — can be stressful. This guide explains, in general terms, what an unauthorized transaction is, what steps you can take, and where the process is governed under federal consumer protection rules. It doesn’t replace your bank’s specific procedures or a review of your account agreement, and it isn’t personalized legal or financial advice.

What Counts as an Unauthorized Transaction

An unauthorized transaction is generally one made without your permission — for example, someone used your card, account number, or login information without your knowledge, or a transfer was made that you didn’t initiate or approve. This is different from a transaction you authorized but are unhappy with, such as a purchase where the product or service didn’t meet your expectations — that situation typically follows a different process with your bank or card issuer.

It’s also worth understanding which rules apply to your specific type of transaction. Regulation E — the main federal rule discussed in this guide — specifically covers electronic fund transfers, such as debit card transactions, ATM withdrawals, direct deposits, and transfers made through banking apps or ACH. Other payment methods, like wire transfers or paper checks, are generally governed by different rules and by your bank’s own policies, so if your situation involves one of those methods, it’s worth asking your bank directly which process and protections apply.

Step 1: Confirm the Transaction Is Actually Unauthorized

Before reporting a transaction, it can help to check a few things first: whether it matches a subscription or automatic payment you forgot about, whether a family member with access to the account made it, or whether the merchant name on the statement looks different from what you expect even though it corresponds to a purchase you did make. Our guide on how to read a bank statement can help you review these details carefully before deciding a transaction is unauthorized.

Step 2: Contact Your Bank as Soon as Possible

If you determine the transaction wasn’t authorized, contact your bank or card issuer as soon as you can, using the phone number on the back of your card or listed on your bank’s official app or site — not a number from a text message or email you weren’t expecting. Reporting promptly matters: federal rules, including Regulation E for electronic fund transfers, set out specific protections and liability limits for consumers, and how quickly you report the transaction can affect those protections. Because the exact timeframes and limits can depend on the type of transaction and your specific account agreement, it’s worth reviewing them directly with your bank and with Regulation E rather than relying on a general estimate.

Step 3: Ask About the Dispute and Investigation Process

Once you report the transaction, your bank generally opens an investigation. Ask directly what the process involves for your specific situation: whether you’ll receive provisional credit while the investigation is ongoing, what documentation you may need to provide, and approximately how long the review is expected to take. These details can vary by bank and by the type of transaction, so it’s best to get this information directly from your bank rather than assuming it matches another situation you’ve heard about.

Step 4: Freeze or Replace Compromised Cards or Credentials

If the unauthorized transaction suggests your card, account number, or login credentials may be compromised, ask your bank about freezing or replacing the card and updating your online banking password. If you believe your identity — not just a single card — may have been used without your permission, the Federal Trade Commission’s IdentityTheft.gov provides a process for reporting and recovering from identity theft.

Step 5: Keep a Record of Everything

Save the date and time you noticed the transaction, the date you reported it, the name of any representative you spoke with, any reference or case number provided, and copies of related statements or confirmations. This record can be useful if you need to follow up on the investigation or if a dispute takes longer than expected.

Step 6: Follow Up If the Investigation Takes Time

If you don’t hear back within the timeframe your bank gave you, it’s reasonable to follow up directly, referencing your case number. If you believe your bank isn’t handling the situation according to its obligations under federal law, you can also file a complaint with the Consumer Financial Protection Bureau.

How This Differs From a Purchase You’re Unhappy With

It’s worth distinguishing an unauthorized transaction from a situation where you made a purchase yourself but are dissatisfied with the product, service, or a merchant’s billing practice. That second situation is usually handled as a billing dispute rather than an unauthorized transaction report, and the process and protections that apply can be different. If you’re unsure which situation applies to you, your bank can help clarify which process fits your case.

Common Mistakes When Handling an Unauthorized Transaction

Waiting to Report It

Delaying a report, even by a few days, can affect the protections available to you under federal rules and your bank’s own policies.

Sharing Verification Codes During the Process

Scammers sometimes pose as bank representatives after a fraud incident to “help” resolve it, asking for verification codes. Legitimate bank staff generally won’t ask you to share a one-time code sent to your phone.

Not Reviewing Recent Automatic Payments First

Confusing a forgotten subscription or automatic payment with an unauthorized transaction can slow down the process. Our guide on automatic debits and recurring payments can help you review this before reporting.

Not Keeping Records of the Report

Without a case number or a record of when you reported the issue, it can be harder to follow up if the investigation takes longer than expected.

Frequently Asked Questions

What should I do first if I see a transaction I don't recognize?

Review your recent statement and automatic payments to confirm it is actually unauthorized, then contact your bank directly using the phone number on your card or its official app or site.

Does it matter how quickly I report an unauthorized transaction?

Yes. Federal rules, including Regulation E, set out protections and liability limits that can depend on how promptly you report the transaction. Reviewing the specifics with your bank as soon as possible is recommended.

Will I get my money back while the bank investigates?

This depends on your bank's process and the type of transaction. Some banks provide provisional credit during an investigation, but you should ask your bank directly what applies to your specific case.

Is an unauthorized transaction the same as being unhappy with a purchase?

No. An unauthorized transaction is one you did not approve at all, while a billing dispute involves a purchase you made but are unhappy with. These generally follow different processes with your bank.

What if my bank doesn't resolve the issue?

If you believe your bank isn't handling the situation according to its obligations under federal law, you can file a complaint with the Consumer Financial Protection Bureau.

Should I share a verification code if someone calls about the fraud report?

Generally, no. Legitimate bank representatives typically don't need you to share a one-time verification code sent to your phone. Treat unexpected requests for these codes as a warning sign.

Next Steps

To help catch unauthorized activity earlier, see our guides on how to read a bank statement and current balance vs. available balance. If the unauthorized activity is connected to a money transfer scam, see our guide on how to avoid money transfer scams from the U.S..

---

This article is for educational purposes and does not constitute personalized financial or legal advice. Dispute processes, timeframes, and liability protections can vary by bank, account type, and transaction; confirm the specifics directly with your bank and with official resources like the Consumer Financial Protection Bureau.