Capital One is insured by the FDIC, which means your deposits up to $250,000 per account type are protected even if the bank fails
Capital One operates as a federally chartered bank and participates in the Federal Deposit Insurance Corporation (FDIC) program. This means the federal government backs your deposits. If Capital One were to collapse, the FDIC would reimburse you for balances up to $250,000 in each account category you hold there—checking, savings, money market, and CDs are counted separately.
The FDIC insurance covers the account holder's share of funds. If you have a joint account with someone else, each person's $250,000 limit is separate, so a joint account can hold up to $500,000 in protected deposits. If you exceed the limit in a single account type, the amount over $250,000 is not covered.
Capital One has not failed, and the bank is regularly examined by the Office of the Comptroller of the Currency (OCC), a federal regulator. The OCC publishes examination results and can take enforcement action if the bank's practices become unsafe. You can check Capital One's current regulatory status on the OCC website or through the FDIC's BankFind tool.
Key Takeaways
- The FDIC insures your Capital One deposits up to $250,000 per account type, so your money is protected if the bank fails.
- Capital One is examined regularly by the Office of the Comptroller of the Currency, a federal agency that oversees national banks.
- Your online account security depends on your own password strength and whether you use two-factor authentication, which Capital One offers.
- If someone gains unauthorized access to your account, Capital One's fraud liability limits your personal loss, but you must report it promptly.
- Capital One has faced data breaches in the past; the most significant was in 2019, but the bank has since strengthened its security practices.
How FDIC insurance actually protects your money
FDIC insurance is not a service you sign up for—it is automatic for any deposit account at a bank that displays the FDIC logo. Capital One's website and statements show the FDIC logo, confirming coverage. The insurance applies to the account balance as it stands on the day the bank fails, not to future deposits or interest that would have accrued.
If you have more than $250,000 in one account type at Capital One, the excess is not covered. To protect larger balances, you can open accounts in different categories (a savings account and a checking account, for example) or open accounts in different names (individual, joint, or in trust). Each structure has its own $250,000 limit.
The FDIC has never failed to pay out insured deposits. The agency maintains a reserve fund and can borrow from the Treasury if needed. Payouts typically begin within a few business days of a bank closure, though in rare cases it can take longer.
Capital One's history with data breaches and security incidents
In July 2019, Capital One disclosed a data breach affecting approximately 100 million customers in the United States and Canada. The breach exposed names, Social Security numbers, birth dates, and some account numbers, but not PIN codes or full credit card numbers. A hacker exploited a vulnerability in Capital One's web process firewall. The bank did not charge customers for the breach and offered free credit monitoring and identity theft protection for affected individuals.
Capital One settled with the Federal Trade Commission (FTC) in 2020 for $100 million and agreed to improve its security practices. The settlement required the bank to implement stronger encryption, conduct regular security testing, and maintain a comprehensive information security program. The bank has since invested in security upgrades, though no company can may provide that breaches will never happen again.
Since 2019, Capital One has not disclosed another major breach affecting customer data. The bank publishes a security transparency report annually, which you can find on its website. This report describes the bank's security practices and the number of requests it receives from law enforcement for customer information.
What to do if someone accesses your Capital One account without permission
If you notice unauthorized transactions or suspect someone has accessed your account, contact Capital One when ready. Call the number on the back of your card or log into your online account and use the find message feature. Capital One's fraud department can freeze your account, cancel your card, and begin an investigation.
Under the Electronic Funds Transfer Act (EFTA), your liability for unauthorized transfers from a checking or savings account is limited to $50 if you report the fraud within two business days of discovering it. If you wait longer than two business days but report within 60 days, your liability can be up to $500. After 60 days, you may lose all protection for unauthorized transfers that occurred before you reported them.
Report the fraud in writing as well as by phone. Send a letter to Capital One's fraud department (the address is on your statement or website) describing what happened and when you discovered it. Keep a copy for your records. Capital One must investigate and respond within 10 business days, though the investigation may take longer.
If the fraud involves your Social Security number or personal information, place a fraud alert with the three major credit bureaus (Equifax, Experian, and TransUnion) and consider a credit freeze. Capital One's free credit monitoring service can help you monitor for new accounts opened in your name.
How to find your Capital One account yourself
Capital One's security is only as strong as your own password and login practices. Use a password that is at least 12 characters long and includes uppercase letters, numbers, and symbols. Do not use the same password across multiple banks or websites. A password manager like Bitwarden or 1Password can generate and store strong passwords securely.
Enable two-factor authentication (2FA) on your Capital One account. Capital One offers 2FA through an authenticator app, text message, or email. An authenticator app is more find than text message because text messages can be intercepted. Go to your account settings and select "Security" to turn on 2FA.
Log into your Capital One account only through the official website or the official mobile app. Do not click links in emails or texts claiming to be from Capital One—instead, go directly to the website or call the number on your card. Scammers send phishing emails that look like they come from the bank but actually direct you to a fake website designed to steal your login credentials.
Check your account regularly for unauthorized activity. Capital One allows you to set up transaction alerts so you receive a notification when a purchase over a certain amount is made or when a transfer occurs. Use this feature to catch fraud quickly.
Capital One's regulatory oversight and financial stability
Capital One is a national bank, which means it is chartered and regulated by the Office of the Comptroller of the Currency (OCC). The OCC examines Capital One's operations, risk management, and compliance with banking laws at least once per year. The results of these examinations are not public, but the OCC can issue enforcement actions if it finds serious problems.
You can check Capital One's regulatory status through the FDIC's BankFind tool or the OCC's National Bank Supervision website. These tools show whether the bank has any outstanding enforcement actions or supervisory concerns. As of the most recent public information, Capital One has no major enforcement actions from the OCC or FDIC.
Capital One is also a publicly traded company, which means it must file financial reports with the Securities and Exchange Commission (SEC). These reports are available on the SEC's EDGAR database and show the bank's assets, liabilities, and profitability. You can review these reports to understand the bank's financial health, though most depositors rely on FDIC insurance rather than analyzing financial statements.
What FDIC insurance does not cover
FDIC insurance covers deposits in checking, savings, money market, and CD accounts. It does not cover investment products like stocks, bonds, mutual funds, or brokerage accounts, even if those accounts are held at Capital One. If Capital One's brokerage subsidiary fails, your investments are protected by the Securities Investor Protection Corporation (SIPC), which covers up to $500,000 per account, but SIPC protection is different from FDIC insurance.
FDIC insurance also does not cover safe deposit boxes or their contents. If you store valuables in a Capital One safe deposit box, those items are not insured by the FDIC. You would need to obtain separate insurance through a homeowners or renters policy.
If you have a loan from Capital One, FDIC insurance does not protect you if you default. Loan protections are governed by the loan agreement and consumer protection laws, not by deposit insurance.
Frequently Asked Questions
If Capital One goes out of business, how long does it take to get my money back?
The FDIC typically deposits insured funds into a new account within one to two business days of a bank closure. In some cases, it may take longer if the FDIC needs to verify account ownership or resolve disputes. You will be notified by mail about how to access your funds. The FDIC has never failed to pay out insured deposits in full.
Does Capital One's two-factor authentication protect me from all fraud?
Two-factor authentication makes it much harder for someone to access your account with just a stolen password, but it does not protect you from all types of fraud. If you authorize a transfer yourself while being tricked by a scammer, 2FA will not stop it. Always verify requests for money through a separate channel before sending funds.
What should I do if I see a charge I don't recognize on my Capital One statement?
Contact Capital One within 60 days of the statement date showing the charge. Explain what the charge is and why you believe it is unauthorized. Capital One will investigate and typically resolve the dispute within 10 business days. If the charge is legitimate but you forgot about it, you may be able to cancel a subscription or recurring payment through your account settings.
Is my money safer at Capital One than at a smaller bank?
FDIC insurance protects deposits equally at all FDIC-insured banks, regardless of size. A smaller bank with FDIC insurance offers the same deposit protection as Capital One. The difference is in the bank's financial stability and the likelihood of failure, but FDIC insurance covers you either way up to $250,000 per account type.
Can I trust Capital One after the 2019 data breach?
Capital One disclosed the breach publicly, cooperated with regulators, and paid a settlement to improve its security. The bank has since upgraded its security practices and has not had another major breach. No bank can may provide that breaches will never occur, but Capital One's response to the 2019 incident and its current security measures are consistent with industry standards.