Yes, your money in a Marcus savings account is protected by federal insurance

A Marcus savings account is insured by the Federal Deposit Insurance Corporation (FDIC), a government agency that protects depositors when banks fail. This means if Marcus were to close tomorrow, the FDIC would reimburse you up to $250,000 per account holder, per bank. That $250,000 limit is per person at each bank — so if you have $250,000 at Marcus and $250,000 at another bank, both are fully covered.

Marcus is an online division of Goldman Sachs Bank USA, a real bank with a charter from the Office of the Comptroller of the Currency (OCC). It is not a fintech app or a money transfer service. Your deposits sit in an actual bank account subject to the same federal rules as any brick-and-mortar bank.

The practical safety question most people ask is different: can Marcus employees see my money, or can hackers steal it? The answer to both is no, for reasons explained below. But the FDIC insurance is the legal floor — the may provide that even if something goes very wrong at the bank itself, your money comes back.

Key Takeaways

  • The FDIC insures deposits up to $250,000 per person per bank, so balances under that amount are fully protected if the bank fails.
  • Marcus uses encryption and multi-factor authentication to prevent unauthorized access to your account, the same security tools used by larger banks.
  • Your login credentials and account number are not the same thing — even if someone gets one, they cannot access the other without additional verification.
  • Marcus does not hold your money in a way that is different from traditional banks; it is a bank, not a third-party service holding your funds.

How FDIC insurance actually protects your account

The FDIC insurance is automatic — you do not sign up for it or pay a fee. The moment you open a Marcus savings account, your deposits are covered. The $250,000 limit applies per depositor per bank, which means if you are the sole owner of the account, your balance up to $250,000 is insured. If you have a joint account with someone else, each person gets their own $250,000 of coverage.

The insurance covers the balance in your account on the day the bank fails, not the balance on the day you opened it. If you deposit $100,000 and it grows to $110,000 in interest, the full $110,000 is covered. If you have $300,000 in a Marcus savings account, the FDIC covers $250,000 and you would lose $50,000 in a bank failure — though bank failures are rare and the FDIC has never failed to pay out.

This protection exists because banks lend out most of the money deposited with them. The FDIC ensures that if a bank makes bad loans and runs out of money, depositors do not lose their savings. It is a backstop, not a daily security measure. For day-to-day safety, you need to understand how Marcus protects your account from unauthorized access.

How Marcus prevents unauthorized access to your account

Marcus requires a username and password to log in, and it uses encryption — a mathematical scrambling of data — to protect information traveling between your device and Marcus's servers. This means if someone intercepts your login attempt, they see gibberish, not your actual credentials. This is the same encryption used by banks, credit card companies, and any reputable financial website.

Marcus also offers multi-factor authentication, which means you can require a second form of proof before anyone can access your account. You can set it up so that even if someone has your password, they cannot log in without also providing a code sent to your phone or generated by an authenticator app. This is optional but worth turning on.

If you lose your phone or suspect someone has your password, you can change your password when ready from any device. Marcus also lets you set up alerts so you receive a notification every time someone logs into your account or makes a transfer. These tools let you catch unauthorized access quickly, before money leaves your account.

What happens if your account is compromised

If you notice unauthorized transfers from your Marcus account, contact Marcus when ready by phone or through your online account. Marcus is required by federal law (Regulation E) to investigate unauthorized transfers and return your money within a specific timeframe — usually 10 business days for a provisional credit while they investigate, and up to 45 days for a final decision.

The key is reporting it quickly. If you wait weeks to report fraud, Marcus may not be required to reimburse you, depending on the circumstances. Most people discover unauthorized activity through the alerts mentioned above, which is why setting them up is worth the two minutes it takes.

In practice, unauthorized access to savings accounts is rare because savings accounts do not have debit cards or check-writing privileges. Someone would need your login credentials and to pass multi-factor authentication to move money out. Checking accounts and debit cards carry more fraud risk because they are designed for frequent transactions.

The difference between bank safety and account security

Bank safety and account security are two separate things. Bank safety is about whether the bank itself is sound — whether it has enough capital, whether its loans are good, whether regulators trust it. The FDIC insurance and the OCC charter both signal that Marcus meets federal standards for safety. The OCC examines Marcus regularly to may support it is not taking excessive risks.

Account security is about whether your specific account is protected from theft. Encryption, multi-factor authentication, and fraud monitoring all work on this level. A bank can be perfectly safe (the FDIC would cover your deposits if it failed) but have weak account security (hackers could access your login). Marcus has both — it is a safe bank and it uses standard security practices.

One thing Marcus does not do is hold your money in a separate account or with a third party. Some fintech apps use this model, where your money sits at a partner bank and the app is just an interface. Marcus is the actual bank, so your money is there directly. This is simpler and means you have one relationship, not two.

What to watch for when using Marcus

The main risk with any online bank is phishing — fraudulent emails or texts that look like they are from Marcus but are actually from scammers trying to steal your login. Marcus will never ask you for your password in an email or text. If you receive a message asking you to "verify your account" or "confirm your information," do not click any links. Instead, go directly to Marcus.com in your browser and log in normally.

Another risk is using the same password at Marcus as you use at other websites. If a different website is hacked and your password is exposed, a scammer could try that password at Marcus. Use a unique password for Marcus, or use a password manager to generate and store different passwords for each site.

Finally, be cautious about who you tell your account number to. Your account number alone cannot be used to transfer money out of your account — someone would still need your login credentials and to pass multi-factor authentication. But it is still sensitive information, so do not share it unless you are sure you are dealing with Marcus or a trusted financial institution.

Frequently Asked Questions

What if I have more than $250,000 in my Marcus account?

The FDIC covers the first $250,000. Any amount above that is not insured. If you have more than $250,000, you could split it between Marcus and another bank to get full coverage at both, since the $250,000 limit is per person per bank. Some people also open a joint account with a spouse, which gives each person another $250,000 of coverage.

Does Marcus charge a fee if my account is hacked?

No. If unauthorized transfers occur and you report them promptly, Marcus must reimburse you under federal law. You are not liable for fraudulent transfers you did not authorize. Marcus does not charge you for investigating fraud or for the reimbursement process.

Is my money safer at Marcus or at a big bank like Chase?

Both are equally safe from a deposit insurance perspective — both are FDIC-insured up to $250,000. The main difference is that Marcus has no physical branches, so you cannot walk in and speak to someone in person. For account security, both use encryption and multi-factor authentication. The bigger difference is usually interest rates — Marcus typically pays higher rates on savings because it has lower overhead costs.

What if Marcus gets bought by another company?

Your FDIC coverage stays the same. If another bank acquires Marcus, your deposits remain insured up to $250,000. The acquiring bank would take over your account, but your money would not disappear and your coverage would not change. You would receive notice of any changes to terms or how to access your account.

Can Marcus see how much money I have or what I spend it on?

Marcus can see your account balance because it is their bank — they maintain the account. But Marcus employees do not have a reason to look at your account unless you contact them with a problem. Your savings account does not show spending patterns the way a checking account or credit card does, because you are not making frequent transactions. Marcus is also subject to privacy laws that limit how they can use your information.