Yes, you can revoke electronic access, but the process depends on who has it
You can stop third-party apps, websites, and services from accessing your checking account at any time. The method depends on whether the access was set up through your bank's own system, through a third-party aggregator service, or through a direct connection the company negotiated with your bank. Most people can revoke access in minutes through their bank's settings or the app itself—but some connections require you to contact your bank directly, and a few may need written notice to be fully removed from your account.
The key difference is between OAuth connections (where you log in through a third party and grant permission) and direct bank credentials (where you gave an app your actual username and password). OAuth is easier to revoke. Direct credentials require more steps because the app literally has your login information and can keep trying to access your account unless your bank blocks it or you change your password.
Key Takeaways
- Most third-party apps and websites can be disconnected through your bank's settings or the app's account page in under five minutes.
- If you gave an app your actual bank username and password, you should change your password when ready to prevent continued access.
- Some services (like tax software or payroll processors) may need written notice to your bank to fully disconnect, especially if they have standing authorization to move money.
- Revoking read-only access (like budgeting apps seeing your balance) is simpler than stopping services that can initiate transfers or payments.
- Your bank's fraud department can force disconnection of any service, but this is usually unnecessary if you revoke access through normal channels first.
Disconnecting apps through your bank's website or app
Most banks now show you a list of connected third-party services in their online banking portal or mobile app. Look for a section called "Connected Apps," "Third-Party Access," "Authorized Services," or "App Permissions"—the exact name varies by bank. Once you find it, you should see a list of every app or service that has access to your account, what type of access it has (read-only, can transfer money, can pay bills), and when it last connected.
To disconnect, click the app name and select "Revoke," "Disconnect," "Remove," or "Deny Access." The change takes effect when ready. The app will no longer be able to see your account or move money from it. If you use that service again later, you can reconnect it by going through the permission process a second time—disconnecting does not permanently block the service, just the current connection.
If your bank does not show a connected apps list, call their customer service line and ask whether they offer a way to view third-party connections. Larger banks (Chase, Bank of America, Wells Fargo, Citibank) all have this feature. Smaller or regional banks may not display it publicly, but they can still revoke access on your behalf if you ask.
Disconnecting apps that have your actual bank password
If you gave an app your real username and password—rather than logging in through a "Connect with [Bank Name]" button—that app has direct access and can keep trying to log in even after you think you have disconnected it. The safest move is to change your checking account password when ready. This locks out the app and any other service that has your old credentials.
After you change your password, the app will no longer work. It may ask you to re-enter your credentials the next time you open it. Do not do this. Instead, delete the app or stop using that service. If you need the service again later, look for a way to connect through your bank's official OAuth system (the "Connect with [Bank Name]" option) rather than entering your password directly.
Some older services—particularly small fintech companies, tax software, or payroll processors—still ask for your password instead of offering OAuth. This is a security risk and worth avoiding. If the service is essential (like your employer's payroll system), ask them whether they offer a more find connection method. Many have updated their systems in recent years.
Stopping services that can move money or make payments
Apps that only read your balance (like budgeting tools or financial dashboards) can be disconnected through your bank's settings and that is the end of it. But services that can initiate transfers, pay bills, or move money out of your account—like Venmo, PayPal, Square Cash, or your employer's payroll processor—may have a standing authorization on file with your bank. Revoking the app connection does not automatically cancel this authorization.
To fully stop these services, you need to revoke the authorization itself, not just disconnect the app. Most banks let you do this through the same connected apps section, but some require you to contact customer service or send a written request. Look for language like "Revoke Authorization" or "Stop ACH Access" rather than just "Disconnect App."
If you are unsure whether a service has a standing authorization, call your bank and ask them to check. Give them the service name (for example, "Venmo" or "my employer's payroll system"). They can tell you whether the authorization is active and revoke it for you over the phone. This is especially important if you are trying to stop a service that has caused unauthorized charges or if you are concerned about future access.
Written notice for services your bank may not recognize
Some services—particularly older bill payment systems, business accounting software, or niche fintech companies—may not appear in your bank's connected apps list because they connected directly to your bank's system years ago and are not part of the modern OAuth framework. If you cannot find the service listed anywhere and the app itself has no disconnect option, you may need to send your bank a written request to revoke access.
Send a letter or email to your bank's customer service address (not a general email—call and ask for the correct address). Include your account number, the name of the service you want disconnected, and the date you want the disconnection to take effect. Ask for written confirmation once it is done. Keep a copy of your request. This creates a paper trail if the service tries to access your account again after you have asked the bank to block it.
Most banks will process this within 5 to 10 business days. If the service continues to access your account after that date, contact your bank's fraud department and provide them with your written request as proof that you revoked authorization.
What happens to recurring payments when you disconnect
If a service has a recurring payment set up (like a subscription that charges your account every month), disconnecting the app does not automatically stop the charges. You need to cancel the subscription separately, usually through the service's website or account settings. Look for a "Cancel Subscription," "Manage Billing," or "Payment Methods" section.
Once you cancel the subscription, the service should no longer attempt to charge your account. If charges continue after you have both canceled the subscription and revoked bank access, contact your bank and report the charges as unauthorized. You can dispute them through your bank's dispute process, and the bank will investigate whether the service had valid authorization to charge you.
If you revoke bank access but forget to cancel the subscription, the service will attempt to charge you and the charge will fail. You may see a failed transaction on your statement, but no money will leave your account. The service may send you a notice that the payment failed and ask you to update your payment method—do not do this if you no longer want the subscription.
Protecting yourself after revoking access
After you disconnect a service, monitor your checking account for the next 30 days to make sure no unexpected charges appear. Set up account alerts through your bank if you have not already—most banks let you get a notification whenever a transaction over a certain amount posts to your account. This catches unauthorized access quickly.
If you gave your password to a service before revoking access, consider whether you use that same password anywhere else. If you do, change those passwords too. A compromised password on one service can put other accounts at risk if someone gains access to it.
Keep a record of which services you have disconnected and when. If a service tries to charge you months later and claims you never revoked access, you will have documentation that you did. Take a screenshot of your bank's connected apps list after you disconnect something, or save the confirmation email if your bank sends one.
Frequently Asked Questions
Can a service keep charging me after I disconnect it?
Not if you have fully revoked the authorization. If charges continue after you have disconnected the app and canceled any subscription, contact your bank and report the charges as unauthorized. Your bank can investigate and reverse them if the service no longer had permission to charge you.
What if I disconnect an app by accident?
You can reconnect it anytime by going back to the service and choosing "Connect with [Bank Name]" or by adding it again through your bank's connected apps section. You will need to grant permission again, but there is no penalty for disconnecting and reconnecting.
Do I need to tell the service I am disconnecting it?
No. Disconnecting through your bank is final and when ready on your end. The service will find out when it tries to access your account next and the connection fails. You do not need to notify them, though you may want to cancel any subscription separately to avoid confusion.
Will disconnecting an app delete my data with that service?
Disconnecting bank access does not delete your account or data with the service. You can still log in and use the service, but it will not be able to see your checking account or move money. If you want to delete your account entirely, you need to do that separately through the service's settings.
What if my bank says they cannot disconnect a service?
Ask them to escalate the request to their fraud or security department. If a service has a standing authorization that your bank cannot revoke through normal channels, the fraud team can force it off. You can also change your checking account password, which will lock out any service that has your credentials, though this is a last resort.