The four ways someone can draw money from your account
Money leaves your checking account through four mechanisms: you authorize it yourself, you give someone else written permission to do it, the bank removes it on a court order, or fraud happens. The first two are the most common. The third is legal and happens without your consent. The fourth is a crime, but understanding how it occurs helps you prevent it.
Each route moves money differently and leaves different traces. Knowing which one is happening to your account tells you what to do next.
Key Takeaways
- Checks, debit cards, and ACH transfers all pull money from your account, and you control who can use each one by deciding who has access to them.
- A power of attorney or authorized signer on your account can withdraw money just as you can, with no additional permission needed from you each time.
- Banks can freeze or remove funds to cover overdrafts, unpaid fees, or court judgments without asking your permission first.
- Unauthorized withdrawals through stolen cards, hacked accounts, or forged checks are fraud and should be reported to your bank and the police within 60 days.
- Your liability for unauthorized transactions depends on how quickly you report them and what type of transaction it was.
Withdrawals you authorize directly
When you write a check, swipe a debit card, or set up a bill payment online, you are authorizing the withdrawal. The money moves from your account to the recipient's account or business. You control the timing and the amount. The bank processes it based on your instruction.
Checks take the longest to clear—typically three to five business days from when the recipient deposits them, though the money can be held longer if the check is large or the receiving bank is slow. Debit card transactions usually post within one to three business days. ACH transfers (the electronic system used for bill payments and direct deposits) typically take one to two business days, though some banks offer same-day ACH for an extra fee.
If you lose a checkbook or a debit card, contact your bank when ready. For checks, ask the bank to flag the account so deposits of checks from that book are rejected. For debit cards, the bank will cancel the card and issue a replacement, usually within five to ten business days.
Withdrawals by someone with legal permission
A power of attorney is a legal document that gives another person the right to act on your behalf. If you sign a power of attorney naming someone as your agent, that person can withdraw money from your account without asking you each time. They do not need your permission for individual transactions. The bank treats them as if they were you.
A joint account holder or authorized signer has the same access. If your account lists another person's name on the signature card, that person can withdraw funds, write checks, and use the debit card. Again, no additional permission is needed for each transaction.
These arrangements are common for caregivers, spouses, or adult children managing finances for an aging parent. The risk is that the person with access can withdraw money for their own use, and the bank will not stop them. If you suspect misuse, contact your bank and ask about freezing the account or removing the person's access. You may also need to file a police report if the withdrawals were made without your knowledge.
Bank-initiated withdrawals without your permission
Your bank can remove money from your account without asking you first in three situations: to cover overdrafts, to pay fees you owe the bank, or to satisfy a court judgment against you.
Overdraft coverage means the bank pays a check or debit card transaction even though you do not have enough money in the account. The bank then removes the overdraft fee (typically $25 to $35 per transaction) from your account. Some banks also charge a daily fee if the account stays negative. You authorized this when you opened the account or agreed to overdraft protection.
Judgment liens occur when you lose a lawsuit—for unpaid credit card debt, medical bills, or other obligations. The court orders your bank to freeze your account and send money to the creditor. The bank must follow the court order. You receive notice of the judgment, but the bank does not ask your permission to comply with it. If you believe the judgment is wrong, you must challenge it in court, not with the bank.
Setoff rights allow a bank to take money from your account to cover a debt you owe to that same bank. If you have a loan or credit card with the bank and you fall behind, the bank can withdraw funds from your checking account without a court order. Federal law limits this for certain accounts (like Social Security deposits), but the bank can still do it for other funds in the account.
Unauthorized withdrawals and fraud
If someone withdraws money from your account without your permission and without legal authority, it is fraud. This happens through stolen debit cards, hacked online banking credentials, forged checks, or fraudulent ACH transfers set up in your name.
Your liability depends on how quickly you report it. If you report an unauthorized debit card transaction within two business days, your liability is capped at $50. If you wait more than 60 days, you could lose the entire amount. For unauthorized ACH transfers and checks, you have 30 days to report them, though some banks extend this window. Report fraud to your bank when ready by phone, then follow up in writing.
The bank will investigate and typically refund the money while the investigation is underway. Keep records of all communications. If the fraud involved a stolen card or hacked account, ask the bank to issue a new card or reset your online banking password. File a police report as well, especially if the amount is large or the fraud is ongoing.
How to prevent unauthorized access
Do not share your debit card PIN or online banking password with anyone, including bank employees. The bank will never ask for your password. Use a unique, strong password for your online banking account—at least 12 characters with uppercase, lowercase, numbers, and symbols.
Enable two-factor authentication if your bank offers it. This requires a second verification step (usually a code sent to your phone) before anyone can log in or change account settings. Review your account statements weekly, not monthly. The sooner you spot an unauthorized transaction, the sooner you can report it and limit your liability.
If you give someone a power of attorney or add them as an authorized signer, be specific about what they can do. Some banks allow you to set limits—for example, authorizing someone to withdraw up to $500 per day but not to close the account or change the password. Ask your bank what restrictions are available.
What to do if you find unauthorized withdrawals
Call your bank when ready. Do not wait for a statement. Explain which transactions are unauthorized and when you first noticed them. The bank will place a temporary hold on the account while investigating. Ask for a case number and the name of the investigator assigned to your case.
Write a letter to the bank within 10 days of the call, describing each unauthorized transaction, the date you discovered it, and the date you reported it. Include copies of statements showing the fraudulent activity. Send the letter certified mail so you have proof of delivery.
If the bank denies your claim, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) or your state's banking regulator. The CFPB accepts complaints online at consumerfinance.gov. Include copies of all correspondence with the bank and your evidence of the fraud.
Frequently Asked Questions
Can my bank freeze my account without telling me?
Yes, if there is a court order or if the bank suspects fraud. The bank must notify you within one business day of the freeze. If the freeze is due to a judgment, you receive a copy of the court order. If it is due to suspected fraud, the bank will explain why when you call.
If someone has my debit card number but not the physical card, can they use it?
Yes. They can make online purchases or phone purchases using just the card number, expiration date, and CVV. They cannot use it at an ATM or in a store without the physical card. Report the number stolen when ready and ask for a new card.
What is the difference between a power of attorney and being added to someone's account?
A power of attorney is a separate legal document that gives someone authority to act on your behalf. Being added to an account means your name appears on the account itself at the bank. Both allow the person to withdraw money, but a power of attorney can expire or be revoked more easily, while removing someone from an account requires a trip to the bank or a written request.
Can my employer withdraw money from my checking account?
Only if you authorize it in writing. Employers can set up payroll direct deposit with your permission, and they can deduct court-ordered child support or wage garnishments. They cannot straightforward take money from your account without a court order or your written consent.
How long does it take to get my money back after reporting fraud?
The bank must provisionally refund the money within one to ten business days while investigating. A full refund typically comes within 45 days. If the bank finds evidence that you authorized the transaction or were negligent (like sharing your password), they can deny the refund.