Signs that appear in your account statement or online banking

The clearest sign of identity theft in a checking account is a transaction you did not make. Look for withdrawals, transfers, or checks written to people or businesses you do not recognize. These show up in your statement or when you log into online banking — they are the most direct evidence that someone else has access to your account.

Other account-level signs include a sudden change in your balance that you cannot explain, pending transactions you did not authorize, or a notice that your account has been closed or frozen. Some people discover the theft when a check they wrote bounces because someone else emptied the account first. If you see any of these, contact your bank when ready — do not wait for the next statement.

Key Takeaways

  • Unauthorized transactions in your statement or online banking are the primary indicator of checking account identity theft.
  • Your bank is required to investigate disputed transactions and typically reverses them within 10 business days if you report them promptly.
  • Report the theft to your bank by phone first, then follow up in writing within 60 days of the statement showing the fraudulent activity.
  • File a report with the Federal Trade Commission at IdentityTheft.gov so you have an official record for creditors and law enforcement.
  • Place a fraud alert with the three credit bureaus to prevent the thief from opening new accounts in your name.

Warnings from your bank or third parties

Your bank may contact you directly if they detect suspicious activity. This can come as a phone call, email, or text asking you to confirm a transaction or verify your identity. If you receive this contact and you did not make the transaction, that is a warning sign. Do not ignore it or assume it is a scam — legitimate banks do reach out when they spot fraud.

You may also learn about the theft from a creditor, collection agency, or the IRS. For example, a credit card company might call about an account you never opened, or you might receive a notice that someone filed taxes using your Social Security number. These are indirect signs that your identity has been stolen, and they often mean your checking account was the entry point the thief used to gather more of your information.

What to do when ready after you discover the theft

Call your bank's fraud department right away — do not use the number on the back of your card if you suspect the card itself was compromised, because you might reach a fraudster. Instead, look up the bank's official customer service number on their website or your statement. Tell them which transactions are not yours and ask them to freeze or close the account.

Your bank is required by federal law to investigate any transaction you dispute. They must tell you within 10 business days whether they believe the transaction was fraudulent, and they must reverse it if you reported it within 60 days of the statement date. Ask the bank to issue you a new debit card and a new account number. Request written confirmation of the fraud report and the transactions they are investigating — you will need this for the next steps.

Filing a report with the Federal Trade Commission

After you contact your bank, go to IdentityTheft.gov and file a report with the Federal Trade Commission. This creates an official record that you are a victim of identity theft. The FTC does not investigate individual cases, but the report gives you a document you can show to creditors, banks, and law enforcement if the thief opens accounts in your name or causes other damage.

The FTC report also generates a recovery plan specific to your situation. It tells you which credit bureaus to contact, what letters to send, and what to monitor going forward. Keep a copy of the report and your case number — you may need to reference it for months or years if the thief's actions continue to surface.

Placing a fraud alert and monitoring your credit

Contact one of the three major credit bureaus — Equifax, Experian, or TransUnion — and request a fraud alert. You only need to contact one bureau; they are required to notify the other two. A fraud alert tells creditors to verify your identity before opening new accounts in your name, which makes it harder for the thief to cause further damage.

A fraud alert lasts one year and is free. After that, you can renew it if you wish. You can also request a credit freeze, which is stronger — it blocks creditors from seeing your credit report entirely unless you temporarily unfreeze it. A freeze also lasts until you remove it and is free for identity theft victims in most states.

Check your credit reports from all three bureaus at AnnualCreditReport.com, which is the only free, official source. Look for accounts you did not open, inquiries from creditors you did not contact, or other signs that the thief is using your identity. Report any fraudulent accounts to the bureau and the creditor when ready.

How long the investigation takes and what to expect

Your bank's investigation of the fraudulent transactions typically takes 10 to 30 days. During this time, the bank may provisionally credit your account while they gather evidence. Once they conclude the transaction was fraudulent, the credit becomes permanent and the thief's money is removed from your account.

If the thief used your account to write checks or set up automatic payments, those may take longer to reverse because they involve third parties. The bank will work with the recipient to recover the funds, but this can stretch into weeks or months. Stay in contact with your bank's fraud department and ask for updates every week or two.

The broader recovery from identity theft — closing fraudulent accounts, disputing false credit reports, and monitoring for new fraud — can take months or years. There is no fixed timeline because it depends on how much damage the thief did and how quickly creditors respond to your disputes. Many victims find it helpful to set a calendar reminder to check their credit reports every three months for the first year.

Frequently Asked Questions

Will I lose the money the thief withdrew from my account?

No. Federal law requires banks to reverse fraudulent transactions if you report them within 60 days of the statement date. Your bank covers the loss, not you. Report the theft as soon as you notice it to stay within this window.

What if the thief used my account to write checks?

Contact your bank when ready and ask them to stop payment on any checks you did not write. The bank can also flag your account so that checks written after a certain date are rejected. Notify the recipients of those checks in writing that the checks are fraudulent. This process takes longer than reversing electronic transactions, but the bank is still responsible for the loss.

Can the thief access my account again after I close it?

No, but they may have your personal information. Closing the account stops them from using that specific account number. However, if they have your Social Security number, address, or other identifying details, they could try to open a new account in your name. That is why the fraud alert and credit freeze are important — they make it harder for the thief to succeed a second time.

Do I need to file a police report?

You are not required to, but it can be useful. A police report creates another official record and may help if the thief's identity is discovered later. Some banks ask for a police report number when investigating fraud. If you decide to file one, do it at your local police department or online if your jurisdiction offers that option.

How do I know if the thief is still using my information?

Check your credit reports regularly — at least every three months for the first year after the theft. Look for new accounts, inquiries, or late payments you did not make. Set up account alerts with your bank so they notify you of any login attempts or transactions. Monitor your mail for bills or statements from accounts you did not open.