Yes, but only if you give them permission — and you can revoke it

Someone can transfer money from your bank account only if you have explicitly authorized them to do so. This might happen through a shared account, a power of attorney, a payment app you've linked to your account, or a standing instruction you've set up. The key word is authorization: you must have agreed to it, either in writing or through the bank's system.

If someone transfers money without your permission, that is theft. Your bank is required to investigate and return the funds under federal law. But the process takes time, and prevention is simpler than recovery.

This guide explains the legitimate ways someone can access your account, how to spot unauthorized access, and what to do if money disappears.

Key Takeaways

  • A joint account holder, authorized representative, or anyone you've linked to a payment app can transfer your money if you set it up that way.
  • You can revoke access at any time by contacting your bank, removing the person from the account, or unlinking the app.
  • If someone transfers money without your permission, call your bank when ready and file a fraud report — federal law requires them to investigate.
  • Unauthorized transfers from debit cards or ACH (automatic bank transfers) must be reported within 60 days to preserve your legal protection.
  • Shared accounts and power of attorney documents give someone broad access; use them only with people you trust completely.

The four ways someone can legally transfer your money

Joint account ownership is the broadest form of access. If your name and another person's name are both on the account, either of you can withdraw or transfer all the money without asking the other. Banks treat both owners as having equal rights. This is common between spouses, parents and adult children, or business partners.

Power of attorney is a legal document that names someone to act on your behalf. A financial power of attorney lets that person transfer money, pay bills, and manage investments as if they were you. This is often used when someone is ill, aging, or unable to manage finances themselves. The document specifies what powers the person has and when those powers end.

Authorized user or representative is a narrower arrangement. You can ask your bank to add someone to your account with limited powers — for example, to withdraw cash or pay bills, but not to close the account or change the owner. Not all banks offer this option, and the rules vary.

Payment apps and linked services give access through a third party. If you link your bank account to Venmo, PayPal, Cash App, or a bill-pay service, you are authorizing that app to pull money from your account. If you then give someone access to that app (by sharing your login or adding them as a trusted contact), they can transfer money through the app.

How to know if someone has access to your account

Review your bank statements monthly, even if you think you know where every dollar went. Look for transfers you do not recognize, especially small ones — some people test access with a small transfer before taking more. Check the transaction details to see who initiated the transfer and through what method.

Log into your online banking and check the "Account Settings" or "Authorized Users" section. Most banks list everyone with access to your account. If you see a name you do not recognize, contact the bank when ready. Also check which payment apps are linked to your account — your bank's website usually shows this under "Connected Apps" or "Third-Party Access".

If you have a joint account, ask the bank for a list of all authorized signers. If you have given someone power of attorney, keep a copy of that document and review it yearly to confirm it still reflects your wishes.

Removing someone's access to your account

The process depends on how they have access. For a joint account, you cannot unilaterally remove the other person — both owners have equal rights. Your options are to close the account and open a new one in your name alone, or to have a conversation with the joint owner about changing the arrangement. If the joint owner is abusive or you fear for your safety, contact your bank about your options; some banks can freeze joint accounts pending legal action.

For power of attorney, the document itself specifies when it ends. You can revoke it at any time by signing a revocation document and giving it to the person and your bank. Keep a copy for your records. If the person refuses to acknowledge the revocation, consult a lawyer.

For an authorized user, call your bank and ask them to remove the person. This usually takes one business day. For linked payment apps, log into the app, go to settings, and disconnect your bank account. Then log into your bank's website and revoke the app's access under "Connected Apps".

What to do if money is transferred without your permission

Call your bank when ready — do not wait. Tell them the transfer was unauthorized. The bank will freeze the account and begin an investigation. You will likely need to file a written dispute within a set timeframe (usually 10 to 60 days, depending on the type of transfer).

For transfers made by debit card or ACH (automatic bank transfer), federal law requires you to report the unauthorized transfer within 60 days of receiving your statement. If you report within two business days, your liability is capped at $50. If you wait longer, you may be liable for up to $500. If you wait more than 60 days, you may lose all protection.

For transfers made through a payment app (Venmo, PayPal, etc.), the app's terms of service govern the dispute process, not federal banking law. Report it to the app when ready and ask them to reverse the transfer. If the app does not help, contact your bank and report it as an unauthorized ACH transfer.

File a police report if the person who took the money is someone you know and you believe they committed theft. Provide the police with bank statements, the power of attorney document (if applicable), and any messages or evidence of the unauthorized transfer. Give a copy of the police report to your bank — it strengthens your dispute claim.

Protecting yourself when you do share account access

If you need to give someone access to your account — for example, an aging parent giving a child power of attorney, or spouses managing finances together — use the most limited form of access that meets your needs. A power of attorney that expires on a specific date is safer than one that lasts forever. An authorized user with withdrawal-only rights is safer than a joint account owner.

Keep detailed records of any large transfers. If you have given someone power of attorney, ask them to send you a monthly summary of what they spent. For joint accounts, review statements together and discuss any large withdrawals in advance.

If you are the one being given access to someone else's account, understand that you are taking on legal responsibility. Using that access for your own benefit when you are supposed to be managing it for them is a crime, even if you are family.

Frequently Asked Questions

Can a bank employee transfer money from my account without permission?

No. Bank employees can only move money if you authorize it in person, by phone, or through your online account. If an employee transfers money without your explicit instruction, that is fraud and a crime. Report it to the bank's fraud department and to law enforcement when ready.

What if I gave someone access but now I think they are stealing from me?

Contact your bank and report the transfers as unauthorized, even though you originally gave them access. Explain that you no longer consent. The bank will investigate. At the same time, remove their access to the account and consider consulting a lawyer, especially if large amounts are involved or if the person is a family member.

Does my spouse automatically have access to my bank account?

No. Marriage does not automatically give either spouse access to the other's account. Only joint account owners have access. If you want your spouse to be able to transfer money, you must add them to the account or give them power of attorney. Some states have community property laws that affect how accounts are treated in divorce, but that is different from day-to-day access.

If I report an unauthorized transfer, how long does it take to get my money back?

The bank must complete its investigation within 10 business days for most transfers, though they can extend to 45 days if needed. If they find the transfer was unauthorized, they must return your money. If the investigation is still ongoing after 10 days, the bank must provisionally credit your account while they continue investigating.

Can I remove myself from a joint account without closing it?

No. You cannot unilaterally remove yourself from a joint account. You can close the account and open a new one in your name alone, but the other owner retains access to the closed account's history and records. If you want to separate finances from a spouse or family member, consult a lawyer about the safest way to do it.