What third parties can and cannot do with your account
A third party cannot access your bank account just by asking or knowing your account number. Banks have legal obligations to protect your account, and they will not release money or information to someone who is not you, unless you have given them explicit written permission or a court has ordered them to.
The key word is authorization. Your bank will act on instructions from you, from someone you have legally designated (like a power of attorney), or from a court order. Without one of those three things, the bank's job is to say no.
That said, there are real situations where third parties do gain access: when you add them to the account, when you give them a power of attorney, when a creditor wins a judgment and the court orders a garnishment, or when law enforcement serves a subpoena. Each of these is a different legal path, and each one has different rules about what the third party can actually do.
Key Takeaways
- Your bank will not give a third party access to your account based on a phone call, email, or even a claim that you authorized them verbally.
- If you add someone as an authorized user or joint account holder, they can withdraw money and make transfers without asking your permission.
- A power of attorney document gives a third party the ability to act on your behalf, but only for the specific powers you write into the document.
- Creditors and government agencies can access your account through a court judgment or legal order, but the process takes weeks or months, not days.
- If you suspect unauthorized access, contact your bank when ready and file a fraud report; your liability for unauthorized transfers is capped by federal law.
When you voluntarily give someone access
If you add someone to your account as a joint account holder or authorized user, they can access the account. The difference matters: a joint account holder owns the account with you and can withdraw all the money, close the account, or change the account details. An authorized user can make transactions but typically cannot close the account or change ownership.
Your bank will ask you to sign paperwork to add someone. This is the moment to be clear about what you want them to be able to do. If you want someone to pay bills on your behalf but not withdraw cash, say that when you set up the authorization. If you want them to have full access, that is a joint account.
Once someone is on the account, the bank treats them the same as you. They can walk into a branch, call customer service, or use online banking. The bank has no obligation to tell you when they access the account or move money. If you change your mind, you can remove them, but you have to do it yourself—the bank will not remove someone based on a phone call from you alone.
Power of attorney and what it actually controls
A power of attorney is a legal document you sign that gives someone the right to act on your behalf. It is not the same as adding them to your account. With a power of attorney, the third party can sign checks, make transfers, and conduct banking business in your name—but only for the specific powers you grant in the document.
There are different types. A general power of attorney gives broad powers over your finances. A limited power of attorney restricts what they can do—for example, "pay my bills" or "manage my investments." A durable power of attorney stays in effect even if you become incapacitated; a regular one ends if you do.
Your bank will need to see the actual power of attorney document and may ask you to sign a separate banking authorization form as well. The person with power of attorney cannot add themselves to your account or change the account ownership without explicit permission in the document. If you want to revoke it, you sign a revocation document and give it to your bank in writing.
Creditor garnishment and court orders
If you owe money and a creditor sues you and wins, they can ask the court for a garnishment order. This order tells your bank to freeze or transfer money from your account to pay the debt. The creditor does not need your permission, and the bank must comply with the court order.
The process takes time. The creditor has to file a lawsuit, get a judgment, and then serve the garnishment order on your bank. Your bank will typically freeze the account for a few days while they process the order. Some states allow you to claim certain funds as exempt (like Social Security or disability payments), and you can file a claim with the court to protect those funds.
Government agencies like the IRS or your state's tax authority can also garnish your account without a lawsuit if you owe back taxes. Child support agencies can do the same for unpaid child support. These are administrative garnishments, not court orders, but the result is the same: your bank will transfer money without asking your permission.
Subpoenas and law enforcement access
Law enforcement or a prosecutor can serve your bank with a subpoena to obtain account information or records. This is different from a garnishment—the bank is not moving your money, but they are giving information to the government. Your bank will usually notify you that a subpoena has been served, though there are exceptions if the investigation is ongoing and notification would compromise it.
A warrant is a stronger legal tool. With a warrant, law enforcement can freeze your account or seize funds as part of a criminal investigation. This requires a judge to sign off, which means there is probable cause that a crime has occurred. Your bank must comply, and you will be notified after the fact.
These situations are rare for most people. If you receive notice that your bank has been served with a subpoena or warrant, you have the right to consult an attorney before responding to any government requests.
Scams and what banks actually protect you from
Scammers often claim they can access your account if you just give them your password, account number, or a one-time code. They cannot. Your bank will not give them access, and if they somehow trick you into authorizing a transfer, federal law limits your liability.
If someone makes an unauthorized transfer from your account, you are protected under the Electronic Funds Transfer Act. If you report the fraud within two business days, your liability is capped at $50. If you report it within 60 days, your liability is capped at $500. After 60 days, you may be liable for the full amount, depending on the circumstances.
The key is to report it fast. Call your bank's fraud line when ready, not the main customer service number. Ask them to freeze your account, cancel your debit card, and start an investigation. Get a case number and follow up in writing. Your bank has to investigate and return the money if they find it was truly unauthorized.
How to protect your account from unwanted access
Use a strong, unique password that you do not share with anyone. Enable two-factor authentication if your bank offers it. Do not give your account number, routing number, or online banking credentials to anyone, even if they claim to be from your bank. Your bank will never ask for your password.
Review your account statements regularly—at least monthly. Set up alerts for large transfers or withdrawals. If you have authorized someone in the past and no longer want them to have access, remove them when ready. Do not assume they will not use the access just because you trust them; people's circumstances change.
If you are concerned about a specific person accessing your account, talk to your bank about what options you have. Some banks offer account alerts that notify you of any access from a new device or location. Others can restrict who can make changes to the account.
Frequently Asked Questions
Can my spouse access my bank account without my permission?
Only if you added them to the account as a joint holder or authorized user. If the account is in your name alone, they cannot access it without your permission, even if you are married. If you want to give them access, you have to sign paperwork with your bank to add them.
What if someone has my account number and routing number?
They can use those numbers to set up an automatic payment or transfer from your account, but only if you authorize it. If they try to move money without your permission, that is fraud, and your bank is responsible for investigating. Report it when ready if you see an unauthorized transaction.
Can a debt collector access my bank account?
Not directly. A debt collector cannot call your bank and take money. They have to sue you, win a judgment, and get a garnishment order from the court. Once the court order is in place, your bank must comply. If you are being sued, respond to the lawsuit so you have a chance to defend yourself.
If I give someone my debit card, can they access my account online?
They can use the card to make purchases or withdraw cash, but they cannot log into your online banking without your username and password. If you give them the card, assume they can spend the money on it. If you want to limit what they can spend, ask your bank about setting daily limits or restricting the card to certain types of purchases.
What happens if my bank gives a third party access by mistake?
Your bank is liable for unauthorized access caused by their error. Report it when ready and ask for a full investigation. Document everything in writing. Your bank should restore any missing funds and may offer additional protections like a new account number or fraud monitoring.