The short answer: not just anyone, but more people than you might think

No, a stranger cannot straightforward walk into your bank and take your money. But money can leave your account without your permission through several legal channels — and some illegal ones. The difference matters, because what you can do about it depends on how the money left.

Your bank account is protected by law, but that protection has limits. Your bank itself can take money for unpaid fees or debts you owe them. A court can order your bank to hand over funds to pay a judgment against you. Someone with legal authority over your account — like a parent, guardian, or power of attorney — can withdraw money. And if someone has your account number and routing number, they can set up unauthorized transfers, though your bank has a duty to catch and reverse many of these.

The people most likely to take money from your account are not strangers. They are people you know, people with legal claim to the account, or people you gave access to by sharing your information.

Key Takeaways

  • Your bank can take money from your account to cover overdraft fees, unpaid loan payments, or other debts you owe the bank itself.
  • A court judgment against you allows a creditor to order your bank to freeze or transfer funds, but the process takes weeks and you receive notice.
  • Anyone with your account number and routing number can attempt a transfer, but federal law limits your liability if you report it quickly.
  • Family members with access to your debit card or online login can withdraw money legally, even if you did not intend to give them permission to take large amounts.
  • If money leaves your account without your knowledge, contact your bank when ready — the faster you report it, the more protection you have.

When your bank takes money from your account

Your bank has the right to take money from your account in specific situations, and you agreed to this when you opened the account. The most common reason is overdraft fees — if you spend more than you have, the bank covers the difference and charges you a fee, then takes that fee from your account. If you have a loan with the same bank and miss a payment, the bank can take money from your checking or savings account to cover it. This is called right of offset.

Your bank can also take money if you owe it money for other reasons: unpaid credit card bills, unpaid personal loans, or even old fees that went to collections. Before the bank takes the money, you should receive notice, usually in writing or through your online account. If you believe the bank made a mistake, you can dispute it, but the bank will likely take the money first and make you fight to get it back.

This is different from theft because you authorized the bank to manage your account this way when you signed the account agreement. The bank is not stealing — it is collecting a debt you owe.

How a court judgment leads to frozen or seized funds

If you lose a lawsuit or fail to pay a debt, a creditor can ask a court to order your bank to hand over money from your account. This process is called a bank levy or account garnishment, and it is legal, but it does not happen overnight.

First, the creditor must win a judgment against you in court — this takes weeks or months. Then they file paperwork with the court asking for a levy. The court sends an order to your bank. Your bank then freezes the account and sends you a notice. You have a window of time (usually 10 to 30 days, depending on your state) to object or claim that the money is exempt. Some money is protected: your primary residence, a certain amount of your paycheck, and funds in some retirement accounts cannot be seized.

The key difference from theft is that you receive notice and have a chance to respond. If you ignore the notice, the bank will transfer the money to the creditor. If you respond and claim the funds are exempt, the court will hold a hearing.

Unauthorized transfers using your account information

If someone has your account number and routing number, they can set up an ACH transfer (Automated Clearing House transfer) to move money out of your account. This is the same system your employer uses to deposit your paycheck. A scammer can use this to pull money from your account without your permission.

Federal law (Regulation E) protects you if you report the unauthorized transfer quickly. If you report it within two business days, you are liable for no more than $50 of the loss. If you report it within 60 days, you are liable for no more than $500. After 60 days, you may lose all protection, depending on your bank's policy. This is why speed matters: call your bank the moment you notice money missing.

Your bank is also required to investigate and reverse transfers that look suspicious, even if you do not report them first. But you cannot count on the bank catching it — you need to check your account regularly and report problems when ready.

Family members and people with account access

If you gave someone your debit card, your PIN, or your online login information, they can legally withdraw money from your account. This includes spouses, adult children, roommates, or anyone else you shared access with. Once they have the information, the bank has no way to know whether you wanted them to take that specific amount.

This is a common source of conflict in families and relationships. If someone you trust takes more money than you agreed to, or takes money after you have broken up, you have a civil dispute — not a bank problem. The bank will not reverse the transaction because the person had legitimate access. You would need to pursue the matter through small claims court or with a lawyer.

If you share an account with someone and want to prevent them from withdrawing large amounts, you have limited options. Some banks allow you to set daily withdrawal limits, but this usually requires both account holders to agree. The safest approach is to keep money you do not want accessed in a separate account that only you control.

Identity theft and account takeover

If a scammer gains access to your online banking login — usually by tricking you into giving them your password, or by stealing it through a data breach — they can change your contact information, reset your password, and lock you out of your own account. This is called account takeover.

Once they control the account, they can transfer money out, change your address so statements go to them, or take out loans in your name. This is more serious than a single unauthorized transfer because the scammer has full control.

If this happens, contact your bank when ready by phone — do not use the online portal, because the scammer may have changed your contact settings. Tell the bank your account has been compromised. The bank will freeze the account, investigate, and reverse fraudulent transfers. You may also need to file a report with the Federal Trade Commission (FTC) at IdentityTheft.gov and place a fraud alert on your credit report.

What to do if money goes missing from your account

The moment you notice money missing, call your bank. Do not wait for a statement or for the transaction to "clear." Use the phone number on the back of your debit card or on your bank statement — not a number from a search result, because scammers sometimes create fake bank websites.

Tell the bank exactly what happened: when you noticed the money was gone, what amount, and whether you recognize the transaction. If you do not recognize it, say so clearly. The bank will ask questions to determine whether this was fraud or a legitimate transaction you forgot about.

Ask the bank to reverse the transaction and to send you a written explanation of what happened. If the bank refuses, ask why. If you believe the bank made a mistake, you can file a dispute, which triggers a formal investigation. Keep records of all your calls, including the date, time, and name of the person you spoke with.

How to protect your account from unauthorized access

Use a strong, unique password for your online banking — one you do not use anywhere else. A strong password has at least 12 characters and mixes uppercase letters, lowercase letters, numbers, and symbols. Write it down and store it somewhere safe, or use a password manager.

Enable two-factor authentication if your bank offers it. This means that even if someone has your password, they cannot log in without a code sent to your phone or generated by an app. Many banks now require this for security reasons.

Do not share your account number, routing number, PIN, or online password with anyone — not even family members, unless you are comfortable with them having full access to your money. If you need to give someone temporary access, use your bank's tools to set limits: some banks allow you to create a secondary card with a daily spending limit, or to authorize a single transfer without giving permanent access.

Check your account at least once a week. Most banks offer free alerts that notify you by text or email when a transaction occurs. Set up alerts for large transfers or withdrawals so you know when ready if something unusual happens.

Frequently Asked Questions

Can my employer take money from my bank account?

Your employer cannot take money directly. However, if you owe your employer money — for example, if you were overpaid or damaged company property — they can pursue a lawsuit and ask a court to order a bank levy. This follows the same process as any other creditor and you will receive notice.

What if my spouse or ex-partner takes money without permission?

If you share an account, they have legal access and the bank will not reverse the transaction. You would need to pursue this through family court or small claims court. If you do not share an account and they somehow accessed it, report it to the bank as fraud. If you are concerned about future access, remove them from the account or open a new account they do not know about.

Can a scammer drain my account if they only have my debit card number?

A debit card number alone is not enough to set up an ACH transfer — they also need your routing number. However, they can use the card number to make online purchases or attempt card-not-present transactions. Report a stolen or compromised card number to your bank when ready, and they will cancel the card and issue a new one.

How long does it take to get money back after I report fraud?

Your bank must begin investigating within one business day and complete the investigation within 10 business days. If they find the transaction was fraudulent, they must return the money when ready. If they need more time, they can extend the investigation to 45 days, but they must return your money within that window while the investigation continues.

What if my bank says I am responsible for the unauthorized transfer?

Under federal law, your liability is limited. If you reported it within two business days, you owe no more than $50. If you reported it within 60 days, you owe no more than $500. If your bank claims you owe more, ask them to explain which federal rule allows that. If you disagree, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) or your state banking regulator.