Someone else can withdraw money from your account only if you give them permission to do so
Your bank account is yours alone unless you take specific steps to let someone else access it. A stranger cannot walk into a branch or use an ATM with your card. A family member cannot transfer your money without your consent. The bank will not hand over your funds to anyone who calls and claims to know you.
That said, there are legitimate ways to let someone else withdraw money — and ways that can happen without you realizing it. Understanding the difference protects you from both accidental loss and fraud.
Key Takeaways
- Only you and people you have explicitly authorized can withdraw from your account; the bank will not release funds to anyone else.
- An authorized user on a joint account or a power of attorney can withdraw money, but you must sign paperwork to set this up.
- A scammer can drain your account if they obtain your debit card, PIN, or online login credentials — not because they have permission, but because they have the tools to access it.
- If someone withdraws money without your permission, report it to your bank when ready; most banks have fraud protections that may recover the funds.
- You can remove someone's access by closing a joint account, revoking power of attorney, or removing them as an authorized user.
Authorized users and joint account holders
If you add someone as a joint account holder, they have the same legal rights to the account as you do. They can withdraw all the money, close the account, or change the account settings. The bank treats both of you as owners. You must both sign paperwork at the bank to set up a joint account.
An authorized user is different. This person can use a debit card or withdraw cash, but they do not own the account. You remain the account owner and can remove them at any time. Some banks call this an "additional cardholder" or "secondary user." You fill out a form at your bank to add them, and you can revoke access by calling the bank or visiting in person.
Both arrangements require your signature and your presence (or your written consent sent to the bank). Neither can happen without you knowing about it.
Power of attorney and guardianship
A power of attorney is a legal document you sign that gives someone else the right to manage your money and make financial decisions on your behalf. You choose who gets this power, what they can do with it, and when it ends. You must sign the document in front of a notary public or witness, depending on your state's rules.
A guardianship is different — a court appoints a guardian to manage finances for someone who cannot do so themselves (usually a minor or an adult with severe illness or disability). The guardian must follow court orders and report to the court on how the money is spent. This is not something you can set up yourself; a judge must order it.
Both of these require official paperwork and your knowledge. A bank will not honor either one without seeing the signed, notarized document.
How fraud happens: stolen cards and login credentials
Someone can withdraw money from your account without permission if they have your debit card and PIN, or if they have your online banking username and password. This is not because you authorized them — it is because they have the tools to access your account. The bank will treat it as fraud if you report it.
A thief can obtain these in several ways: they steal your physical card, they trick you into revealing your PIN or password over the phone or email, they hack your email account and use the password reset feature, or they use a skimming device at an ATM or gas pump to copy your card number. None of this requires your permission.
This is why the bank asks for your PIN at the ATM and why your online password should be unique and strong. These are your security barriers.
What the bank will and will not do
A bank will not withdraw money from your account or give it to someone else based on a phone call, email, or text message — even if the person claims to be you. Banks verify identity through in-person visits, card use, or online login. If someone calls the bank claiming to be you and asking to transfer money, the bank should refuse.
However, banks have different rules about what they will do if you call and ask them to release money to someone else. Some will do it if you provide your account number and answer security questions. Others require you to come in person. Ask your bank what their policy is.
If someone does withdraw money without your permission, the bank has a legal duty to investigate if you report it within a certain timeframe. For debit card fraud, you typically have 60 days to report it. For unauthorized transfers, the window may be shorter. Report it as soon as you notice it.
Removing someone's access
If you have a joint account and want to remove the other person's access, you cannot do it alone. You must either close the account (which requires both signatures) or move your money to a new account in your name only. The other joint holder has the same right to the money that you do, so the bank will not let you freeze their access without closing the account.
If you have authorized someone as a secondary user or additional cardholder, you can remove them by calling the bank or visiting in person. You do not need their permission. The bank will cancel their card and revoke their access within one business day.
If you signed a power of attorney, you can revoke it by signing a revocation document and giving it to the person and to your bank. The revocation should be notarized, just like the original power of attorney. Keep a copy for your records.
Protecting your account from unauthorized access
Use a strong, unique password for your online banking — one you do not use anywhere else. Never share your PIN, password, or security questions with anyone, including bank employees (the bank will never ask for these). Do not click links in emails or texts that claim to be from your bank; instead, go directly to the bank's website or call the number on your card.
Check your account regularly — at least once a week — for withdrawals you do not recognize. Set up account alerts if your bank offers them; many banks will text or email you when a withdrawal happens. If you see something wrong, call the bank when ready.
If you are adding someone to your account, understand what you are doing. Ask the bank to explain the difference between a joint account and an authorized user. If you are signing a power of attorney, read it carefully and understand what powers you are giving away.
Frequently Asked Questions
Can my spouse withdraw money from my account without my permission?
Only if you have a joint account together. If the account is in your name alone, your spouse cannot withdraw money even if they are married to you. If you have a joint account, they can withdraw any amount without asking you first — you both own the money equally.
What if someone has my debit card number but not the PIN?
They cannot withdraw cash from an ATM without the PIN. They may be able to make online purchases or use it at a store if the transaction does not require a PIN. Report the card as stolen to your bank when ready, and the bank will cancel it and issue a new one.
Can a parent withdraw money from an adult child's account?
No, not unless the adult child added them as a joint holder or authorized user, or signed a power of attorney. Being a parent gives no legal right to access an adult's bank account. If a parent is listed on the account from when the child was a minor, the adult child should contact the bank to remove them.
How long does it take to remove someone from my account?
Removing an authorized user or secondary cardholder usually takes one business day once you call or visit the bank. Closing a joint account or revoking a power of attorney may take longer depending on whether the other person contests it. Ask your bank for a timeline when you request the change.
What should I do if I see a withdrawal I did not make?
Call your bank when ready — do not wait. Report the unauthorized withdrawal and ask the bank to freeze your account while they investigate. Provide the date, amount, and location of the withdrawal if you have that information. The bank will issue a temporary credit while they look into it, and you should receive a final decision within 10 business days.