Why your bank rejected your username or password

When your bank says it cannot verify your account ID and rejects your username or password, one of four things is happening: you typed something wrong, your account is locked after failed login attempts, your credentials were reset and you were not notified, or your account has been flagged for fraud review. The message itself does not tell you which one. Your next step is to contact your bank directly—not through the app or website, but by phone or in person—because only the bank can see which of these is actually blocking you.

Do not try to log in again multiple times. Each failed attempt can trigger additional security locks, making the problem worse. Stop now and call instead.

Key Takeaways

  • Call your bank's customer service number on the back of your card or on your statement, not a number you find online, to confirm you are reaching the real bank.
  • Have your account number, Social Security number, and a photo ID ready before you call, because the bank will verify your identity before unlocking anything.
  • If your account is locked after failed login attempts, the bank can unlock it when ready, but you will need to reset your password before you can log in again.
  • If fraud was suspected, the bank may require you to verify recent transactions or confirm your location before restoring access.
  • If you cannot remember your password, use the "Forgot Password" link on the bank's login page rather than guessing, because guessing triggers more locks.

The four reasons this message appears and how to fix each one

You typed your username or password wrong. This is the most common cause. Passwords are case-sensitive, meaning capital letters matter. Usernames often include numbers or special characters that are straightforward to mistype. If you are not sure, use the "Forgot Password" or "Forgot Username" link on your bank's login page. This is safer than guessing, because wrong guesses lock your account faster.

Your account is locked after multiple failed login attempts. Most banks lock accounts temporarily after three to five wrong password entries. This lock usually lasts 24 hours, but your bank can remove it when ready if you call and verify your identity. You will still need to reset your password before you can log in again. Do not wait for the lock to expire on its own if you need access today.

Your password was reset and you were not told. Some banks reset passwords if they detect unusual activity, if you have not logged in for a long time, or if you changed your email or phone number. Check your email (including spam folders) for a message from your bank about a password reset. If you find one, follow the link in that email to create a new password. If you do not find one, call your bank to ask whether a reset happened.

Your account is under fraud review. If the bank suspects unauthorized activity, it may lock your account and require you to verify your identity and recent transactions before restoring access. This can take a few hours to a few days. The bank will not tell you this through the login screen—you have to call to find out. When you call, be ready to confirm transactions from the past 30 days and verify your current location.

How to contact your bank safely

Call the number on the back of your debit or credit card, or find the number on your most recent bank statement. Do not search for the bank's phone number online and call that number, because scammers sometimes create fake bank websites with fake phone numbers. If you cannot find a statement or card, go to the bank's physical branch in person.

Have these items ready before you call: your account number, your Social Security number, and a photo ID (driver's license, passport, or state ID). The bank will ask you to verify at least two of these before they will unlock your account or reset your password. This verification step protects you from someone else calling and pretending to be you.

Tell the representative exactly what message you saw when you tried to log in. Say "I got a message that says the account ID is invalid or the username or password is wrong, but I am sure I typed it correctly." This helps them narrow down which system is blocking you.

What happens after you call

If your account was locked after failed login attempts, the bank can unlock it within minutes. You will then need to reset your password before you can log in. The representative may walk you through this on the phone, or they may send you a link by email.

If your password was reset without your knowledge, the bank will confirm this and help you create a new one. Make sure your new password is at least 12 characters long, includes uppercase and lowercase letters, numbers, and a special character (like ! or #). Avoid using your name, birthday, or account number in your password.

If your account is under fraud review, the bank will tell you what information they need from you and how long the review usually takes. Some banks can clear the review in a few hours if you verify your recent transactions by phone. Others may take one to three business days. Ask the representative for a timeline and whether you can access your account in the meantime (some banks restore limited access while the review is ongoing).

If you still cannot log in after calling

If the bank unlocked your account but you still get the same error message, the problem may be with your device or browser, not your account. Try logging in from a different device (a phone instead of a computer, or vice versa) or from a different internet connection (mobile data instead of WiFi). Clear your browser's cache and cookies, then try again. If you do not know how to do this, ask the bank's technical support team when you call back.

If you are using the bank's mobile app, try logging in through the bank's website instead. Sometimes app problems are separate from account problems. If the website works but the app does not, uninstall the app and read it again from the official app store (Apple App Store or Google Play Store, not a third-party site).

Protecting your account after you regain access

Once you log in successfully, change your password again if the bank forced a reset. Use a password manager (like Bitwarden, 1Password, or the password manager built into your phone) to store your new password so you do not forget it. Do not write it down on paper or store it in an unencrypted note on your phone.

Check your account settings to make sure your email address and phone number are correct. Scammers sometimes change these during a fraud attempt, which is why you could not log in. If either one is wrong, update it when ready. Then review your recent transactions to make sure nothing unauthorized happened. If you see charges you did not make, report them to your bank right away.

Turn on two-factor authentication if your bank offers it. This adds a second verification step (usually a code sent to your phone) when you log in from a new device. It makes your account much harder to break into, even if someone gets your password.

Frequently Asked Questions

How long does it take to unlock my account?

If your account is locked after failed login attempts, the bank can unlock it when ready by phone. If your account is under fraud review, it usually takes a few hours to three business days. Ask the representative for a specific timeline when you call.

Do I need to go to the bank in person, or can I fix this over the phone?

You can fix this over the phone in almost all cases. The bank will verify your identity by asking for your account number, Social Security number, and answers to security questions. Going in person is only necessary if you do not have a phone, do not feel safe calling, or the bank specifically asks you to come in.

What if I forgot my username and password?

Use the "Forgot Username" and "Forgot Password" links on your bank's login page. These will send recovery instructions to your email or phone. If you no longer have access to that email or phone number, call the bank and they can verify your identity and help you regain access.

Is this message a sign that my account was hacked?

Not necessarily. It usually just means you typed something wrong or your account is locked. However, if you did not try to log in and you are seeing this message, or if the bank tells you your password was recently changed, then fraud may be involved. Ask the bank to review your recent activity and report any unauthorized charges.

Can I reset my password without calling the bank?

Yes, if you use the "Forgot Password" link on the bank's login page. This will send a reset link to your email. However, if your account is locked or under fraud review, the bank may not let you reset it yourself—you will need to call. Try the self-service option first, and if it does not work, call.