The fastest way to lock someone out is to contact your bank directly
Call your bank's customer service number on the back of your card or on your statement — not a number you find online. Tell them you want to remove someone's access to your account when ready. Most banks can do this within minutes over the phone, and they will document the request in your account record.
If someone has a debit card, ATM card, or online login tied to your account, the bank can deactivate those when ready. If someone is an authorized user on the account (meaning they have legal permission to use it), removing them takes slightly longer but still happens the same day. The bank will ask you to confirm your identity, usually by answering security questions or providing your Social Security number.
Do this before taking any other step. Everything else — changing passwords, freezing your credit, reporting fraud — matters less if the person can still drain your account while you are working on it.
Key Takeaways
- Call your bank when ready using the number on your card or statement to deactivate anyone's access to your account.
- The bank can remove debit cards, ATM cards, and online logins within minutes; removing an authorized user takes longer but still happens the same day.
- If money has already been taken without your permission, report it as fraud and ask the bank to reverse the transactions.
- Change your online banking password and any security questions from a different device after you have contacted the bank.
- If someone has your Social Security number or other personal information, consider a credit freeze to prevent them from opening new accounts in your name.
What to do if money has already been taken
If someone has already withdrawn money or made charges without your permission, tell your bank this is fraud. Use that exact word. The bank has a legal obligation to investigate unauthorized transactions on debit cards and checking accounts, and they can often reverse the charges.
You will need to file a dispute, which the bank will do over the phone or through your online account. The bank will give you a case number and a timeline — usually they have 10 business days to investigate, though they may take up to 45 days for more complex cases. During that time, the bank may put the money back temporarily while they look into it.
Keep records of everything: the dates the money left your account, the amounts, and any messages or evidence showing the person took it. If the person is someone you know — a family member, roommate, or ex-partner — the bank may ask whether you want to press criminal charges. You do not have to, but telling the bank you do can speed up their investigation.
Changing your passwords and security questions
After you have called the bank, change your online banking password from a different device — a phone, tablet, or computer that the other person does not have access to. Do not change it from a shared computer or phone.
Change any security questions you set up, such as "What is your mother's maiden name?" or "What was the name of your first pet?" If the person knows you well, they may know the answers. Use information only you would know, or answers that are not true but that only you would remember.
If you use the same password for your bank account as you use for email, social media, or other accounts, change those too. Someone with access to your email can reset your bank password and lock you out of your own account.
Removing an authorized user versus stopping an unauthorized person
An authorized user is someone you gave permission to use your account — usually a spouse, adult child, or trusted family member. You added them on purpose, and they have a legal right to access the account. Removing them is straightforward: call your bank and ask them to take the person off the account. The bank will send written confirmation, and the person's card will stop working within a day or two.
An unauthorized person is someone who accessed your account without permission — they stole your password, found your card, or used your information without asking. This is fraud, and you should report it to the bank as fraud, not as a removal request. The bank will investigate and may contact law enforcement.
If you are unsure whether someone is authorized, ask yourself: did I sign paperwork adding them to this account, or did I give them my password and card? If yes, they are authorized. If no, they are not.
Protecting yourself from future access
After you have stopped the when ready problem, take steps to prevent it from happening again. Set up two-factor authentication on your online banking account if your bank offers it. This means you need both your password and a code sent to your phone to log in — even if someone has your password, they cannot get in without your phone.
Review your account settings to see who else has access. Some banks allow you to set up alerts that notify you by text or email every time money leaves your account, or every time someone logs in. These alerts cost nothing and can warn you if someone tries to access your account again.
If the person who accessed your account also knows your Social Security number, date of birth, or address, consider placing a credit freeze with the three major credit bureaus: Equifax, Experian, and TransUnion. A credit freeze prevents anyone from opening new credit cards, loans, or accounts in your name without unfreezing it first. You can place a freeze for free by visiting each bureau's website or calling them.
When to involve law enforcement
If someone took money from your account without permission, that is theft. You can report it to your local police department, though many departments will not investigate unless the amount is large or the person is a stranger. If the person is someone you know — a family member or roommate — police may treat it as a civil matter rather than a criminal one.
Reporting to police is not required to get your money back from the bank. The bank's fraud investigation is separate from any police report. However, if you think the person might try again, or if they have taken money from other people, a police report creates an official record that may help you or others later.
If the person accessed your account through your email or by hacking your password, you can also report that to the FBI's Internet Crime Complaint Center at ic3.gov. Again, this does not get your money back, but it documents the crime.
What happens to the person's access after you remove them
Once you remove someone from your account, their debit card stops working when ready. If they try to use it, the transaction will be declined. If they have your online banking password, they can still try to log in, but they will not be able to see your account or move money — the bank will have removed their access at the system level.
If the person has written checks on your account, those checks may still clear if they have not been deposited yet. You can call your bank and ask them to stop payment on specific check numbers, which costs money (usually $25 to $35 per check) but prevents those checks from clearing. If you do not know which checks they have, ask your bank whether you can close the account and open a new one instead — this is faster and stops all checks at once.
Frequently Asked Questions
Can the bank reverse transactions that happened before I called them?
Yes, if you report them as fraud. The bank will investigate and can reverse unauthorized charges on debit cards and checking accounts. Credit card fraud has different rules — you are only liable for up to $50 — but debit card fraud may require you to report it quickly to limit your liability. Call your bank when ready if you notice unauthorized transactions.
What if the person is my spouse or ex-partner and we are fighting about the account?
If you are married and both names are on the account, the bank may not remove your spouse without a court order. If you are divorced or separated, the account should have been divided in your divorce agreement. If your ex-partner is still on the account and you want them off, bring your divorce papers to the bank or ask a lawyer whether you need a court order first.
Can I close my account and open a new one instead of removing someone?
Yes. Closing the account and opening a new one at the same bank or a different bank stops all access when ready. You will get a new account number and new debit card. You will need to update your direct deposits and automatic payments with the new account number, which takes a few days. This is often faster than removing someone if they have written checks or set up unauthorized access in multiple ways.
What if I do not know how the person accessed my account?
Call your bank and ask them to review your account activity and security settings. The bank can see when your password was last changed, what devices have logged in, and whether anyone was added as an authorized user. This information will help you understand what happened and prevent it from happening again.
Do I need to report this to the credit bureaus?
Only if you think the person might try to open new accounts in your name. If they only accessed your existing bank account, you do not need to contact the credit bureaus. If they have your Social Security number and personal information, placing a credit freeze is a good precaution.