The short answer: only you, your bank, and people you explicitly authorize

No one can withdraw money from your savings account without your permission, your bank's action, or a court order. Your bank can take money for overdraft fees, unpaid loans, or tax levies. Someone you've authorized—like a joint account holder or a person with power of attorney—can withdraw funds. A creditor cannot straightforward take money; they need a judgment and a court order first. Scammers and thieves can access your account only if you give them your login credentials or account details.

The risk is real but preventable. Most unauthorized withdrawals happen because someone shared their password, fell for a phishing email, or didn't notice a fraudulent transaction quickly. The law protects you, but only if you report the problem within a specific window.

Key Takeaways

  • Your bank can withdraw money without your permission only for overdraft fees, unpaid debts to that bank, or court-ordered levies like tax debt or child support.
  • Joint account holders and people with power of attorney can withdraw money legally, so choose these carefully and review account activity regularly.
  • Creditors cannot take money directly; they must sue you, win a judgment, and then obtain a court order before your bank will freeze or levy the account.
  • If you spot an unauthorized transaction, report it to your bank within 60 days to receive full protection under federal law.
  • Phishing emails, public Wi-Fi, and shared passwords are the most common ways scammers gain access to savings accounts.

When your bank can take money without asking

Your bank has the right to withdraw funds from your account in three situations. First, they can deduct overdraft fees if you spend more than your balance. Second, they can offset money you owe them—if you have an unpaid personal loan, credit card, or mortgage with that same bank, they can take the amount from your savings to cover it. This is called right of offset. Third, they can honor a levy, which is a court order from a government agency or creditor who has already won a judgment against you.

Levies are the most serious. The IRS can levy your account for unpaid taxes without going to court first—they have that power by law. Child support agencies can do the same for unpaid support. A private creditor, however, cannot levy your account. They must sue you, win the case, and then ask the court to issue a levy order. Only then can your bank freeze or take the money.

Your bank will notify you when a levy happens, usually by freezing the account for a set period (often 21 days) so you can challenge it. If you believe the levy is wrong—the debt is paid, the amount is incorrect, or the creditor has no right to it—you can file a claim with your bank or the court within that window.

Joint account holders and authorized users

If someone else's name is on your savings account as a joint owner, they have full legal access to withdraw money. This is true even if you contributed all the funds. Joint ownership means equal rights unless you have a written agreement that says otherwise—and even then, the bank may not enforce it. Many joint accounts are set up between spouses, parents and adult children, or siblings, and disputes arise when one person withdraws without the other's knowledge.

A power of attorney is different. This is a legal document that gives one person the right to act on your behalf—including withdrawing money—but only while you are alive and only for the purposes you specify in the document. A power of attorney can be limited (for one task, like selling a house) or broad (handling all finances). The person holding it has a legal duty to act in your interest, and misusing it is fraud.

If you suspect a joint owner or power of attorney holder has taken money without permission, contact your bank when ready and ask them to freeze the account pending investigation. You may also need to file a police report and consult a lawyer, especially if the amount is large or the relationship is ending.

How creditors actually get access to your account

A credit card company, medical debt collector, or other creditor cannot straightforward take money from your savings account. They must follow a legal process. First, they sue you in court. If they win, the court issues a judgment against you. Then they file a separate request—usually called a writ of execution or garnishment order—asking the court to order your bank to freeze or transfer funds.

Your bank receives this court order and must comply. They will typically freeze the account for a set period (often 21 days in most states) to give you time to object. You can object if the debt is paid, the amount is wrong, the creditor has no right to it, or the funds are protected (like Social Security or disability payments, which many states exempt from garnishment).

The timeline matters. From the moment the creditor files suit to the moment your account is frozen can take weeks or months, depending on the court's schedule and whether you respond to the lawsuit. If you receive a court summons, do not ignore it—responding gives you a chance to dispute the debt or negotiate a payment plan before a judgment is entered.

Scammers and unauthorized access

Thieves and scammers access savings accounts by obtaining your login credentials, account number, or routing number. The most common methods are phishing emails that look like they're from your bank and ask you to "verify" your information, malware on your computer or phone that captures keystrokes, public Wi-Fi where passwords can be intercepted, and social engineering—calling you pretending to be your bank and tricking you into revealing your password.

Once they have access, they can transfer money out, change your contact information so you don't notice, or sell your account details to other criminals. The damage can happen fast—sometimes within hours of the breach.

If you discover unauthorized transactions, report them to your bank when ready, even if it's after hours. Call the number on the back of your card or statement, not a number from an email or text. Your bank will freeze the account, investigate, and typically reverse fraudulent charges within 10 business days if you report within 60 days of the statement date. After 60 days, your protection is limited, and you may not recover the full amount.

Protecting your account from unauthorized access

Use a unique, strong password for your bank account—at least 12 characters, mixing letters, numbers, and symbols. Do not reuse passwords across multiple sites. Enable two-factor authentication (2FA) on your bank account if available; this requires a second form of verification (usually a code sent to your phone) before anyone can log in or make changes.

Never share your password, PIN, or full account number with anyone, including bank employees. Your bank will never ask for this information via email or phone. Check your account regularly—weekly is ideal—and set up account alerts for large withdrawals or login attempts from new devices. If your bank offers it, use a separate email address for banking that you do not use for shopping or social media.

Be cautious on public Wi-Fi. Do not log into your bank account on unsecured networks. If you must, use a VPN (virtual private network) to encrypt your connection. Shred or securely delete statements and documents with account information. If you lose your debit card or suspect your account number has been compromised, contact your bank when ready to cancel and reissue.

What to do if money goes missing

Call your bank's fraud department right away—do not wait for a statement. Have your account number and recent transactions ready. The bank will ask you to describe what happened, when you first noticed it, and whether you recognize the transactions. They will freeze your account to prevent further unauthorized activity.

Ask the bank to send you a written summary of the disputed transactions and their investigation timeline. Request a new debit card and account number. If the bank denies your claim, ask why in writing and request the specific evidence they used to make that decision. You have the right to dispute their finding.

If the bank does not resolve it to your satisfaction, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov. You can also contact your state's attorney general or banking regulator. Keep copies of all correspondence with your bank, including dates, names of employees you spoke with, and what was said.

Frequently Asked Questions

Can my ex-spouse take money from my savings account after divorce?

Not unless they are a joint owner or have a court order. If the account is in both names, they have legal access until the account is closed or changed to single ownership. If a divorce decree awards them a portion of your savings, they cannot take it themselves—they must go to court to enforce the order, and the court will direct your bank to transfer the funds.

What if I gave someone temporary access to my account and they took more than I authorized?

Report it to your bank as unauthorized or fraudulent, even though you gave them access initially. The bank will investigate whether the withdrawal exceeded what you authorized. If you have written proof of the limit you set (email, text, or written agreement), provide it. The outcome depends on your bank's policy and whether you can show the person acted outside your permission.

Can the IRS take money from my savings without warning?

The IRS can levy your account without a court order, but they must send you a notice of intent to levy at least 30 days before they act. If you receive this notice, you have 30 days to request a hearing or set up a payment plan. Contact the IRS when ready if you receive a levy notice; ignoring it does not stop the process.

If I report fraud after 60 days, do I lose all my money?

Not necessarily, but your protection is weaker. Federal law guarantees a refund if you report within 60 days of the statement. After 60 days, the bank can investigate but is not required to refund you. Some banks do refund older fraud out of goodwill, especially if you have been a long-term customer. Always ask, and keep pushing if the first answer is no.

Can a debt collector take money directly from my account?

No. A debt collector must sue you and win a judgment before they can ask a court to levy your account. If a debt collector claims they can take money directly, they are lying and may be breaking the law. Report them to the CFPB and your state's attorney general.