Your money in a savings account is protected by federal insurance and banking regulations, but the protection has limits

Money in a savings account at a bank or credit union is insured by the federal government up to a set amount per account holder per institution. This insurance—called FDIC coverage at banks and NCUA coverage at credit unions—means that if the bank fails, you get your money back, not a claim in bankruptcy court. The protection is real and has been tested: when banks failed during the 2008 financial crisis, depositors with balances under the limit got every dollar back.

The catch is that the protection is not unlimited. FDIC insurance covers up to $250,000 per depositor per bank. If you have $300,000 in one savings account at one bank, the first $250,000 is covered and the remaining $50,000 is not. Credit unions offer the same $250,000 limit under NCUA coverage. The limit resets if you move to a different bank or credit union, but not if you open another account at the same institution.

Your money is also protected against theft and fraud through different mechanisms. If someone steals your debit card or hacks your online account, federal law limits your liability to $50 if you report it within two business days, and to $500 if you report it within 60 days. Banks also use encryption, multi-factor authentication, and fraud monitoring to prevent unauthorized access in the first place.

Key Takeaways

  • FDIC insurance at banks and NCUA insurance at credit unions protect up to $250,000 per depositor per institution if the bank fails.
  • Money above the $250,000 limit at a single institution is not federally insured, though the bank's other assets may still cover it.
  • If your account is hacked or your card is stolen, federal law caps your loss at $50 if you report it within two business days.
  • Banks use encryption and fraud monitoring to prevent unauthorized access, and you can set up alerts to catch suspicious activity quickly.
  • The $250,000 limit applies per depositor per bank, so spreading money across multiple banks or credit unions increases your total coverage.

How FDIC and NCUA insurance actually works

When a bank becomes insolvent—meaning it cannot pay its debts—the FDIC steps in as the receiver. The FDIC does not take over the bank and run it; instead, it arranges for another bank to buy the failed bank's deposits and assets, or it pays depositors directly from the insurance fund. The process usually happens over a weekend so that depositors can access their money on Monday morning through the acquiring bank.

The FDIC insurance fund is built from premiums that banks pay quarterly, not from taxpayer money. Banks pay a small percentage of their deposits into the fund, which currently holds tens of billions of dollars. The fund has covered every failure since the FDIC was created in 1933; no depositor with balances under the limit has lost money to a bank failure in that time.

Credit unions use the same model through the National Credit Union Administration (NCUA). The NCUA Stabilization Fund operates identically to the FDIC insurance fund—it is built from credit union premiums and covers up to $250,000 per member per credit union. The coverage applies to all account types: savings, checking, money market, and certificates of deposit (CDs).

What the $250,000 limit actually covers and does not cover

The $250,000 limit is per depositor per institution. If you have a savings account and a checking account at the same bank, both balances count toward the same $250,000 limit. If you have $150,000 in savings and $120,000 in checking at Bank A, your total covered amount is $250,000 and you have $20,000 uninsured. If you move the $120,000 to Bank B, it becomes covered at Bank B because it is now at a different institution.

Joint accounts have their own coverage. If you and your spouse have a joint savings account with $300,000 at Bank A, the account is covered up to $250,000 as a joint account. Each of you also has separate coverage if you each have individual accounts at the same bank. So you could have $250,000 in a joint account, $250,000 in your individual account, and $250,000 in your spouse's individual account—all at the same bank, all fully covered.

Certain account types also have separate coverage. A savings account and a CD at the same bank are covered separately up to $250,000 each. A retirement account (IRA) at the same bank is covered separately up to $250,000. This separation exists because the accounts serve different legal purposes, not because they are physically separate.

What is not covered: money in investment accounts (stocks, bonds, mutual funds), money held in a brokerage account even if the brokerage fails, and money in accounts at institutions that are not banks or federally insured credit unions. If you keep cash in a safe deposit box at a bank, that cash is not insured by the FDIC—the box is just a storage space.

How to protect money above the insurance limit

If you have more than $250,000 to keep safe, the simplest approach is to spread it across multiple banks or credit unions. Open a savings account at Bank A with $250,000, Bank B with $250,000, and Bank C with the remainder. Each account is fully insured. This takes a few hours to set up and costs nothing.

You can also use a service called IntraFi (formerly Promontory Interbank Network), which automatically spreads your deposit across multiple banks behind the scenes. You deposit money into one account, and IntraFi divides it into $250,000 chunks at different banks, all insured. You see one balance and one login, but your money is actually held at multiple institutions. Some banks and credit unions offer this service directly; others require you to use a third-party platform.

Another option is to use a money market fund or short-term Treasury bills for amounts above the insurance limit. These are not insured like bank deposits, but they are backed by different mechanisms: money market funds hold short-term debt from stable institutions, and Treasury bills are backed by the U.S. government. These carry different risks than bank failure, so they are not a direct substitute for FDIC coverage.

What happens if your account is hacked or your card is stolen

If someone uses your debit card without permission, federal law (Regulation E) limits your liability. If you report the unauthorized transaction within two business days, you are liable for no more than $50. If you report it after two business days but within 60 days, you are liable for no more than $500. If you wait longer than 60 days, you may lose all the money that was taken.

The bank's fraud monitoring systems usually catch suspicious activity before you do. Most banks flag transactions that are geographically impossible (a charge in another country minutes after a local charge), that exceed your normal spending pattern, or that occur at unusual times. When the system flags a transaction, the bank either declines it or sends you an alert asking you to confirm it.

If your account is hacked through online banking, the same liability limits explore. If someone logs into your account and transfers money out, report it to the bank when ready. Write down the date and time you discovered it and the date and time you reported it; the bank will use these dates to determine your liability. Keep copies of all correspondence with the bank about the fraud.

How to monitor your account for unauthorized activity

Set up account alerts through your bank's app or website. Most banks let you choose alerts for transactions over a certain amount, transactions in specific categories (like online purchases or ATM withdrawals), or any transaction at all. Some banks send alerts by text message, email, or push notification—choose the method you check most frequently.

Review your account statement at least monthly, ideally more often. Log into your account yourself rather than clicking links in emails, because phishing emails can look identical to real bank emails. Check the transactions list for anything you do not recognize. If you see an unfamiliar charge, report it when ready rather than waiting for the statement to arrive.

Use a strong, unique password for your bank account—one you do not use anywhere else. If a data breach at another company exposes your password, attackers will try that password on your bank account. A password manager like Bitwarden or 1Password can generate and store strong passwords so you do not have to remember them.

Enable multi-factor authentication (MFA) on your bank account if the bank offers it. MFA means that even if someone has your password, they cannot log in without a second factor—usually a code sent to your phone or generated by an authenticator app. This is the single most effective way to prevent account takeover.

The difference between bank safety and investment risk

FDIC insurance protects you against bank failure, not against poor investment decisions. If your bank offers a savings account earning 4.5% and a CD earning 5.2%, both are equally safe from the bank's perspective—both are covered by FDIC insurance. The difference is the interest rate and the time you have to lock up your money, not the safety of the principal.

If your bank offers an investment product like a mutual fund or a brokerage account, that product is not covered by FDIC insurance. The investments themselves can lose value, and if the brokerage fails, your securities are protected by SIPC (Securities Investor Protection Corporation) up to $500,000 per account, but only against the brokerage's failure, not against market losses. If you buy a stock and it drops 50%, SIPC does not cover that loss.

A savings account is designed to be safe and liquid—you can withdraw your money anytime without penalty. The tradeoff is that the interest rate is usually lower than you could earn elsewhere. A CD is also FDIC-insured but locks your money for a set term (three months to five years) in exchange for a higher rate. Both are safe; they just serve different purposes.

Frequently Asked Questions

What happens to my money if my bank fails?

The FDIC arranges for another bank to buy your account, usually over a weekend. You can access your money through the new bank on Monday. If no bank buys your account, the FDIC pays you directly from the insurance fund. Either way, you receive your full balance up to $250,000.

Does FDIC insurance cover my online savings account?

Yes, as long as the online bank is FDIC-insured. Most online banks are insured; you can check by searching the bank's name on the FDIC's website. The insurance limit is the same $250,000 per depositor per bank, whether the bank is online-only or has physical branches.

If I have $500,000 across two banks, is all of it covered?

Yes. If you have $250,000 at Bank A and $250,000 at Bank B, both amounts are fully covered because the $250,000 limit applies per bank. The limit resets at each institution.

Can I lose money if my debit card is stolen?

Only if you wait more than 60 days to report it. If you report it within two business days, you are liable for no more than $50. Report it when ready by calling your bank or using the app.

Is my money safe from hackers if I use online banking?

Banks use encryption to protect data in transit, and fraud monitoring catches most unauthorized access. Your liability for hacking is capped at $50 if you report it within two business days. Enable multi-factor authentication for additional protection.