Bank accounts are one of the most commonly reported accounts involved in identity crimes, as reported to the Identity Theft Resource Center (ITRC). Here are some steps that you can take to protect your bank account and make it harder for identity thieves to get access.
Before an Exposure
If your bank account has been well protected up to this point, this list will highlight all the possible steps that can be taken to protect your account. You may want to consider taking any additional steps to protect your bank account that you have not taken yet.
To protect:
Your Account Number
- Ensure any documents with your full account number (applications, checks, etc.) are stored in a locked, fireproof safe or shredded with a cross-cut shredder.
- Know the level and type of security used for any online accounts that store your bank account number, and ensure only the last four numbers (if any) are displayed.
- Only enter your bank account number on known, secure websites.
- Do not give out your account number over the phone.
Access to Your Bank Account
By phone:
- Add a unique PIN code or passcode (different than the last four digits of your Social Security number) that must be given to speak with a representative. Store the PIN or passcode in a secure place if you cannot remember it.
Online:
- Use a unique username and passphrase to access your online account.
- Enable multifactor authentication, preferably by using an authentication app.
- Use biometric authentication (facial recognition or fingerprint) to access your account if you are accessing it via phone or laptop with biometric capabilities.
- If possible, set up unique security questions where only you would know the answer. If you have a way to remember them, use incorrect answers so they will not be guessed.
Your Debit Card
- Ensure any documents with your full debit card number (applications, etc.) are stored in a locked, fireproof safe or shredded with a cross-cut shredder.
- Know the level and type of security used for any online accounts that store your debit card number, and ensure only the last four numbers (if any) are displayed.
- Only use your debit card on known, secure websites or at trusted establishments.
- When swiping your card in a card reader, particularly at gas stations and ATMs, ensure the card reader is secure. If you are unsure, go inside to swipe your card.
- Set up notifications to be notified when your debit card is being used and for what transactions.
- Only carry your debit card when needed.
- Do not give out your debit card number over the phone.
After a Compromise
Once your bank account information has been compromised, it is critical to change the account information as soon as possible before the bad actor attempts to use it.
If someone has accessed:
Your Account Number
- Contact your financial institution and ask to transfer funds to a new account with a new account number. Ask how this will impact the debit card linked to this account.
- Take the steps listed under Before an Exposure to protect your bank account.
Your Online Bank Account Login
- If possible, change your username and password. At a minimum, change your password.
- Take the steps listed under Before an Exposure.
Your Debit Card
- Contact your financial institution and request a new debit card with a new number. If only your debit card number were compromised, this should not impact your bank account number. However, you may also want to speak with your financial institution about your bank account number.
- Take the steps listed under Before an Exposure to protect your bank account.
Contact the ITRC
If you have questions about any of the steps above, contact an ITRC Advisor. If you have taken all the steps above and find that you are a victim of identity misuse involving your bank account, see our document titled How Do I Recover from an Identity Crime Involving a Bank Account? You can also contact an ITRC Advisor for a customized plan to assist you with recovering your bank account.
You can speak with an expert advisor toll-free by calling or texting 888.400.5530 or visiting our website to live chat during our regular business hours, Monday-Friday, 6 a.m.-5 p.m. PST. You can leave a message for an advisor if you contact us outside of our business hours, and we will respond the next business day. Just visit www.idtheftcenter.org to get started.