Bank account alerts are the automated notifications your bank or credit union sends when something happens in your account: a large purchase, a login from a new device, a balance dropping below a threshold you set. Setup takes about five minutes in your bank’s app, and the alerts themselves are almost always free. The real reason to turn them on is the legal clock. Report an unauthorized electronic transaction within two business days and your liability caps at $50. Wait too long and you could be liable for the full amount.1Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
Which Alerts Are Worth Turning On
Banks offer dozens of alert types, but a handful do the heavy lifting.
Large transaction alerts fire whenever a purchase, payment, or withdrawal exceeds a dollar amount you choose, often $200 or $500. These catch fraud fastest, because the notification arrives within seconds of the charge posting. If you only turn on one alert, make it this one.
Low-balance alerts warn you when available funds drop below a threshold you set, commonly $100 or $200. They’re your best defense against overdraft fees. Under Regulation E, a bank cannot charge you an overdraft fee on ATM or one-time debit card transactions unless you opted in to that coverage in advance, so a low-balance alert gives you time to transfer funds before any opt-in kicks in.2eCFR. 12 CFR 1005.17 – Requirements for Overdraft Services
Security alerts notify you when someone changes your password, logs in from an unrecognized device, or updates the contact information on your account. Banks aren’t legally required to send these, but most do because account takeover is among the fastest-growing fraud types. If one lands and you didn’t initiate the change, call your bank immediately using the number on the back of your card.
ATM withdrawal alerts focus on cash pulled at a machine, which is useful for joint account holders or anyone who rarely visits ATMs. Deposit alerts confirm when incoming funds post, including paychecks, wires, and Zelle payments. One caveat: a deposit notification doesn’t always mean the money is spendable. Federal rules let banks place holds on certain deposits, especially large checks, redeposited checks, and deposits into new accounts.3eCFR. 12 CFR Part 229 – Availability of Funds and Collection of Checks (Regulation CC) The alert tells you the deposit arrived, not that every dollar is available.
How to Set Up Alerts
Log into your bank’s mobile app or website and look for a section labeled “Alerts,” “Notifications,” or “Security Settings,” usually under your profile or account management menu. You’ll see a list of alert types with toggles. Turn on the ones you want, set your dollar thresholds, choose how you’d like to receive them, and save.
Before you start, confirm the phone number and email on file are current. Most banks verify them with a one-time passcode, and you can’t activate alerts on a channel you haven’t confirmed. If you have multiple accounts, you can usually set different rules for each. A $50 threshold that makes sense on checking will flood you with noise on a savings account you rarely touch.
None of this is permanent. Adjust thresholds, add alerts, or change channels whenever your situation changes. Traveling internationally and want tighter monitoring? Temporarily drop your large-transaction threshold to $25 and switch everything to push notifications.
Choosing a Delivery Channel
You generally have three options, and most people benefit from using more than one.
Text messages (SMS). They work on any phone and don’t need a data connection, so they’re reliable in areas with weak internet. The downside is that SMS messages are not encrypted in transit and can be intercepted through techniques like SIM swapping. NIST has classified SMS as a “restricted” channel for authentication because the security risks are expected to grow over time.4National Institute of Standards and Technology. NIST Special Publication 800-63B: Digital Identity Guidelines For balance and transaction alerts, SMS is fine. For anything carrying an authentication code, prefer a more secure channel.
Email. Creates a searchable record you can archive, and the notifications tend to carry more detail than texts. The risk is that email accounts are themselves targets. Someone who gets into your inbox can see your transaction history and use it for social engineering.
Push notifications. These come through your bank’s app over an encrypted connection tied to your device, so they’re generally the most secure of the three. Tap the notification and the app opens, so you can act on suspicious activity immediately. The drawback is that they only work when your phone has data or Wi-Fi, and they stop entirely if you uninstall the app or disable notifications in your phone settings.
Most banks don’t charge for alerts on any channel. Your carrier may apply standard text rates to SMS alerts, but unlimited plans have made that a non-issue for most people.
Keep Account Details Off Your Lock Screen
An alert that flashes your balance or a transaction amount on your lock screen is visible to anyone near your phone. On Android, open Settings, then Notifications, and find the “Privacy” or “Lock screen” option to hide sensitive content. On iPhones, open Settings, then Notifications, pick your banking app, and set “Show Previews” to “When Unlocked” or turn it off. You’ll still feel the notification buzz. You’ll just need to unlock the phone to see the detail.
How to Spot a Fake Bank Alert
Scammers send texts and emails that look nearly identical to real bank alerts. They’ll claim suspicious activity was detected and push you to click a link or call a number to “verify” your identity. The link leads to a convincing fake login page. People who’ve set up genuine alerts are actually better equipped to catch the fakes, because they know what their real alerts look like.
Signs a message is fraudulent:
- Urgency and threats. Phrases like “your account will be locked” or “immediate action required” are designed to make you react before thinking.
- Unfamiliar sender numbers. Legitimate bank texts come from short codes (five or six digits) that your bank publishes. A ten-digit number or an 800 number should raise suspicion.
- Shortened or odd URLs. Your bank links to its own domain, not bit.ly or something with extra characters.
- Requests for personal information. Your bank will not ask you to confirm a password, Social Security number, or full account number by text.
If you’re unsure, don’t tap anything in the message. Open your bank’s app directly, or call the number on the back of your debit card. You can report suspected scam texts by forwarding them to 7726 (SPAM) and filing a report at ReportFraud.ftc.gov.5Federal Trade Commission (FTC). How to Recognize and Report Spam Text Messages
What to Do When an Alert Flags Fraud
Getting an alert for a transaction you didn’t make is the moment the whole system earns its keep. How quickly you act determines how much money you could lose. Federal law sets three liability tiers for unauthorized electronic fund transfers, and each one hinges on how fast you notify your bank.
- Report within two business days of learning about the unauthorized transaction, and your maximum liability is $50, or the amount of the transfer, whichever is less.1Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- Miss the two-day window but report within 60 days of your bank statement, and your liability can rise to $500.1Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- Wait more than 60 days after the bank sends a statement showing the unauthorized transfer, and you can be liable for the full amount of any transfers that occur after that 60-day window.6Consumer Financial Protection Bureau. 12 CFR Part 1005 (Regulation E) – Liability of Consumer for Unauthorized Transfers
Without alerts, you might not notice an unauthorized $200 charge until your monthly statement arrives. With alerts, you see it in seconds and can call the bank the same day, keeping you firmly in the $50 tier. Extenuating circumstances like hospitalization or extended travel can extend these deadlines to a “reasonable” period, but counting on that exception is a gamble.
What to Do in the First Hour
Call your bank’s fraud department using the number on the back of your card or from your bank’s official website. Tell them the transaction was unauthorized and ask them to reverse it and freeze the compromised card or account. Do not use any phone number printed in the suspicious alert itself. That could connect you to the scammer.7Federal Trade Commission (FTC). What To Do if You Were Scammed
After the call, change your online banking password and scan recent transactions for other charges you don’t recognize. If you reused that password elsewhere, change those too. File a report at ReportFraud.ftc.gov if the fraud looks like part of a broader scam. Your bank will usually issue a provisional credit while it investigates.
Joint and Business Accounts
On a joint account, coordinate who gets what. If both owners receive every notification, you’ll both see each other’s spending in real time, which some couples find useful and others find intrusive. Most banks let each holder set alert preferences independently on a shared account. At minimum, both people should have large-transaction and security alerts on, so if one card is compromised, the other can catch it.
Business accounts often support more granular alerts, including notifications when an employee processes a transaction above a set amount or when a batch payment file is submitted. If your account offers role-based alerts, assign them to whoever manages daily cash flow. Speed matters even more here, because federal protections for business accounts are generally weaker than the consumer liability caps above.