Yes, a bank can take money from your account without asking you first, but only in a limited set of situations: disclosed fees you agreed to in the account agreement, a right of setoff when you owe the same bank on a loan, and legal orders like IRS levies or court-ordered garnishments. Anything outside those categories — a stranger draining your debit card, a double-posted charge, an overdraft fee you never opted into — is disputable, and federal law gives you strong tools to get the money back if you act quickly.
When the Bank Is Allowed to Withdraw Without Asking
Fees Buried in Your Account Agreement
Banks are permitted to charge service fees — monthly maintenance charges, low-balance penalties, out-of-network ATM surcharges, inactivity fees on dormant accounts — as long as they disclosed those fees when you opened the account.1Office of the Comptroller of the Currency. The Bank Is Charging High Service / Activity / Maintenance Charges / Bank Fees on My Checking Account The withdrawal you don’t remember authorizing may be one you agreed to in the fine print.
Overdraft fees are the exception that trips many people up. Before a bank can charge you a fee for covering an ATM withdrawal or one-time debit card purchase that exceeds your balance, it must get your clear, affirmative consent to enroll in overdraft coverage. Without that opt-in, the bank should simply decline the transaction and charge nothing.2Consumer Financial Protection Bureau. Consumer Financial Protection Circular 2024-05 – Improper Overdraft Opt-In Practices If overdraft fees are showing up on an account you never opted in, that’s a violation worth disputing.
Right of Setoff When You Owe the Same Bank
If you have a loan, line of credit, or past-due debt at the bank where you also keep deposits, the bank may be able to reach into your checking or savings and take what you owe. This is called the right of setoff. It’s almost always written into the account agreement you signed, and the bank doesn’t need a court order or advance warning to use it. You may find out only when the balance drops or a payment bounces.
Setoff generally requires that the debt is past due and that the debt and the account are in your name at the same institution. Joint accounts get complicated: whether the bank can seize funds from a joint account to cover one holder’s individual debt depends on the account agreement and state law.
There’s one firm federal limit. A credit card issuer cannot offset your credit card balance against funds in a deposit account at the same bank.3eCFR. 12 CFR 1026.12 – Special Credit Card Provisions If you’re behind on a bank-issued credit card, the bank has to collect it the way any other creditor would. The rule applies specifically to credit cards; personal loans and lines of credit from the same bank remain fair game for setoff.
If you think a setoff was improper, pull your loan agreements and account disclosures. Confirm the debt is actually past due, that the agreement authorizes setoff, and that the bank didn’t take funds that are exempt (Social Security being the most common). If any of those conditions wasn’t met, you have grounds to push back.
Garnishments and Tax Levies
A garnishment or levy is a legal order from a court or government agency telling the bank to freeze your money and hand it over to someone you owe. The bank has no discretion. Once a valid order arrives, it must comply. Common triggers are unpaid federal or state taxes, child support arrears, and judgments from lawsuits.
With an IRS levy, the bank freezes the funds in the account the moment it receives the levy, then waits 21 days before sending the money to the IRS. That window exists so you can resolve the debt, set up a payment plan, or flag an error.4Internal Revenue Service. Information About Bank Levies The levy normally reaches only funds in the account on the date it’s received; deposits that land afterward usually aren’t affected.
For a civil judgment, the creditor gets a writ of garnishment from a court, and the bank must freeze funds up to the judgment amount. You’ll typically receive notice and an opportunity to claim exemptions, though the timing varies by state.
Federal Benefits That Can’t Be Touched
Certain government payments are shielded from most garnishments and levies. When a bank receives a garnishment order, it must look back at the account’s deposit history over the prior two months for protected federal benefits. If any are there, the bank must leave accessible to you the lesser of your current balance or two months’ worth of those benefit deposits — no freeze, no seizure.5eCFR. 31 CFR Part 212 – Garnishment of Accounts Containing Federal Benefit Payments
The protected deposits include:
- Social Security and Supplemental Security Income (SSI)
- Veterans benefits
- Railroad retirement and railroad unemployment insurance benefits
- Federal employee retirement benefits under CSRS and FERS
You don’t need to file paperwork for the protection to apply. The bank is supposed to identify and shield the deposits automatically. Errors happen, though. If you receive protected benefits and your whole account was frozen, contact the bank right away and point to the direct deposits on your statement.
When a Withdrawal Isn’t Authorized
Everything outside the categories above — stolen debit card charges, drained online banking, payment-app fraud, double-posted purchases, a wrongful setoff — is a withdrawal the bank can be made to reverse. The rules depend on how the money left.
Electronic Transfers: Regulation E
Regulation E is the federal rule governing unauthorized electronic fund transfers, and it’s the strongest tool you have when fraud hits your account. It covers debit card transactions, ACH transfers, ATM withdrawals, and transfers through payment apps.6Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs The CFPB has confirmed that fraud through bank-provided or third-party payment apps like Zelle, Venmo, or Cash App — when a thief hacks your account or steals your credentials and pushes money out — falls under the same federal protections.
An electronic transfer counts as unauthorized when someone other than you initiated it without permission and you didn’t benefit from it.7eCFR. 12 CFR 1005.2 – Definitions One important catch: if you voluntarily gave someone your debit card or login, transfers that person makes are not treated as unauthorized until you tell the bank to revoke their access. Transfers you made by mistake also don’t qualify.
How Fast You Report Controls How Much You Lose
Regulation E caps your liability on a sliding scale tied directly to the speed of your report:
- Within 2 business days of learning of the theft: your maximum liability is the lesser of $50 or the total unauthorized transfers before you notified the bank.
- After 2 business days but within 60 days of the statement being sent: your liability can climb to $500.
- After 60 days from the statement date: unlimited liability for unauthorized transfers that occur from day 61 onward. The bank can refuse to reimburse any losses in that later window.
Those numbers come straight from the regulation, and they apply regardless of the dollar amount stolen.8eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers Most people who lose money to fraud lose it here, not because the law failed them, but because they didn’t check their statements in time.
Once you report, the bank must investigate promptly and reach a conclusion within 10 business days. If it needs more time, it must give you a provisional credit for the disputed amount within those same 10 business days so you have access to the funds while the review continues. The full investigation must wrap within 45 days, and findings must be reported to you within three business days of completion.9eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors Point-of-sale debit card disputes and foreign-initiated transfers get a longer 90-day investigation window, and new accounts get extended timelines on both ends.
Check Fraud: A One-Year Clock
Paper checks don’t fall under Regulation E. Unauthorized check transactions — including check washing, where a thief alters the payee or amount — are governed by the Uniform Commercial Code. The UCC puts a duty on you to review your statements with reasonable promptness and report any unauthorized signatures or alterations.10Cornell Law School. Uniform Commercial Code 4-406 – Customer’s Duty to Discover and Report Unauthorized Signature or Alteration
The hard deadline is one year. If you don’t discover and report an unauthorized signature or alteration within one year of the statement being made available, you lose the right to assert the claim against the bank entirely.10Cornell Law School. Uniform Commercial Code 4-406 – Customer’s Duty to Discover and Report Unauthorized Signature or Alteration
Wire Transfers
Wire transfers follow a third set of rules under UCC Article 4A. If the bank accepts a payment order that wasn’t authorized by you, it generally must refund the payment. You have to discover and report the unauthorized wire within a reasonable time, which cannot exceed 90 days after the bank notified you the order was accepted or your account was debited.11Legal Information Institute (Cornell Law School). Uniform Commercial Code Article 4A – Funds Transfer The security procedures in your agreement can also affect who bears the loss if the fraudster slipped through an agreed verification.
How to Dispute the Withdrawal
Lock the Account Down First
Change your online banking password and PIN. If a debit card was involved, ask the bank to cancel it and send a replacement. Turn on two-factor authentication if it isn’t already on. Stop the next unauthorized transfer before you deal with the one that already happened.
Call the Bank — An Oral Report Is Enough
Call as soon as possible. Under Regulation E, an oral report is enough to trigger the bank’s investigation duty; the bank cannot wait for a written notice before starting its review.9eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors Write down the date, time, and name of the representative you speak with.
The bank may ask you to follow up with a written confirmation within 10 business days. Do it even if nobody asks. A written record protects you if the bank later claims no report was made. Your letter should include your name, account number, the dollar amount and date of the disputed transaction, and why you believe it was unauthorized. Send it by certified mail with return receipt.
Reporting within two business days of learning about the fraud is the single most important step. It’s the difference between a $50 ceiling on your liability and a $500 one.8eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
Build a Paper Trail
Documentation to collect:
- Bank statements showing the unauthorized debit
- Correspondence proving you didn’t initiate the charge
- A police report, if the withdrawal involved criminal fraud
- An FTC Identity Theft Report from IdentityTheft.gov, if someone used your personal information
If the dispute is over a setoff rather than fraud, gather your loan agreements and account disclosures to show whether the setoff was authorized under contract and whether any exempt funds were taken. For a garnishment or levy, request a copy of the court order or IRS notice the bank acted on.
If the Bank Denies Your Claim
When the bank concludes no error occurred, it must give you a written explanation within three business days and let you know you can request the documents it relied on.9eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors Request them. Denials often rest on IP address logs, device fingerprints, or geolocation data that can be explained or challenged once you see what the bank is holding.
If the bank won’t reverse course, file a complaint with the Consumer Financial Protection Bureau through its online portal. The CFPB forwards complaints to the bank, and most banks respond within 15 days.12Consumer Financial Protection Bureau. Submit a Complaint A federal agency forwarding your complaint tends to get more attention than another call to customer service. You can also complain to the Office of the Comptroller of the Currency for national banks and federal savings associations, or to the FDIC or your state banking department for state-chartered banks.13OCC. Consumer Protection
Before you think about suing, check your account agreement for a mandatory arbitration clause. Many banks include one, which means you may have waived the right to go to court when you opened the account. If no arbitration clause applies, or if it has a small-claims carve-out, small claims court is a practical venue for unauthorized withdrawals: filing fees are low, no lawyer is required, and state dollar limits generally run from $5,000 to $25,000.
When a Bank’s Mistake Causes Bounced Payments
If a wrongful withdrawal — a bank mistake, an improper setoff, or slow error resolution — leaves your account short and causes legitimate checks or payments to bounce, the bank may owe you more than just the original amount. Under the UCC, a bank that wrongfully dishonors a check or payment that should have gone through is liable for actual damages you can prove, including bounced-check fees charged by the payee, late payment penalties, and even consequences such as an arrest or prosecution that resulted from the dishonor.14Legal Information Institute (Cornell Law School). Uniform Commercial Code 4-402 – Bank’s Liability to Customer for Wrongful Dishonor
Recovering those damages takes documentation. Save every late fee notice, every creditor letter, and every record of harm that followed the bank’s error. The bank won’t volunteer to pay consequential damages. You present the evidence and demand it, or you pursue it through a formal complaint or in court.