Yes, more than one person or entity can legally withdraw money from your bank account: a joint account holder, a creditor with a court judgment, the IRS, a merchant you’ve signed up for automatic payments, and anyone you’ve named as your agent under a power of attorney. Anyone outside that group who takes funds is committing an unauthorized transfer, and federal law limits how much you lose only if you report it fast.
Who Has Legal Access to Your Account
Access to your money comes from one of a few sources: shared ownership, a court or tax authority order, a payment authorization you signed, or a legal document naming an agent. Each carries different rules about how much can be taken and what warning you get.
Joint Account Holders
Anyone named on a joint bank account has full access to the entire balance. A co-owner can withdraw every dollar without asking the other person, regardless of who deposited the money. The bank treats both names as equal owners with identical authority to write checks, transfer funds, and close the account. That authority comes from the signature card both parties sign when the account is opened.
Shared ownership also means shared liability. If one co-owner overdraws the account, both owners are responsible for the negative balance. Either co-owner’s consent to overdraft coverage counts as consent for the entire account, and either can revoke it.1Consumer Financial Protection Bureau. 12 CFR 1005.17 – Requirements for Overdraft Services Before adding someone to your account, understand that you are giving them unrestricted control and taking on responsibility for their transactions.
Most joint accounts include a right of survivorship, which means the balance passes to the surviving co-owner outside probate when one holder dies.
Merchants You’ve Authorized for Recurring Payments
Merchants and service providers can pull money through the Automated Clearing House network when you sign up for recurring payments like utility bills, insurance premiums, or subscriptions. Federal law requires that preauthorized transfers from your account be authorized in writing, and the company collecting payment must give you a copy of that authorization.2Office of the Law Revision Counsel. 15 USC 1693e – Preauthorized Transfers
Your bank processes these transactions automatically based on the merchant’s request. It does not verify each charge or confirm that the amount matches your latest bill. That makes it possible for an incorrect or excessive charge to clear without the bank catching it, so review your statements often.
Agents Under a Power of Attorney
A power of attorney (POA) is a legal document that lets you appoint someone, called an agent, to handle your financial affairs. A general POA gives broad authority over banking, investments, and property. A limited or special POA restricts the agent to specific tasks or a single account. A durable POA remains in effect if you become incapacitated; without the “durable” label, a POA terminates the moment you lose the capacity to make your own decisions.
An agent with a valid POA can sign checks, move funds between accounts, and make withdrawals just as you would. The agent has a fiduciary duty to act in your interest, not their own. Banks review POA documents carefully before granting access, typically examining the original or a certified copy to confirm it meets state-law requirements like notarization and witnesses. A bank can refuse a POA if it suspects the agent lacks authority for the transaction, if it suspects exploitation, or if the document is improperly notarized, outdated, or non-durable when you are incapacitated.
A payable-on-death beneficiary is worth mentioning only to rule out: that person has zero access to your money while you’re alive. The designation activates when you die, and the beneficiary claims the funds by presenting a death certificate.
What Creditors and the IRS Can Take
A creditor who wins a court judgment against you can force your bank to hand over funds through a bank levy. Once the bank receives the court order, it freezes assets in your account up to the amount of the debt and typically holds those funds for a waiting period, often 15 to 21 days depending on state law, during which you can claim that some or all of the money is exempt. After that window closes, the bank sends the frozen funds to the creditor. Banks commonly charge a processing fee for handling a levy.
IRS Levies
The IRS has broader power than most creditors because it can levy your account without first going to court. Federal law authorizes the IRS to seize property, including bank deposits, to collect unpaid taxes through an administrative process rather than a lawsuit.3Internal Revenue Service. IRM 5.17.3 Levy and Sale The IRS must send a notice of intent to levy at least 30 days before seizing funds, but it does not need a judge’s approval. Certain amounts are exempt based on your filing status and number of dependents, and the IRS publishes those exempt amounts annually.4Internal Revenue Service. Publication 1494 – Tables for Figuring Amount Exempt From Levy
Federal Benefits Are Protected
When a bank receives a garnishment order, federal regulations require it to review the account to determine whether a federal agency deposited benefit payments within the prior two months.5eCFR. 31 CFR 212.5 – Account Review Protected payments include Social Security, Supplemental Security Income, veterans benefits, Railroad Retirement benefits, and federal employee retirement benefits.6eCFR. 31 CFR Part 212 – Garnishment of Accounts Containing Federal Benefit Payments If the bank identifies protected deposits, it must keep those funds available to you and cannot freeze them in response to the order. The bank must also notify you within three business days of its review, explaining which funds are protected and how much has been frozen.
Wages get some protection before they hit your account. Federal law caps ordinary consumer-debt garnishment at the lesser of 25 percent of your disposable weekly earnings or the amount by which those earnings exceed 30 times the federal minimum hourly wage.7Office of the Law Revision Counsel. 15 USC 1673 – Restriction on Garnishment Some states shield an additional amount held in your bank account regardless of source.
Stopping a Recurring Payment You Authorized
You have the right to stop any preauthorized transfer by notifying your bank at least three business days before the next scheduled payment. Notice can be oral, but the bank may require written follow-up within 14 days; if you don’t confirm in writing, the stop-payment order expires after those 14 days.2Office of the Law Revision Counsel. 15 USC 1693e – Preauthorized Transfers A written stop-payment order generally lasts six months and can be renewed for additional six-month periods.8Legal Information Institute. UCC 4-403 – Customer’s Right to Stop Payment You do not need to notify the merchant for the stop-payment order to take effect at the bank, but contacting the merchant separately creates a paper trail and can prevent billing disputes.9HelpWithMyBank.gov. How Can I Stop a Preauthorized Debit From Being Paid From My Checking Account? If a charge goes through despite a valid stop-payment order, the bank is generally liable for the amount.
Revoking a Power of Attorney
You can revoke a POA at any time as long as you are mentally competent. Revocation typically requires a signed, notarized written notice. After revoking, deliver a copy of the revocation directly to your bank so it stops accepting the former agent’s instructions. Until the bank receives that notice, it may keep honoring transactions from the agent in good faith.
If Someone Withdraws Money Without Permission
How much you lose from an unauthorized electronic withdrawal depends on how fast you report it. Federal law sets three liability tiers:
- Report within two business days of learning your card was lost, stolen, or used without permission, and your maximum liability is $50.
- Report after two business days but within 60 days of the statement showing the transfer, and your liability can rise to $500.
- Report after 60 days from when the statement was sent, and you could be responsible for the full amount of unauthorized transfers that occur after that 60-day window, with no cap.
These limits come from the Electronic Fund Transfer Act’s implementing regulation.10eCFR. 12 CFR 205.6 – Liability of Consumer for Unauthorized Transfers Check your statements often and report anything suspicious the moment you spot it.
How the Bank Must Investigate
Once you notify your bank of an unauthorized transfer, it must investigate and resolve the issue within 10 business days. If the bank cannot finish in that time, it can extend the review to 45 days, but only if it provisionally credits your account for the disputed amount within those initial 10 business days.11eCFR. 12 CFR 205.11 – Procedures for Resolving Errors The bank may withhold up to $50 of the provisional credit if it reasonably believes an unauthorized transfer occurred and has met certain notice requirements. For some transaction types, the investigation period can extend to 90 days.
After completing the investigation, the bank must report its findings to you within three business days. If it determines an error occurred, it must correct the account within one business day. If it concludes no error happened and reverses a provisional credit, it must explain why and give you the documents it relied on if you ask.
Steps to Protect Your Account
Removing a joint account holder generally requires that person’s consent. State law and the account agreement typically require both parties to agree to the change.12Consumer Financial Protection Bureau. Can I Remove My Spouse From Our Joint Checking Account? If the other person won’t cooperate, the practical route is opening a new individual account, moving your funds, and then working with the bank to close the joint account.
For merchants that keep charging after you’ve canceled, contact the bank at least three business days before the next scheduled payment to place a stop-payment order, and revoke the authorization with the merchant in writing.9HelpWithMyBank.gov. How Can I Stop a Preauthorized Debit From Being Paid From My Checking Account?
Turn on transaction alerts through your bank’s app so you get real-time notifications for withdrawals. Use unique, strong passwords for online banking and enable two-factor authentication where it’s offered. Your bank will never ask for your full password, so treat any unsolicited request for account numbers, PINs, or login details as a scam. Review your statements at least monthly, and report anything you don’t recognize within two business days to keep your liability at the $50 floor.