Protecting your money in the bank comes down to two separate jobs: making sure the institution holding it is federally insured so a failure can’t wipe you out, and making sure no one else can reach into your accounts. Federal deposit insurance is automatic and free at any participating bank or credit union, covering up to $250,000 per depositor, per institution, per ownership category. Fraud protection is on you, and the law rewards speed: report unauthorized activity fast enough and your liability can be zero.
Confirm Your Bank Is Actually Insured
Before you put serious money anywhere, verify the institution. The FDIC’s BankFind Suite lets you search by name to confirm membership and pull up the bank’s history.1FDIC.gov. Data Tools For credit unions, the NCUA’s Credit Union Locator does the same job, and share insurance from the NCUA matches FDIC coverage dollar for dollar at $250,000.2NCUA. Share Insurance Coverage
This step matters most for online-only banks and fintech apps. Some financial technology companies partner with an insured bank to hold customer deposits. Others don’t. If the app can’t name a partner bank and give you that bank’s FDIC certificate number, treat your balance there as uninsured until proven otherwise.
What Deposit Insurance Covers, and What It Doesn’t
The $250,000 limit is set by federal statute and has not changed since 2008.3FDIC.gov. Section 11 – Insurance Funds It applies to standard deposit products: checking, savings, money market deposit accounts, certificates of deposit, and cashier’s checks or money orders the bank has issued.
It does not apply to stocks, bonds, mutual funds, annuities, life insurance policies, crypto assets, U.S. Treasury securities, or the contents of a safe deposit box. Banks routinely sell investment products in their lobbies, and customers sometimes assume the FDIC logo on the door covers everything sold inside. It doesn’t. If a bank employee sells you a mutual fund or annuity, that money is exposed to market risk regardless of whether the bank itself is insured.4FDIC.gov. Understanding Deposit Insurance
Getting More Than $250,000 Insured at One Bank
The limit is per ownership category, not per account, so one person can hold well over $250,000 at a single bank if the accounts are legally structured differently.
A single-owner account gets $250,000. A joint account covers each co-owner up to $250,000 for their share, so two people sharing a joint account are insured for a combined $500,000, separate from any individual accounts they each hold.5FDIC.gov. Joint Accounts A married couple can hold $250,000 each in individual accounts plus $500,000 in a joint account at the same bank and have all $1 million insured.
Naming beneficiaries adds another category. Under rules that took effect April 1, 2024, the FDIC combined informal payable-on-death accounts, formal revocable trusts, and irrevocable trusts into a single trust category. Coverage equals $250,000 per eligible beneficiary, capped at $1,250,000 per owner when you name five or more beneficiaries.6FDIC.gov. Trust Accounts Eligible beneficiaries must be living people, recognized charities, or qualifying nonprofits.
If none of that suits your situation, deposit sweep networks handle the problem for you. Services like IntraFi’s ICS and CDARS work through one participating bank, splitting a large deposit into pieces under $250,000 and placing them across a network of member banks. You see a single statement, but each receiving bank holds a slice small enough to be fully insured.7IntraFi. ICS and CDARS Some brokerages run similar bank sweep programs for uninvested cash in investment accounts, distributing balances across multiple insured partner banks.8Investor.gov U.S. Securities and Exchange Commission. Cash Sweep Programs for Uninvested Cash in Your Investment Accounts
What Happens If the Bank Fails
Bank failures are uncommon, and the process is designed to be quiet from your end. Federal law requires the FDIC to pay insured deposits “as soon as possible” after a failure, with a stated goal of two business days.9FDIC.gov. Payment to Depositors
Usually the FDIC arranges for a healthy bank to take over the failed institution’s deposits. You become a customer of the new bank right away, direct deposits redirect automatically, and branches typically reopen the next business day. When no acquirer steps in, the FDIC pays you directly by check up to your insured balance, generally within a few days. Outstanding checks and automatic payments drawn on the closed bank will bounce, so you need new payment arrangements quickly.9FDIC.gov. Payment to Depositors
Money above the insurance limit is a different story. Uninsured depositors become creditors of the failed bank and may recover some or all of their excess as the FDIC liquidates assets, but that takes time and recovery is not guaranteed.
Lock Down Access to Your Accounts
Insurance won’t help if someone logs in as you. Turn on multi-factor authentication on every financial account. Most banks offer several options: one-time codes by text message, authentication apps that generate time-sensitive codes, biometric verification, or physical security keys. Authentication apps and security keys are stronger than SMS because they aren’t tied to a phone number that can be stolen.
Use a unique, complex password for each financial account and keep them in a password manager. Reused passwords are the fastest way in: when a retailer gets breached, attackers try the same credentials on banking sites within hours. Add a secondary email and a verified phone number to your bank profile so you have recovery options if your primary credentials get compromised.
SIM Swap Attacks
A SIM swap happens when a criminal convinces your wireless carrier to move your phone number to a device they control. Once they have the number, they intercept the text codes your bank sends. The FCC adopted rules requiring wireless providers to verify a customer’s identity through secure authentication before making any SIM change, and those methods can’t rely on easily obtained information like date of birth or recent payment history.10Federal Register. Protecting Consumers from SIM-Swap and Port-Out Fraud
Your own defenses matter more. Call your wireless carrier and ask about a PIN or account lock on SIM changes. Where you can, switch your bank’s two-factor login from SMS to an authenticator app so your phone number is no longer part of the equation.
Your Liability When Fraud Hits
How much you owe after unauthorized activity depends heavily on which card was used and how fast you reported it. The gap between debit and credit is large enough that it should shape which card you use day to day.
Debit Cards and Bank Accounts
Regulation E governs unauthorized electronic fund transfers. Your liability turns on timing:11eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
- Notify the bank within two business days of learning the card was lost or stolen: liability capped at $50.
- Notify after two days but within 60 days of the statement showing the unauthorized transfer: liability up to $500.
- Notify after 60 days from the statement date: potentially unlimited liability for transfers the bank can show would have been prevented by timely reporting.
One exception favors you. When only your card number is stolen and the physical card stays with you, the $50 and $500 tiers don’t apply. Report within 60 days of the statement and your liability is zero. Miss that window and you’re exposed to unlimited liability for fraudulent transfers occurring after the deadline.11eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
Credit Cards
Credit cards give you more protection. Federal law caps liability for unauthorized credit card charges at $50, and that $50 applies only to charges made before you notify the issuer. Once you report the card compromised, liability for anything after is zero.12Office of the Law Revision Counsel. 15 USC 1643 – Liability of Holder of Credit Card Most major issuers voluntarily waive even the $50, but the statute is the guaranteed floor.
The practical point: a fraudulent debit charge pulls cash out of your checking account and you have to fight to get it back, potentially leaving bills short in the meantime. A fraudulent credit charge never touches your bank balance. For online purchases especially, credit is the safer instrument.
Alerts Beat Statements
Turn on real-time push notifications for every transaction on your accounts. Most banks let you set alerts for purchases above a threshold, international transactions, profile changes, or new payees added. These alerts are your early warning system, and the speed of your response is exactly what Regulation E measures.
Review statements within a few days of receiving them, not whenever you get around to it. The 60-day clock for reporting unauthorized transfers starts when the bank sends the statement, not when you open the envelope or email.11eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E) A fraudulent charge on a January statement that you first notice in April is already past the deadline.
Cash Deposits: Don’t Try to Fly Under the Radar
Federal law requires banks to file a Currency Transaction Report for any cash transaction over $10,000 in a single day, including deposits, withdrawals, and multiple cash transactions that add up to more than $10,000.13FinCEN. Notice to Customers – A CTR Reference Guide The report goes to the Financial Crimes Enforcement Network as a matter of routine anti-money-laundering compliance. It’s not an accusation and doesn’t trigger an audit on its own.
Deliberately splitting a large cash deposit into smaller pieces to stay under the threshold is a separate federal crime called structuring, punishable by up to five years in prison. In aggravated cases involving other illegal activity or more than $100,000 over a 12-month period, the maximum doubles to ten years.14Office of the Law Revision Counsel. 31 USC 5324 – Structuring Transactions to Evade Reporting Requirement Prohibited People get caught on this more innocently than you might expect. If you’re depositing $15,000 in legitimate cash, deposit it all at once. A pattern of just-under-$10,000 deposits is exactly what investigators look for.
Don’t Let Accounts Go Dormant
A bank account with no activity and no customer contact will eventually be classified as dormant. Many institutions flag accounts after roughly 12 months of inactivity. At that point the bank may stop sending statements, charge maintenance fees, or restrict the account.
If inactivity continues long enough, state unclaimed property laws require the bank to hand the funds over to the state. Dormancy periods vary by jurisdiction and account type, typically three to five years. You can still reclaim the money by filing with the state’s unclaimed property office, but the process adds bureaucratic steps. Log in at least once a year, or run a small transaction, and the problem never starts.