Bank account hacked: what to do in the next hour

1. Call your bank immediately — use the number on the back of your card or the bank's official website, NOT a number from a suspicious email.

   More detail

   Why this matters: the faster you report, the more legal protection you have. In the US, federal law caps your liability at $50 if you report within 2 business days. How: flip your card over and call the number printed on it, or type your bank's URL into the address bar yourself. Never call a number that someone texted, emailed, or said over the phone.

2. Report any unauthorized charges or transfers.

3. Request the account be frozen or a new card issued.

   More detail

   Ask the bank to freeze the account or close the compromised card and issue a new one with a new number. This stops new fraudulent charges. Make sure they also re-route any legitimate auto-pays you have set up.

4. If you gave someone remote access or sent money via wire/gift card, report it as fraud immediately.

   More detail

   Wires, Zelle, gift cards, and crypto are very hard to reverse — but the first hour after sending matters. Ask the bank to attempt a recall and file an official fraud report. Keep transaction IDs, screenshots, and any messages from the scammer.

5. 🇿🇦 ZA

   Call your bank's fraud line right now. Standard 0800 222 050 · FNB 087 575 9444 · Absa 0860 557 557 · Capitec 0860 10 20 43 · Nedbank 0800 110 929 · TymeBank 0860 999 119 · Discovery via in-app chat. Ask them to freeze the card, reverse pending transactions, and block linked digital channels. Write down the reference number they give you.

   SABRIC
   More detail

   Honest answer first: instant-payment rails (PayShap, eWallet, Cash Send, immediate EFT) are largely irrecoverable once authorised. Card and traditional EFT have a better shot if you move fast.

6. 🇮🇪 IE

   Call your bank's 24/7 fraud line now and ask it to freeze the account, stop the payment and attempt a recall.

   AIB · 1800 24 22 27Bank of Ireland · 1800 946 764PTSB · +353 1 669 5851FraudSMART
   More detail

   Under the Payment Services Regulations 2018, a payment you did not authorise must generally be refunded by the end of the next business day, and your own liability is capped at €50 unless you were fraudulent or grossly negligent. The outer reporting limit is 13 months, so report fast.

1. Change your online banking password and enable 2FA.

   More detail

   Use a unique password (not used on any other site) and turn on two-factor authentication. Prefer an authenticator app over SMS — SIM-swap attacks can intercept text codes.

2. Review all recent transactions — look back 30–60 days.

3. Dispute any fraudulent charges in writing (keep a record).

4. Change the password on any email address linked to your bank.

5. If a debit card was compromised: change your PIN.

6. Alert your credit card company if a credit card was involved.

7. 🇺🇸 US

   File a report with the FTC.

   ReportFraud.ftc.gov
8. 🇺🇸 US

   If over $5,000 was stolen via wire fraud, file a report with the FBI.

   IC3.gov
9. 🇨🇦 CA

   Report to the Canadian Anti-Fraud Centre.

   1-888-495-8501antifraudcentre-centreantifraude.ca
10. 🇨🇦 CA

    Also report to your local RCMP detachment or the cybercrime portal.

    cybercrime.rcmp-grc.gc.ca
11. 🇿🇦 ZA

    Change your banking app password and your email password from a clean device. Check your email's sent folder for messages you didn't send.

12. 🇿🇦 ZA

    Remove any backup contact (email, cellphone) on your banking app that you don't recognise.

13. 🇿🇦 ZA

    If a debit order went off without authority, dispute it within 40 days at your bank — that's the South African debit-order dispute window.

14. 🇿🇦 ZA

    Report to SAPS Cybercrime and SABRIC. Get an OB number from the police — banks usually require one for fraud investigations.

    SAPS CybercrimeSABRIC
15. 🇮🇪 IE

    Report at your local Garda station and ask for the PULSE incident number — your bank will want it.

    Garda station directory
    More detail

    Ireland has no national online fraud-reporting portal. Bring copies of emails, texts, account details and screenshots.

1. 🇺🇸 US

   Place a fraud alert on your credit file (free — one alert covers all three bureaus).

2. 🇺🇸 US

   Place a credit freeze at all three bureaus.

   EquifaxExperianTransUnion
3. 🇺🇸 US

   Pull your free credit report — look for unfamiliar accounts.

   AnnualCreditReport.com
4. 🇺🇸 US

   Consider an IRS Identity Protection PIN.

   IRS Identity Theft
5. 🇨🇦 CA

   Place a fraud alert with both Canadian credit bureaus (must contact each separately).

   Equifax Canada · 1-800-465-7166TransUnion Canada · 1-800-663-9980
6. 🇨🇦 CA

   Pull your free credit report from both Canadian bureaus — look for unfamiliar accounts.

   Equifax CanadaTransUnion Canada
7. 🇨🇦 CA

   Note: Canada doesn't have a formal credit freeze system, but fraud alerts flag lenders to verify your identity before approving credit.

8. 🇨🇦 CA

   File a complaint with the Financial Consumer Agency of Canada (FCAC) if your bank is unresponsive.

   FCAC

9. Sign up for credit monitoring (many banks offer this free).

10. 🇿🇦 ZA

    Apply for free SAFPS Protective Registration — flags your ID so lenders verify you in person before opening new credit.

    safps.org.za011 867 2234
11. 🇿🇦 ZA

    If the bank stalls, escalate to the Ombudsman for Banking Services — free, independent, binding on banks within their limits.

    OBSSA
12. 🇮🇪 IE

    If the bank refuses to refund you, ask in writing for its final response letter (it has 40 working days), then complain free of charge to the Financial Services and Pensions Ombudsman.

    FSPO · 01 567 7000
    More detail

    If you were tricked into making the payment yourself, be ready for a harder fight — Ireland has no legal reimbursement right for those scams. Ask the bank what it did to warn you, whether it ran a Verification of Payee name check, and whether it tried to recall the funds.

1. Monitor bank and credit card statements weekly.

2. Set up transaction alerts (email/SMS for every charge).

3. 🇺🇸 US

   Check your credit reports regularly (free weekly at AnnualCreditReport.com).

4. Check your Equifax & TransUnion Canada reports regularly (free annually).

5. Keep your credit freeze / fraud alert in place until you're confident the threat is resolved.

6. 🇿🇦 ZA

   Treat instant-payment requests (PayShap, eWallet) the same way you'd treat a cash handover: verify the recipient by voice before sending, and never act on a 'please send' WhatsApp without calling first.

Related situations