What Should I Do If I Think My Bank Account Has Been Hacked?

November 3, 2026

We might argue that this is the worst feeling. You open your banking app and see a charge you don’t recognize. Or you get an alert about a login you didn’t make, or a text asking you to “verify” your account. Your first thought is probably what do I do now?

Here’s the good news: if you act quickly, you can usually stop the damage and get your money back. This guide covers what to do, step by step, if you think your bank account or debit card has been compromised.

TLDR: Contact your credit union or bank right away, lock or cancel your debit card, change your online banking password, review your recent transactions and report anything unauthorized. The sooner you act, the more you’re protected.

Signs Your Bank Account or Debit Card May Be Compromised

Not sure whether you’ve been hacked? Watch for these warning signs:

Charges or withdrawals you don’t recognize, even small ones (scammers often test a card with a $1 purchase first)
Login alerts or password-reset emails you didn’t request
You suddenly can’t log in to online banking
Changes to your contact info, such as your email, phone number or mailing address, that you didn’t make
New payees or transfers you didn’t set up
Calls, texts or emails “from your bank” asking you to confirm your account number, PIN or a one-time code

If any of these sound familiar, don’t wait to see whether it happens again. Take the steps below now.

Step 1: Contact Your Bank or Credit Union Immediately

This is the most important step. Call your credit union or bank directly using a number you trust, such as the one on the back of your card, on your statement or on the official website. Never use a phone number from a text or email you received, because it could lead straight to the scammer.

Calhoun Liberty Credit Union members can call us at (850) 674-4527 or contact us online. We can help you:

Block or replace your debit card
Review recent activity with you
Start a dispute for unauthorized transactions
Secure your account against further access

Remember: Calhoun Liberty Credit Union will never contact you to ask for your account information, PIN, password or personal details. If someone does, hang up and call us directly.

Step 2: Lock or Cancel Your Debit Card

If your debit card information may have been stolen, whether from a scammer, a data breach or a lost wallet, stop new charges before they happen. Ask your credit union to block the card and send you a new one with a new number.

Until your new card arrives, use another payment method and update any automatic payments once you have the new card number.

Step 3: Change Your Passwords and Login Credentials

If someone may have gotten into your online or mobile banking, secure your login right away:

Change your online banking password to something strong and unique that you’ve never used anywhere else.
Change your email password, too. If a hacker controls your email, they can reset your other passwords.
Update security questions if you think the answers may be known.
Turn on multi-factor authentication wherever it’s available.
Change passwords on any other accounts that used the same password.

Tip: A password manager makes it easy to create and store a unique password for every account.

Step 4: Review Every Recent Transaction

Log in to online banking or the CLCU mobile app and go through your activity carefully, going back at least 60 days. Look for:

Purchases, withdrawals or transfers you didn’t make
Small “test” charges
New bill pay payees or scheduled payments
Changes to your account settings

Write down the date, amount and description of anything suspicious. You’ll need these details when you report it.

Step 5: Report Unauthorized Transactions (and Know Your Rights)

Under federal law (Regulation E), how much you could lose from unauthorized debit card or electronic transactions depends largely on how quickly you report them:

When you report	Your maximum liability*
Before any unauthorized use	$0
Within 2 business days of learning your card was lost or stolen	Up to $50
After 2 business days, but within 60 days of your statement	Up to $500
More than 60 days after your statement	You could lose all of it

*If your card or PIN wasn’t lost or stolen and unauthorized transfers simply appear on your statement, you’re generally not liable as long as you report them within 60 days of the statement date. Source: Consumer Financial Protection Bureau.

The takeaway: report it the same day you notice it.

Step 6: Protect Your Identity and Your Credit

If you think your personal information, such as your Social Security number, date of birth or address, was exposed along with your account details, take these extra steps:

Freeze your credit with all three credit bureaus: Equifax, Experian and TransUnion. It’s free and keeps anyone from opening new accounts in your name.
Or place a fraud alert. It lasts one year, and when you contact one bureau, it notifies the other two.
Check your credit reports for accounts you don’t recognize at AnnualCreditReport.com, the official free site.
Report identity theft to the Federal Trade Commission at IdentityTheft.gov, which will also build a personalized recovery plan for you.

Step 7: Check Your Devices and Watch for Follow-Up Scams

Sometimes the problem starts on your own phone, laptop, or other device. Run a security scan on your phone and computer, update your apps and operating system, and delete any apps you don’t recognize.

Then stay alert. Scammers often follow a fraud with a second attempt, such as a call pretending to be your credit union’s “fraud department” offering to help get your money back. If anyone asks you to read off a verification code, move money to a “safe account” or share your PIN, it’s a scam.

How to Help Prevent It From Happening Again

Check your accounts often. A quick look in the app every few days helps you catch problems early.
Switch to eStatements so paper statements can’t be stolen from your mailbox.
Inspect card readers at gas pumps and ATMs for loose or bulky parts that could be skimmers.
Pay with contactless or chip instead of swiping whenever you can.
Be wary of unexpected calls, texts and emails, and when in doubt, don’t answer, click, or respond.
Let us know before you travel so we can update fraud monitoring on your card.

For more tips, see Fraud Prevention Starts With Awareness.

Frequently Asked Questions

Will I get my money back if my account was hacked? In most cases, yes, especially if you report it quickly. Federal rules limit your liability for unauthorized electronic transactions, and your credit union will investigate disputed charges.

Should I close my account if it was hacked? Not always. Often blocking your card, changing your login credentials and watching your activity is enough. If the account number itself was compromised, your credit union may recommend opening a new account. Ask what’s best for your situation.

Can someone hack my account with just my debit card number? Someone with your card number can make online purchases, but they generally can’t access your online banking without your login credentials. That’s why it’s important to lock the card and protect your password.

Will my credit union ever call and ask for my PIN or a verification code? No. Calhoun Liberty Credit Union will never contact you to ask for your account information or personal details. Treat any request like that as a scam.