PanicStation.org
UK USA
uk Money & financial emergencies bank balance dropped suddenly • money missing from account • unrecognised bank transactions • unauthorised payments on statement • unexpected card transactions • unknown cash withdrawal • suspicious bank transfer out • unknown direct debit taken • unexpected standing order payment • account drained overnight • banking app card freeze • bank account takeover suspicion • scam call from “your bank” • one time passcode request • approved payment you didn’t mean • card added to digital wallet • merchant name you don’t recognise • cannot explain outgoing payments

What to do if…
your bank account balance drops suddenly and you cannot explain the transactions

Short answer

Freeze/block access immediately, then contact your bank’s fraud team using a trusted route (your app, the number on your card, or dial 159). The priority is stopping any further payments before you investigate.

Do not do these things

  • Don’t call back a number from a text/email/pop-up (even if it looks like your bank).
  • Don’t share passcodes, card reader codes, PINs, or one-time verification numbers with anyone.
  • Don’t approve app prompts for “new device / new payee / payee change” you didn’t start.
  • Don’t move money to a “safe account” because someone told you to.
  • Don’t install remote-access or screen-sharing apps because “the bank” asked.
  • Don’t delete texts/emails/call logs yet — you may need them for the investigation.

What to do now

  1. Stop further losses right now

    • In your banking app/online banking: freeze your card and switch off online/contactless/ATM use if those controls exist.
    • If you can’t access the app: call your bank using the number on the back of your card (or a saved trusted number).

  2. Contact your bank’s fraud team via a trusted route

    • If you’ve had a suspicious call: hang up and dial 159, or call the number on your card.
    • Say clearly: “My balance dropped suddenly; I don’t recognise these transactions; please block further payments and treat this as fraud.”

  3. Ask the bank to take specific protective actions

    • Block/replace cards, log you out of other devices, and remove any newly added devices/digital wallets you don’t recognise.
    • Stop/recall anything that is pending (some payments/transfers can be stopped if caught early).
    • If you think online banking access is compromised, ask about temporarily restricting the account and moving to a new account number.

  4. Sort the unknown items by type (this changes how they’re handled)

    • For each unfamiliar transaction, note whether it’s a card payment, cash withdrawal, bank transfer, Direct Debit, or standing order.
    • Write down: date/time, amount, merchant/reference, and whether it’s pending or completed.

  5. If any are Direct Debits, use the Direct Debit Guarantee

    • Tell the bank which Direct Debits were wrong and ask for a refund under the Direct Debit Guarantee.
    • Also cancel the mandate in-app/with the bank so it can’t happen again.

  6. If you were tricked into making a transfer, say that out loud

    • If you authorised a transfer because you were pressured, rushed, or deceived: tell the bank you believe it was a bank transfer scam (APP scam).
    • Ask the bank to log it as an APP scam claim and explain whether it’s in-scope for reimbursement protections for that payment type.

  7. Secure your access (assume email + phone are part of the risk)

    • Change your online banking password and your email password (email is often used to reset banking access).
    • Turn on two-step verification where available.
    • If you recently shared your screen or installed “support” software, remove it and run a security scan.

  8. Report it through the right UK route

    • England, Wales, Northern Ireland: report to Report Fraud (Action Fraud).
    • Scotland: report to Police Scotland via 101, and you can also report scams via Advice Direct Scotland / ConsumerAdvice.Scot.
    • If you are being threatened/coerced right now, call 999.

  9. Reduce follow-on identity fraud

    • Check your credit file for unfamiliar accounts/searches.
    • If you think your identity details are being misused, consider Cifas Protective Registration (it prompts extra checks when credit is applied for in your name).

  10. If the fraud started with a message, report the message too

What can wait

  • Figuring out exactly how it happened — first stop the losses and secure access.
  • Long calls with merchants. Route disputes through your bank while the trail is fresh.
  • Deciding whether to close every account you have. Stabilise first, then review.
  • Any “recovery service” that contacts you offering to get money back for a fee.

Important reassurance

A sudden unexplained drop in balance is frightening, but banks handle this scenario every day. You don’t need a perfect explanation to act — your job is simply block, report, document.

Scope note

This guide covers first steps to stop further loss, start the bank process, and reduce follow-on harm. Next steps (complaints, ombudsman routes, longer investigations) depend on transaction type and what the bank finds.

Important note

This is general information, not financial or legal advice. Give your bank the facts as you currently understand them, including if you approved anything under pressure or deception. Only follow security steps you initiate through trusted contact routes.

Additional Resources
Support us