PanicStation.org
UK USA
uk Money & financial emergencies debit card pin changed • pin changed without me • pin reset i did not request • unauthorised pin change • someone changed my pin • card pin compromised • atm withdrawals risk • cashpoint pin changed • bank account takeover • banking app taken over • suspicious bank text • unexpected verification code • phone number hijacked • sim swap suspicion • email account compromised • card added to phone wallet • digital wallet card added • new device on banking • strange banking notification • card security breach

What to do if…
your debit card PIN is changed and you did not request it

Short answer

Freeze/block the card immediately, then contact your bank using a trusted route (in-app or the number on the back of your card). Treat this as possible account takeover until your bank confirms otherwise.

Do not do these things

  • Don’t try the “new PIN” in a shop or at a cash machine to test it.
  • Don’t click links in a text/email about a “PIN change” or “security alert” — go directly via your banking app or a trusted number.
  • Don’t share one-time passcodes, “security codes”, or approve in-app prompts you didn’t start.
  • Don’t call back a number that texted you or a caller gives you — use the number on your card, a statement, or your official banking app.
  • Don’t move money around in a rush if you suspect your login or phone number may be compromised — stop access first.

What to do now

  1. Freeze/block the debit card right now.
    Use your banking app to freeze/lock the card. If you can’t, call the bank and ask them to block the card immediately, including cash withdrawals.
  2. Contact your bank safely and state the problem clearly.
    Say: “My debit card PIN was changed and I did not request it.”
    • Use your bank’s official app or the number on the back of your card.
    • If this started with a suspicious call, hang up. You can dial 159 to reach many UK banks safely; if it doesn’t work for your bank/phone, use the number on your card instead.
  3. Ask the bank to lock down anything that could let someone keep control.
    Ask them to check and, where needed, reset/stop:
    • PIN services / recent PIN change activity
    • New devices linked to your mobile/online banking
    • Changes to phone/email/address
    • Any cards added to a digital wallet you don’t recognise
  4. Cancel and replace the card.
    Ask for a replacement card and confirm what will happen to existing card details (some banks issue a new card number; either way, you want the old card stopped).
  5. Check your recent activity and report anything you don’t recognise as unauthorised.
    Look for cash withdrawals, card payments, and new payees/beneficiaries. Ask the bank to log a fraud case and tell you what they’ve blocked.
  6. Secure the “reset routes” that could be enabling the PIN change.
    Do the minimum, in this order:
    • Change your online banking password/passcode (only via the official app/site).
    • Change the password for the email account linked to your bank.
    • If you stopped receiving calls/texts or got messages about a SIM change, contact your mobile network to check for a SIM swap and secure your number.
  7. Get a reference and safe contact plan.
    Ask for a case/reference number, how the bank will contact you, and how you can verify it’s really them (so you’re not pulled back into a scam).
  8. If the bank won’t fix it or you’re unhappy with the response, use the UK complaints route.
    Ask the bank how to make a formal complaint. If it isn’t resolved, you can escalate to the Financial Ombudsman Service.
  9. Optional: report the fraud to the police reporting service (after the bank is secured).
    • If you’re in England, Wales or Northern Ireland, you can report via Report Fraud (online or by phone).
    • If you’re in Scotland, report to Police Scotland on 101.

What can wait

  • You do not need to decide today whether to close your bank account or switch banks.
  • You don’t need perfect evidence before contacting the bank — stopping access comes first.
  • You don’t need to report to multiple organisations at once; once the bank has blocked access, you can do the rest in calmer steps.

Important reassurance

A PIN change you didn’t request is a genuine red flag. Freezing the card and contacting the bank via a trusted route is the right “stop the bleeding” move, even if it turns out to be a misunderstanding later.

Scope note

This is first steps only — enough to stabilise things and prevent further loss. Later steps (paperwork, refunds, identity repair) are easier once access is locked down.

Important note

This is general information, not legal or financial advice. Bank processes vary. If you feel pressured on a call, end it and contact your bank using a trusted number or your official banking app.

Additional Resources
Support us