PanicStation.org
UK USA
us Money & financial emergencies autopay changed without permission • recurring payment changed unexpectedly • bank account autopay altered • ach payment changed without consent • preauthorized transfer changed • unknown recurring charge set up • payment amount changed unexpectedly • payment date changed unexpectedly • new payee on bank account • unrecognized scheduled payment • someone changed my bill pay • subscription payment changed unexpectedly • unauthorized electronic transfer • bank debit you did not approve • recurring card charge changed • account security after autopay change • possible identity theft payment change • fraud concern recurring payments

What to do if…
you discover your direct debit or autopay has been changed without your permission

Short answer

Stop the next payment first, then contact your bank/card issuer immediately (using a trusted number) to place a stop payment where possible and dispute any unauthorized electronic transfers or recurring charges.

Do not do these things

  • Don’t click “confirm your payment” links or call numbers from a suspicious text/email—use the official number on your card or your bank’s app/website.
  • Don’t wait for the next payment “to see what happens.” Stopping the next debit is often the fastest way to prevent more loss.
  • Don’t close the account right away before you’ve stopped/disputed the transfers and saved the details (it can slow the dispute process).
  • Don’t share security codes, passkeys, or login details with anyone.
  • Don’t assume changing your password alone fixes it if the payment authorization itself was changed—stop/revoke the payment route too.

What to do now

  1. Confirm what changed and capture proof (2 minutes). In your bank app/website, open the autopay/transaction details and note: merchant/payee, amount, date, and whether it’s an ACH/preauthorized electronic transfer or a recurring card charge. Take screenshots.
  2. Stop the next payment from going out.
    • ACH/preauthorized transfer: ask your bank for a stop payment. If you can, do this at least three business days before the scheduled debit.
    • Recurring card payment: contact the card issuer and ask what they can do to block further recurring charges from that merchant and to open a dispute for any unauthorized charges; also contact the merchant to cancel/revoke authorization.
  3. Notify your bank quickly (time limits matter). Tell them: “This was unauthorized / the preauthorized payment was changed without my permission.” Do this as soon as you notice—ideally well within 60 days of the statement that shows the transfer—so you don’t risk responsibility for later unauthorized transfers.
  4. Ask whether they need written confirmation. If you report by phone, the bank may ask you to send written confirmation within a set time. Ask: “Do you require written confirmation, where should I send it, and what exactly should it include?”
  5. Revoke authorization with the company as well (in writing if you can). Tell the merchant/biller you’re withdrawing permission for any future debits and ask for written confirmation that autopay is off and your account is secured.
  6. Secure your account access immediately. Change your banking and email passwords, turn on multi-factor authentication, and review:
    • profile/contact detail changes
    • linked accounts or external transfer settings
    • new payees, bill-pay entries, or “trusted device” logins
  7. If you suspect identity theft, start the official identity theft steps. File a report and follow the recovery plan. Consider placing a fraud alert or credit freeze to help prevent new credit being opened in your name (a freeze is typically placed separately with each major credit bureau).

What can wait

  • You do not have to decide today whether to switch banks, change your phone number, or file a police report (unless your bank specifically requests it for a claim).
  • You do not need to “solve who did it” right now—focus on stopping future debits and securing access.
  • You can wait to do deep credit cleanup after the immediate payment flow is contained.

Important reassurance

This feels urgent because it’s about control and security—not just money. You’re not overreacting. The most stabilising path is contained: stop the next payment, notify the bank promptly, and lock down access.

Scope note

This guide is first steps to stop further payments, trigger the right dispute process, and secure your accounts. If identity theft is involved, recovery can take additional steps later.

Important note

This is general information, not legal advice. If you feel unsafe or threatened by someone connected to the change, prioritize immediate safety and contact local emergency services.

Additional Resources
Support us