PanicStation.org
UK USA
us Money & financial emergencies bank alert new payee • unknown payee added • new recipient added • unrecognized device alert • new device sign in • bank account takeover • suspicious banking notification • phishing text from bank • phishing email from bank • otp code you didnt request • approve new device prompt • added payee i dont know • unexpected bank security alert • possible unauthorized transfer • fraud debit card charges • money missing from account • bank login not me • unexpected account changes • identity theft warning sign

What to do if…
you get a bank alert about a new payee or device you do not recognise

Short answer

Don’t approve anything or click anything. Contact your bank immediately using a trusted method (open the bank app yourself, or call the number on the back of your card) and ask them to lock down the account and stop any transfers.

Do not do these things

  • Don’t click links in the alert or call a number provided in the message.
  • Don’t share one-time passcodes, verification codes, PINs, or your online banking password with anyone.
  • Don’t approve a “new device”, “new payee/recipient”, or peer-to-peer transfer prompt (for example, Zelle or similar) unless you initiated it.
  • Don’t move money to a “safe account” because someone told you to.
  • Don’t keep texting/calling back to “figure it out” — switch to a verified contact route.

What to do now

  1. Stop the interaction. Close the alert. If you’re on a call about it, hang up.
  2. Contact your bank safely (right now).
    • Use the bank’s official app (opened directly) or call the number on the back of your card. Say: “I got a new payee/new device alert that wasn’t me. I need you to secure my account now.”
  3. Ask for specific lock-down actions while you’re on the line.
    • Freeze/lock online banking access and cards; block transfers if possible.
    • Remove the new payee/recipient; revoke unrecognized device sessions; reset sign-in credentials.
    • Check for profile changes (email/phone/address) and restore them.
    • Ask whether any payments are pending, and what they can do immediately to stop them.
  4. Report any unauthorized activity clearly and get a case number.
    • If money moved, tell them which transactions you don’t recognize. Ask for a case/reference number and what they need from you to start the dispute/error process.
    • If the alert included a code you didn’t request, tell them — it can indicate someone is trying to enroll a device or add a payee.
  5. Protect your logins and “recovery routes.”
    • Change the password on the email account tied to your bank and turn on stronger sign-in protection.
    • Change your bank password (and any reused passwords elsewhere). Use a new, unique one.
  6. Write down what matters. Note the time of the alert, what it said, any transaction IDs, and what the bank confirmed they did (freeze, blocks, reversals, case number).
  7. Move quickly if an electronic transfer or debit access is involved. Prompt notice can matter for your rights and potential liability limits for unauthorized electronic transfers — don’t wait to “see what happens.”
  8. If you suspect identity theft or account takeover, start the official reporting trail.
    • Use IdentityTheft.gov to create a recovery plan (especially if you see new accounts, credit checks, or personal info changes).
    • Report the scam at ReportFraud.ftc.gov.
  9. Lock down credit to prevent new accounts being opened in your name.
    • Consider a credit freeze with each of the three nationwide bureaus.
    • If you can’t do freezes today, place at least a fraud alert.
    • Check your credit reports at AnnualCreditReport.com and look for unfamiliar accounts/inquiries.

What can wait

  • You do not need to decide today whether to close all accounts or switch banks (unless your bank tells you to).
  • You do not need to post about it, warn others on social media, or try to identify the scammer.
  • You do not need to complete long forms before your bank can take immediate protective action — start with stopping further loss.

Important reassurance

These alerts exist because unauthorized access is common and banks expect customers to respond quickly. Feeling panicked is normal — focusing on safe contact + immediate lock-down is the fastest way to regain control.

Scope note

This covers first steps to prevent further loss and start an official paper trail. Longer follow-up (formal disputes, monitoring, identity repair) depends on the payment type and what your bank finds.

Important note

This is general information, not legal advice. If you’re in immediate danger, call emergency services. Always use verified contact details (bank app you open yourself, or the number on your card), not numbers provided in unexpected messages.

Additional Resources
Support us