PanicStation.org
UK USA
us Money & financial emergencies

What to do if…
you shared your bank login or a one-time code and think your account is at risk

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Stop contact with the person who asked for the code or login, then contact your bank using the number on your card or the official app. Tell the fraud team you shared online banking details or a one-time code, and ask what they can lock, stop, cancel, recall, or reset right now.

Do not do these things

  • Do not share any more codes, passwords, PINs, or approve any prompts you did not start yourself.
  • Do not trust caller ID, links in texts or emails, or numbers a caller gives you.
  • Do not move money to a “safe account” or send it to someone claiming they can protect it.
  • Do not install remote-access apps or screen-sharing tools for anyone who contacted you unexpectedly.
  • Do not delete texts, emails, screenshots, app alerts, call logs, or transaction details yet.
  • Do not keep talking to the scammer while you are contacting the real bank.

What to do now

  1. End the contact and call your bank the safe way.
    Hang up, close the chat, or stop replying. Call the number on the back of your debit or credit card, or use support inside your bank’s official app. Ask for the fraud department.

  2. Tell the bank exactly what was shared.
    Say: “I shared my online banking login or a one-time passcode. I think my account is at risk.” Ask the bank to record the time you noticed it and the time you reported it, because some protections can depend on prompt notice.

  3. Ask for immediate containment.
    Ask what they can do right now, including:

    • lock online and mobile banking access
    • force password, PIN, and security-question resets
    • remove unknown devices, sessions, payees, recipients, or profile changes
    • block further outgoing transfers where possible
    • review pending transactions and tell you what can still be stopped, cancelled, reversed, or recalled
    • replace cards or account numbers if the bank thinks they were exposed

  4. If money moved, ask about the exact route.
    Ask whether it was a card payment, ACH transfer, Zelle or other payment-app transfer, wire, check, digital wallet payment, or another route. If it was a wire, ask whether an immediate wire recall or hold request is still possible, and ask what written information the bank needs from you.

  5. Secure the accounts that can unlock your bank.
    From a device you trust, change your email password first, then your bank password. Turn on or reset multi-factor authentication, sign out of other sessions, and remove recovery phone numbers or email addresses you do not recognise.

  6. Check for phone-number takeover signs.
    If your phone suddenly lost service, your SIM stopped working, or you received port-out messages, contact your mobile carrier from a trusted phone or official app. Ask for extra verification on the account, such as a port-out lock or SIM-swap protection if available.

  7. Look for fast changes inside the account.
    Tell the bank immediately if you see:

    • transfers you did not make
    • new recipients or payees
    • a changed phone number, email, address, or password
    • a new card in a digital wallet
    • scheduled payments you do not recognise
    • alerts saying a new device logged in

  8. Make official reports after the bank is contained.
    File an identity theft report at IdentityTheft.gov if personal or account information may have been misused. Report the scam to the FTC at ReportFraud.ftc.gov, and report online account takeover or internet-enabled theft to the FBI’s IC3.

  9. Reduce the risk of new accounts in your name.
    If personal information may have been exposed, consider a credit freeze or fraud alert with the nationwide credit bureaus. If you are worried someone may try to open new bank or checking accounts in your name, consider a ChexSystems security freeze.

What can wait

  • You do not have to decide right now whether to close every account; first get the account locked down and reviewed.
  • You do not need to negotiate with the scammer or prove anything to them.
  • You do not need a perfect timeline before calling the bank; start with what you shared, when it happened, and what looks different.
  • You can organise screenshots, reports, and longer-term monitoring after the bank has taken immediate containment steps.

Important reassurance

Scammers create urgency and confusion so people act before they can check. Sharing a code or login under pressure can happen to careful people; taking quick containment steps now is the right response and may limit the damage.

Scope note

These are first steps only. Later decisions about disputes, written statements, account closure, credit protection, or legal options may need help from your bank, a financial professional, a consumer protection agency, or another specialist.

Important note

This is general information, not legal, financial, cybersecurity, or professional advice. If you believe you are in immediate danger or being threatened, contact emergency services.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us