What to do if…
your bank alerts you that your mailing address was changed and you did not do it
Short answer
Assume possible identity theft/account takeover: call your bank using a trusted number, have them revert the address and restrict high-risk activity, then quickly protect your credit and mail so the problem can’t spread.
Do not do these things
- Don’t click “verify” links or call phone numbers from the alert if you’re not sure they’re real; use the number on the back of your card or the bank’s official app/website.
- Don’t just change the address back and move on—ask the bank to check for other changes and recent activity.
- Don’t reuse passwords (especially if your email and banking passwords are similar).
- Don’t ignore mail-forwarding risk; address changes are often used to reroute replacement cards and letters.
- Don’t wait for “another alert” if you suspect identity theft—take protective steps now.
What to do now
- Call your bank’s fraud/security team immediately (trusted channel).
Ask them to:- Revert the mailing address to the correct one.
- Add extra verification for any future address/phone/email changes.
- Place temporary blocks/holds where possible on outbound transfers, new payees, card reissues, check orders, and other high-risk changes while they review activity.
- Review for: new payees, wires, Zelle/ACH activity, password resets, new devices, “paperless” setting changes, and failed logins.
- Secure the account that can reset your bank access (your email), then your bank login.
- Change your email password and enable 2-factor authentication.
- Then change your bank password/passcode, sign out of other sessions/devices, and enable alerts for logins, transfers, payee creation, and profile changes.
- Create an identity theft report and recovery plan (helps with documentation).
Use the federal identity theft site to generate a report and step-by-step plan based on what happened. - Protect your credit right away.
- If you can, place a credit freeze with the major credit bureaus (this is typically the strongest “stop new credit” step).
- If you need a quicker, lighter step, place a fraud alert (often you can start with one bureau and they notify the others, depending on the alert type).
- Review your credit reports for unfamiliar addresses, inquiries, or accounts.
- Consider a ChexSystems security freeze (to make new bank-account openings harder).
This can be especially useful if you think someone is trying to open checking/savings accounts in your name. - Check for USPS mail diversion (change-of-address / hold mail).
- Watch for USPS confirmations you didn’t request (change-of-address, hold mail).
- If you use USPS Informed Delivery, check for unexpected changes or messages.
- If you suspect a fraudulent change-of-address or mail-related identity theft, report it to the U.S. Postal Inspection Service using their identity theft / mail theft reporting channels.
- Capture details while they’re fresh.
Save screenshots of the alert and write down times/dates and anything unusual (calls/texts, “verify your identity” prompts, login issues). This helps your bank and any reports you file.
What can wait
- You do not need to decide today whether to close accounts or switch banks.
- You do not need to figure out exactly how the change happened before you act.
- You can sort out disputes, longer follow-up, and any formal reports once your bank access, credit, and mail are stabilized.
Important reassurance
This kind of change is often used to intercept replacement cards and verification letters. Quickly locking down bank access and adding barriers (credit/mail protections) is a strong, normal response.
Scope note
These are immediate first steps to limit damage. Depending on what your bank finds, you may need follow-up actions (disputes, extended monitoring, replacing compromised credentials, or additional freezes).
Important note
This is general information, not legal or financial advice. Banks and states can differ in processes. If you can only do one thing first: contact your bank via a trusted route, revert the address, and restrict high-risk activity—then move on to credit and USPS protections.
Additional Resources
- https://www.identitytheft.gov/
- https://consumer.ftc.gov/articles/credit-freezes-and-fraud-alerts
- https://faq.usps.com/s/article/Identity-Theft
- https://www.uspis.gov/report
- https://mailtheft.uspis.gov/?ComplaintType=Identity+Theft
- https://www.chexsystems.com/security-freeze/place-freeze
- https://www.equifax.com/personal/credit-report-services/credit-freeze/