PanicStation.org
UK USA
us Money & financial emergencies bank contact details changed • phone number changed on bank • email changed on banking app • bank profile updated without me • bank says details were changed • account takeover banking • online banking hacked • someone accessed my bank account • bank security alert contact change • unexpected security notification bank • sim swap and bank access • number porting scam banking • email account compromised banking • one time codes intercepted • new device on bank account • unauthorised account settings change • bank login stolen • debit card unauthorized transfer • identity theft banking alert

What to do if…
your bank alerts you that your phone number or email was changed without your consent

Short answer

Call your bank immediately using a trusted number (on the back of your card or the bank’s official website), report an unauthorized contact-information change, and ask them to secure the account and stop transfers while you regain control.

Do not do these things

  • Do not click links or call phone numbers included in the alert text/email (use a number you look up yourself).
  • Do not share one-time passcodes, person-to-person payment verification codes, PINs, or online banking login details with anyone.
  • Do not “fix” the issue by replying to the alert or resetting through a message link.
  • Do not keep signing in from the same device if you suspect your email/phone/device is compromised.
  • Do not delay because “nothing is missing yet” — contact-info changes are often used to take over the account next.

What to do now

  1. Call the bank’s fraud department via a trusted number. Ask them to:
    • Lock online/mobile banking and require extra verification before any future profile changes.
    • Undo the phone/email change and confirm the contact details on file.
    • Stop/cancel pending transfers (including P2P transfers if still pending) and review recent activity.
    • Check for new payees, linked external accounts, new devices, new cards, address changes, and statement settings (like paperless) and remove anything you didn’t authorize.
    • Set a safe callback procedure (so you can ignore unexpected calls) and give you a case number.
  2. If money moved or the bank believes the account is compromised, ask what needs replacing.
    • This may include a new card number, a forced password reset, and sometimes a new account number (which can affect autopay and direct deposits).
    • Ask how to submit a dispute for any unauthorized electronic transfers through the bank’s error-resolution process.
  3. Secure your email account immediately (it often controls password resets).
    • Change your email password from a known-safe device.
    • Turn on multi-factor authentication for email.
    • Check for forwarding rules/filters, recovery email/phone changes, and unfamiliar logins.
  4. Contact your mobile carrier to check for SIM swap / number porting.
    • Ask whether a SIM change, eSIM activation, or port-out was requested or completed.
    • Add stronger security to the carrier account (account PIN/passphrase and any port-out protections they offer).
    • Reset voicemail/security PINs if applicable.
  5. If you suspect identity theft beyond this one bank, protect your credit.
    • Consider placing a credit freeze with each of the three major credit bureaus (so new credit is harder to open in your name).
    • If you’re not ready for a freeze, a fraud alert is another option.
  6. Report identity theft if it appears broader than just your bank login.
    • Use IdentityTheft.gov to create a recovery plan and documentation you can use for disputes.
  7. Keep a tight record.
    • Save screenshots of alerts, write down dates/times, who you spoke to, what was changed, and every transfer or linked account you didn’t recognize.

What can wait

  • You don’t have to decide today whether to close every account or change banks.
  • You don’t need to replace your phone immediately unless your carrier confirms a SIM-swap/port-out or you see persistent compromise signs.
  • You don’t need to change every password right now — focus on banking, email, and your mobile number first.

Important reassurance

Unauthorized contact-detail changes are a known takeover tactic, and acting quickly often prevents losses. Feeling rattled is normal — the practical goal is to re-establish control and stop any money movement.

Scope note

These are first steps only. Next steps depend on what the bank finds (for example, formal disputes, documentation, and longer-term identity protection).

Important note

This is general information, not legal advice. If you believe you’re in immediate danger, call 911. Follow your bank’s official fraud and error-resolution process and keep copies of everything you submit.

Additional Resources
Support us