PanicStation.org
UK USA
us Money & financial emergencies unauthorized payments confirmed • bank investigation taking weeks • money missing from account • debit card unauthorized transfer • credit card charge i didnt make • unknown merchant charges • account takeover suspected • card details stolen • atm withdrawal i didnt make • ach transfer i didnt authorize • zelle payment not mine • bank says wait weeks • provisional credit request • dispute unauthorized transaction • stop further fraud charges • identity theft concerns • credit freeze after fraud • payments i dont recognize • card fraud investigation delay

What to do if…
your bank confirms unauthorised payments but says the investigation may take weeks

Short answer

Lock the account down and ask what temporary credit (provisional credit) they will provide if their investigation can’t be finished quickly — you shouldn’t be left in limbo with no protections.

Do not do these things

  • Don’t keep using the same debit card, PIN, or login “until the investigation finishes”.
  • Don’t send money to anyone who contacts you claiming they can “reverse” the transfers (including fake “bank investigators”).
  • Don’t assume your email is fine — if your email is compromised, the fraud can restart even after a card replacement.
  • Don’t miss the written dispute window for credit card billing errors because you were told “it’s under investigation”.
  • Don’t close your account in a rush without first ensuring bills, deposits, and refunds have a safe place to land.

What to do now

  1. Freeze access points immediately (reduce repeat losses).

    • Lock/freeze the card in the bank app, or call the number on the back of the card.
    • Reset online banking password and email password, enable multi-factor authentication, and sign out of all devices.
    • Ask the bank to issue a new card number (not just a replacement physical card) if card details were exposed.

  2. Get timelines in writing and confirm your “notice of error” details.

    • Ask: “What date did you record as my official notice of error/unauthorized transfer?”
    • Ask: “Do you require written confirmation of my report? If yes, what address (or secure message channel) should I use?”
    • Ask for a secure message or letter stating:
      • which transactions they’ve confirmed as unauthorized
      • whether they’re treating it as an EFT/debit (Reg E) issue or a credit card billing error (FCBA/Reg Z) issue
      • expected timing for provisional credit (if applicable) and final determination

  3. If it’s a debit card / bank-account transfer issue, ask directly about provisional credit — with the key qualifiers.

    • Tell them: “If you can’t complete the investigation within the initial timeframe (often 10 business days, and 20 in some cases), will you issue provisional credit while you continue?”
    • If they say no, ask: “Is that because you’re requiring written confirmation and haven’t received it, or for another reason? Please explain in writing.”

  4. If it’s a credit card charge, protect your rights with a written billing-error notice.

    • Even if you already called, send a written dispute to the issuer’s billing inquiries address (usually shown on your statement) within 60 days after the statement where the error first appeared was sent.
    • Keep copies/screenshots of what you send and the date sent.

  5. Stop recurring drains and linked payments.

    • Ask the bank/card issuer to block:
      • the merchant(s)
      • any recurring payments tied to the compromised card number
    • Check your scheduled bill-pay, P2P payees, and any newly added external accounts. Remove anything you don’t recognize.

  6. Stabilize essentials for the next few weeks (rent, utilities, food).

    • If the missing funds will cause late fees, overdrafts, or missed rent, tell the bank you’re facing financial hardship and ask what immediate relief is available (fee reversals tied to the fraud, overdraft accommodation, expedited handling).

  7. Assume identity theft until proven otherwise (quick protective steps).

    • Place a credit freeze (or a fraud alert) with the major credit bureaus if you suspect your identity data was used.
    • Use the federal identity theft site to create a recovery plan if personal info was exposed or new accounts are appearing.

  8. Escalate if you’re being stalled or can’t get a clear written answer.

    • If the bank won’t explain timelines, won’t clarify provisional credit, or keeps pushing you to “just wait”, file a complaint with the federal consumer finance regulator so you get a formal written response.

What can wait

  • You don’t need to figure out exactly how your information was stolen today — focus on locking access and stopping further transfers.
  • You don’t need to decide whether to switch banks or take legal action right now.
  • You don’t need to contact every merchant yourself unless your bank/card issuer specifically instructs you to.

Important reassurance

Banks often use the word “investigation” as a blanket term, but you still have concrete protections and process steps depending on whether this was a debit/EFT issue or a credit card billing dispute. Asking for a written timeline and (when applicable) provisional credit is a practical way to prevent avoidable fallout.

Scope note

These are first steps to stop further loss and keep you functioning while the bank completes its process. If the bank later denies the claim, that becomes a separate moment with different options — you don’t need to solve that today.

Important note

This is general information, not legal advice. Rules and timing vary by account type (checking/debit, credit card, prepaid, P2P services) and by how/when you notified the institution. If you feel unsafe because of threats or impersonation, prioritize secure communications and official contact channels.

Additional Resources
Support us