What to do if…
your bank contact details or mailing address are changed without your consent
Short answer
Contact your bank immediately through its official app, the number on the back of your card, or a recent statement. Tell its fraud or security team that you did not authorize the change, and ask it to secure the account, restore your correct details, and check for other unauthorized activity.
Do not do these things
- Do not use a phone number or link from the message that alerted you to the change.
- Do not share your password, PIN, Social Security number, or one-time verification codes with an unexpected caller or sender.
- Do not give anyone remote access to your phone or computer.
- Do not move money to a supposedly safe account because a caller tells you to.
- Do not approve a login or verification request you did not initiate.
- Do not delete relevant alerts or messages before saving a basic record of them.
- Do not ignore the change because no money appears to be missing.
What to do now
- Contact the bank using its official app, the number on the back of your card, a recent statement, or an established branch. If you are locked out, state clearly that your contact information or mailing address was changed without your consent.
- Ask the bank to mark the change as unauthorized, secure online access, and restore the phone number, email address, and mailing address you control.
- Ask whether any statements, checks, replacement cards, security notices, or other items have already been sent to the unfamiliar address. Request that future mailings go only to your verified address.
- Ask the bank to review recent changes involving passwords, security questions, devices, login sessions, cards, payees, beneficiaries, transfer settings, alerts, and statement-delivery preferences.
- Ask what immediate restrictions it can place on money movement or further profile changes. Depending on what the bank finds, it may suggest locking or replacing a card, restricting transfers, resetting online access, or replacing the account.
- Change your online-banking password from a trusted device. Use a unique password and, where available, remove unfamiliar devices, sign out other sessions, and enable multifactor authentication after the bank has restored contact details you control.
- Secure the email account connected to your banking. Change its password if it was reused or may be compromised, review its recovery details and active sessions, and enable multifactor authentication.
- Contact your mobile carrier through an official route if your phone unexpectedly lost service or you notice an unfamiliar change to your mobile account. Ask it to restore control of your number and secure the account.
- Review recent and pending transactions. Report every withdrawal, transfer, payment, check, or card transaction you did not authorize as soon as you find it.
- Save copies of the change notice and relevant messages. Record when you contacted the bank, what it agreed to do, and any case or reference number.
- If you find signs that your identity was used elsewhere, use IdentityTheft.gov for a recovery plan. Consider freezing your credit with all three major credit reporting agencies and checking your credit reports for unfamiliar accounts or inquiries. A credit freeze can help prevent new accounts but does not secure this existing bank account.
What can wait
You do not need to identify who made the change before reporting it. Decisions about changing banks, filing a regulatory complaint, reviewing every recurring payment, or closing the account can usually wait until access is secured and the bank explains what it found, unless money is actively leaving or the bank says the account must be replaced immediately.
Important reassurance
An unauthorized profile change is a serious warning sign, but it does not by itself prove that money has been taken. You do not need complete evidence before telling the bank that you did not make or approve the change.
Scope note
This guide covers immediate first steps only. Later decisions may require help from the bank’s fraud team, an identity-theft recovery service, a consumer regulator, or a qualified professional.
Important note
This is general information, not legal or financial advice. Bank procedures and available protections depend on the account, the type of activity, when it is reported, and the specific facts.
Additional Resources
- IdentityTheft.gov — Identitytheft
- Consumer Financial Protection Bureau — I received an email and text from my bank or credit union asking me to "verify" my account information. What should I do?
- Consumer Financial Protection Bureau — How do I get my money back after I discover an unauthorized transaction or money missing from my bank account?
- Consumer Advice — Got a call about fraud activity on your bank account? It could be a scammer
- Consumer Advice — SIM Swap Scams: How to Protect Yourself
- USA.gov — How to place or lift a security freeze on your credit report
- Annualcreditreport — Index.action
- USA.gov — Bank, credit, and securities complaints
About this guide
This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.