PanicStation.org
UK USA
us Money & financial emergencies debit card pin changed • pin changed without permission • pin reset not requested • unauthorised pin change • someone changed my debit pin • atm pin compromised • unauthorized atm withdrawals • debit card fraud • bank account takeover • banking app hacked • suspicious bank text • unexpected verification code • phone number hijacked • sim swap warning signs • email account compromised • card added to mobile wallet • digital wallet fraud • disputed debit transaction • unauthorized electronic transfer • identity theft concern

What to do if…
your debit card PIN is changed and you did not request it

Short answer

Lock the card immediately and contact your bank/card issuer right away using the number on the back of your card or your official banking app. Assume compromise until the bank confirms it’s safe.

Do not do these things

  • Don’t try the “new PIN” at an ATM or store to test it.
  • Don’t click links in a “PIN change” text/email — go directly via your official banking app or a trusted number.
  • Don’t share one-time codes or approve push prompts you didn’t initiate.
  • Don’t call phone numbers sent by text/email — use the number on your card or your bank’s official app.
  • Don’t wait for your next statement before acting.

What to do now

  1. Lock the card right now (including ATM access if possible).
    Use your bank’s app to lock/disable the debit card. If you can’t, call the issuer and ask them to block the card immediately, including cash withdrawals.
  2. Call the bank and say: “My debit card PIN was changed and I didn’t request it.”
    Ask them to:
    • Cancel and replace the card (and confirm whether the replacement will have a new card number).
    • Check for recent PIN change activity, new device logins, and changes to phone/email/address.
    • Check for mobile wallet provisioning (card added to a phone wallet) and remove anything you don’t recognize.
  3. Scan your account for money leaving and report it as unauthorized immediately.
    Look for:
    • ATM withdrawals
    • Debit card purchases
    • Transfers you didn’t authorize
      Ask them to open an unauthorized EFT / debit card fraud dispute and tell you what they’ve blocked.
  4. Secure the “reset routes” that could be enabling the PIN change.
    Do the minimum, in this order:
    • Change your online banking password/passcode (only via official channels).
    • Change the password for the email account tied to your bank.
    • If you lost cell service unexpectedly, got “SIM change” notices, or stopped receiving security codes, contact your mobile carrier about a possible SIM swap.
  5. Write down the key deadlines and report fast (even if details are incomplete).
    U.S. consumer protections for unauthorized electronic transfers can depend on how quickly you notify the bank. As a practical rule: report immediately. Some protections reference timelines like within 2 business days of learning of the loss/theft of the access device, and within 60 days after a statement is sent if an unauthorized transfer appears there — so don’t delay.
  6. Add a credit barrier if you suspect broader identity misuse.
    Place a fraud alert or a credit freeze with the credit bureaus if you think personal information is being used beyond this one card.
  7. If this involved an online scam, make an official report (optional).
    If you were tricked into sharing codes/approving a prompt or this happened via online contact, you can report to the FBI’s Internet Crime Complaint Center (IC3) and keep the confirmation for your records.

What can wait

  • You do not need to decide today whether to close your whole bank account — first, stop access and replace the card.
  • You don’t need perfect documentation before reporting — identifying suspicious items is enough to start.
  • You don’t need to contact multiple agencies at once; after the card is locked and the dispute is opened, you can do the rest step-by-step.

Important reassurance

A PIN change you didn’t request is a strong sign something is wrong, and treating it urgently is reasonable. If you feel flustered, you can repeat one sentence: “I did not request this PIN change. Please lock the card and secure the account.”

Scope note

This is first-steps-only guidance to stabilise the situation. Follow-up steps (forms, affidavits, longer monitoring) are easier once access is locked down.

Important note

This is general information, not legal advice. Bank policies vary. If you feel pressured during any call, end it and contact your bank using a trusted number from your card or official banking app.

Additional Resources
Support us