PanicStation.org
UK USA
us Money & financial emergencies bank login not working • online banking locked out • mobile banking app locked • suspect account takeover • bank account hacked • cant sign in to bank • password suddenly rejected • too many login attempts • unexpected otp code • phishing pretending bank • password reset scam • new device login alert • sim swap risk • email account compromised • unauthorized transfer worry • debit card unauthorized charge • banking security lockout • identity theft reporting • credit freeze needed

What to do if…
your online banking login stops working and you suspect a lockout or takeover

Short answer

Stop login attempts and contact your bank or credit union immediately using a trusted number (the one on your card/statement) or the official website/app you reach by typing it in yourself. Ask them to secure the account, review activity, and immediately limit outgoing transfers while you secure your email and phone number.

Do not do these things

  • Don’t keep retrying passwords/codes or “testing” multiple logins (it can extend lockouts and muddy the timeline).
  • Don’t click links in texts/emails/pop-ups about your account being locked or “compromised”.
  • Don’t share one-time passcodes (OTP), security question answers, or approve unexpected in-app prompts.
  • Don’t move money because someone tells you to “protect it” (including “safe accounts”, crypto, gift cards, or cash withdrawals).
  • Don’t install remote-access/screen-sharing software because someone says they’re “from the bank” or “from the government”.
  • Don’t do sensitive recovery steps on public Wi-Fi if you can avoid it.

What to do now

  1. Write down what’s happening (1 minute). Note the error message, time, and any alerts you received (screenshots help).
  2. Call your bank/credit union using a trusted number — now.
    • Use the number on the back of your debit/ATM card or a recent statement, or
    • Go to the bank’s site by typing the address yourself (not from a link) and use the official contact options.
  3. Use direct language so you get the fraud/security pathway. Say: “My online banking login stopped working and I’m worried about a lockout or account takeover. Please secure my account and check for unauthorized activity.”
  4. Ask the bank to take specific protective actions immediately.
    • Ask what they can freeze/disable right now: online access, online transfers, wires, and any peer-to-peer service (like Zelle) linked to your account.
    • Review recent transactions, pending transfers, new payees/recipients, and profile changes (email/phone/address).
    • Start the bank’s process to dispute unauthorized transfers/charges and ask what can still be stopped or recalled.
    • Reset access securely: new password, new device/app registration, and (if advised) a new account number and/or replacement card.
    • Get a case/reference number and ask how to submit notice in writing/in-app if required.
  5. Secure the “keys” that can reset your banking login (email + phone).
    • Change your email password and turn on strong two-factor authentication for email.
    • If you suspect a SIM swap (no service, “SIM changed”, calls/texts not working), contact your mobile carrier immediately to lock the line and add extra verification.
  6. If you see unauthorized transfers/charges, act fast. There may be time limits for disputing errors or limiting your losses, so notify your bank as soon as you notice anything wrong and follow their instructions.
  7. If identity theft is possible, start an official recovery plan.
    • File a report at IdentityTheft.gov (FTC) to create a step-by-step recovery plan you can follow.
  8. Put a speed bump in front of new credit (optional but often wise).
    • Place a credit freeze (or a fraud alert) with the major credit bureaus to make it harder for someone to open new accounts in your name.

What can wait

  • Deciding whether to switch banks or close everything (first stop the bleeding and regain control).
  • Contacting every creditor or changing every password immediately (prioritize bank, email, and mobile carrier first).
  • Filing police reports unless your bank requests it or there’s a clear reason (you can do this after the account is secured).
  • Detailed disputes and documentation packaging — get the incident logged and the account protected first.

Important reassurance

A login failure can be a normal security lockout or a technical issue — and it can also be a warning sign. You don’t need to diagnose which one right now. The safest move is the same in both cases: contact the bank through a trusted channel, lock down access, then secure email/phone.

Scope note

This covers first steps to prevent further loss and buy time. If money moved or your identity details may be compromised, you’ll likely need follow-up steps after the immediate lockdown.

Important note

This is general information, not legal or financial advice. Banks and credit unions have different processes. Follow your institution’s instructions once you’ve reached them through a verified contact method.

Additional Resources
Support us