Money Stolen From a Bank Account

The First Hour, in Order

Two things run in parallel, and the common mistake is starting only one of them. Your bank works the sending end, trying to pull the money back. The FBI works the receiving end, asking the bank that got it to freeze the account. Neither reaches the other's side.

1. Call whoever moved the money. Ask for a recall of the funds and a Hold Harmless Letter. Numbers are in the next section.
2. File at ic3.gov with the receiving bank's name, account number, routing number, and SWIFT code if it went abroad. Without those fields the complaint cannot reach the money.
3. Report to the FTC at reportfraud.ftc.gov, or at identitytheft.gov instead if someone used the identity to open accounts.
4. File a police report and keep the report number. Banks and credit bureaus ask for it.
5. If the victim is over 60, call the Justice Department's National Elder Fraud Hotline on (833) 372-8311 and you are assigned a case manager who stays your contact.
6. Freeze the credit file at all three bureaus, because whoever took the money has enough to take more.

The tool above walks each step with the detail. What follows is why any of it works.

Fraud Numbers for the Major Banks

Taken from each institution’s own published page on August 12, 2026. Two things are worth knowing before you dial.

Most of these are not 24 hour lines. Only Ally, TD Bank, Truist, Wells Fargo publish an explicit round the clock fraud line. Chase in particular is widely described as 24/7 and is not, on its own page. If you discover this at 2am, that changes what you can actually do tonight.

Only two publish a line specifically for wires, which is the thing this page is most often about. Bank of America on (877) 337-8357, and U.S. Bank's Fraud Liaison Center on (877) 595-6256. Everywhere else you are going through a general fraud queue and will have to steer the conversation yourself.

Call the number on the back of the card or on a statement in preference to any of these, including ours. Numbers published in search results are a known way to reach a scammer instead of a bank. These are here so you know what to expect, and what to ask for.

No bank runs a dedicated elder abuse line. Wells Fargo comes closest, naming elder fraud on its main fraud line, which is the one to use if you are calling about a parent's account.

The same directory, with what to ask each line for and the wire recall wording, is kept up to date on our bank fraud phone numbers page.

Why a Recall Usually Fails, and the Two Openings

A domestic wire is final the moment it settles. Under federal law, once the receiving bank has accepted the payment, a cancellation is not effective unless that bank agrees to it. The Federal Reserve states in its own operating circular that it has no obligation to cancel a payment order, and nothing requires the receiving bank to answer a recall request at all, let alone quickly.

So a refusal is not obstruction. It is the default, and understanding that changes what you push for. The race is not against a legal deadline. It is against the money being withdrawn from the account at the far end, which is usually a matter of hours, and which is exactly why the FBI route matters more than arguing with your own bank.

Two genuine openings exist.

An international transfer from a consumer account is treated as a remittance transfer, and that carries a hard 30 minute right to cancel with a full refund of the money, the fees, and the taxes, provided the funds have not yet been picked up or deposited. It is the only outright cancellation right in this whole area. It also gives 180 days to report an error rather than 60. If your parent wired money abroad in the last half hour, stop reading and call.

The other opening is the hold, and it is covered further down, because it protects what has not moved rather than recovering what has.

What the FBI Actually Does With Your Complaint

A complete complaint at ic3.gov is triaged around the clock and, if it qualifies, goes to a team that contacts the receiving bank and asks it to freeze the account. Where the money has already moved on, that team now chases the second hop as well. Where it went abroad, the request routes through the Treasury Department to the foreign authorities.

It works often enough to be worth twenty careful minutes. In 2025 that team handled 3,900 incidents covering $1.16 billion in attempted theft and froze $679 million of it. For victims over 60 specifically, it worked 642 incidents and froze $32.9 million of $65.4 million lost, so roughly half.

The complaint only works if the banking fields are filled in. Have the amount, date, and type of each transaction; the sending bank, account name and number; and above all the receiving bank's name and address, the name on that account, the account number, the routing number, and the SWIFT code for an international transfer.

Four things about the form catch people out.

1. It asks for an age bracket and the top one is over 60. Fill it in, because that is what routes the case into the elder fraud stream.
2. Do not type a Social Security number or date of birth anywhere in it. The form says so itself.
3. It accepts no attachments, so keep every original document somewhere safe.
4. Save or print the confirmation before you close the tab. That is the only copy you will ever be given, and it is not emailed to you.

Set expectations honestly with the family. You will not hear back. The centre does not investigate and does not give status updates. If the situation is still moving, local police need to hear from you as well.

When the Law Says You Get the Money Back

One distinction decides most of these cases, and banks know exactly where the line sits.

Someone else moved the money. If a third party took funds out of the account, that is an unauthorised transfer, and the federal reimbursement rules apply. This covers more than people assume. Where your parent was tricked into giving up login details and the scammer then made the transfer, regulators treat that as unauthorised too, and the bank is not allowed to refuse on the basis that your parent was negligent. It also cannot be waived by anything in the account agreement.

Your parent sent it themselves. If they were persuaded to make the transfer, banks argue the reimbursement rules do not apply at all, because the rule is written around a transfer initiated by someone other than the customer. This is the category most romance, impersonation, and safe account scams fall into, and it is where the money usually stays gone.

That second position is being tested. A federal court in New York held in 2025 that the wire exclusion does not automatically defeat a claim where the debit hit a consumer's account, the case is on appeal and was argued in April 2026, and no decision has come down. Which means a bank's first refusal is a negotiating position on unsettled law, not a final answer. It also means anything you read about this, including this page, should be checked for its date.

Where the rules do apply, the mechanics are worth knowing. Report within 60 days of the statement, the bank generally has 10 business days to resolve it or must give provisional credit and finish within 45, and liability is capped, with an extension available for extenuating circumstances. That last provision exists for exactly the situation of an elderly or hospitalised customer who could not review statements on time.

Zelle, ACH, and Why Some Payments Never Come Back

Which rail the money left on tells you what is realistic, and it is better to know early than to spend three weeks on a call queue.

Zelle and the instant payment networks are final by rule. Zelle states plainly that its payments cannot be reversed, and the newer instant systems the banks run say the receiving bank is under no obligation to return funds even when an indemnity is offered. If the transfer was unauthorised, the reimbursement rules above still bite. If your parent sent it, the network will not help.

An ACH reversal is not a fraud tool. The network that runs ACH says so directly. A reversal cannot be used to reverse a fraudulent payment. It exists to fix the sender's own clerical error, a duplicate or a wrong amount. An unauthorised ACH debit from a consumer account is a different and much stronger case, with 60 calendar days to dispute it. An ACH credit your parent was induced to send falls under a category the network expressly says is not unauthorised, and the request to return it is one the receiving bank may simply decline.

Cryptocurrency is generally gone. Report it to the exchange, and put everything into the FBI complaint instead, because the freeze request is the only mechanism with any reach.

Ask Them to Freeze What Has Not Moved

This is the underused move, and it protects the money still sitting there while everything else is grinding.

Federal and state regulators jointly back a bank placing a temporary hold on a suspicious disbursement for an older customer, and most states give the bank legal immunity for doing it. Banks are often more willing than families expect, because the regulators have told them to be. Use the words suspected financial exploitation of a vulnerable adult, which is the phrase their own procedures are written around.

Brokerages can go further. Where the customer is 65 or older, the firm can place a temporary hold on disbursements and on securities transactions for 15 business days, extend it by another 10, and extend it again by 30 if it reports the matter to a regulator or a court. If a parent's retirement account is being drained, that is the call to make, and it buys real time.

In Florida there is a further step when money is actively moving. A court can enter an injunction protecting a vulnerable adult that freezes the accounts themselves within days, with no filing fee, including joint accounts and credit lines. That reaches money no credit freeze touches.

The Second Scam, Aimed at You

Expect a second wave, and warn your parent about it before it arrives.

Lists of fraud victims are bought and sold, and the most profitable thing to sell someone who has just lost money is the promise of getting it back. The call is convincing, because the caller already knows the amount, the date, and sometimes the bank.

Three things to hold onto. The FBI works with no law firm and no cryptocurrency service to recover lost funds, and it will never contact you asking for money. The FTC will never tell anyone to move money to protect it, or to buy gold or withdraw cash and hand it over. And scammers now impersonate the elder fraud hotline itself, complete with threats of a lawsuit.

Anyone who telephones your parent offering to recover the money is running the back half of the same operation. Recovery goes through the bank, the FBI complaint, and, where there is a real case, a lawyer your family chose.

Questions Families Ask

Common Situations

Sources of Law

• U.C.C. Article 4A, §4A-211 (cancellation of a payment order is not effective after acceptance unless the receiving bank agrees), applied to Fedwire transfers through Regulation J, 12 CFR pt. 210 subpt. B; Federal Reserve Operating Circular 6 (a Reserve Bank has no obligation to cancel or amend a payment order).
• Electronic Fund Transfer Act and Regulation E, 12 CFR pt. 1005: §1005.3(c)(3) (domestic wire exclusion); §1005.2(m) (unauthorised transfer, meaning one initiated by a person other than the consumer); §§1005.6, 1005.11 (liability limits and error resolution); subpart B, §§1005.30 to 1005.34 (remittance transfers, including the 30 minute cancellation right and the 180 day error period for international transfers from a consumer account).
• Consumer Financial Protection Bureau, Electronic Fund Transfers FAQs (a transfer made by a third party using credentials obtained by deception is an unauthorised EFT, and a consumer's negligence cannot be considered). Compliance aid, not a rule. Retrieved August 12, 2026.
• FinCEN Rapid Response Program fact sheet, April 15, 2026 (recovery most likely where a fraudulently induced wire is reported to law enforcement within 72 hours; victims should contact their financial institution immediately and should not contact FinCEN directly).
• FBI Internet Crime Complaint Center, 2025 Internet Crime Report and 2025 elder fraud figures (Recovery Asset Team and Financial Fraud Kill Chain; 3,900 incidents, $679,013,183 frozen of $1,163,919,846; 642 incidents involving victims aged 60 and over, $32,865,655 frozen of $65,367,648), ic3.gov.
• Nacha Operating Rules (a reversal may not be used to reverse a fraudulent payment; entries made under false pretenses are not unauthorised); Zelle network terms (payments cannot be reversed).
• Interagency Statement on Elder Financial Exploitation, revised June 2026 (transaction holds and disbursement delays); FINRA Rule 2165 (temporary holds on disbursements and securities transactions for a specified adult aged 65 or over, 15 business days plus extensions).
• Fla. Stat. §415.1034 (mandatory reporting by, among others, bank officers and employees and investment advisers); Fla. Stat. §825.1035 (injunction for protection of a vulnerable adult from exploitation, including orders freezing assets).
• Bank and brokerage fraud telephone numbers taken from each institution's own published page, retrieved August 12, 2026. Verification detail is in our research brief.