Yes, several people and institutions can legally withdraw money from your bank account: anyone named as a joint owner, an agent you appointed through a power of attorney, merchants you signed up for automatic payments, and creditors or the IRS acting through a court judgment or tax levy. Anyone else who moves money out of your account is doing so without authority, and federal law caps how much of that loss you have to absorb if you report it quickly.
The rest of this article walks through each of those categories, then covers what to do when the withdrawal wasn’t authorized at all.
Joint Account Holders Have Full Access
Anyone named on a joint bank account can withdraw the entire balance without asking you first. It doesn’t matter who deposited the money. The bank treats both names on the signature card as equal owners with identical authority to write checks, transfer funds, and even close the account.
Most joint accounts also carry a right of survivorship. When one owner dies, the balance passes automatically to the survivor, outside probate.
Shared ownership cuts both ways. If a co-owner overdraws the account, both of you are responsible for the negative balance. Before you add anyone to your account, understand that you are handing them unrestricted control and taking on liability for what they do.
Removing a Joint Owner
You usually cannot remove a co-owner without their consent. State law and the account agreement typically require both parties to agree.1Consumer Financial Protection Bureau. Can I Remove My Spouse From Our Joint Checking Account? If the other person won’t cooperate, the practical path is to open a new individual account in your name only, move your funds there, and then work with the bank on closing the joint account.
Anyone Holding a Valid Power of Attorney
A power of attorney (POA) is a legal document that lets you appoint an agent to handle financial matters on your behalf. Once the bank accepts the document, the agent can sign checks, move funds, and make withdrawals the same way you can. The agent owes you a fiduciary duty to act in your interest, not their own.
The scope of that authority depends on the type of document:
- A general POA gives broad authority over banking, investments, and property.
- A limited or special POA restricts the agent to specific tasks or a single account.
- A durable POA stays in effect if you become incapacitated; a non-durable POA terminates the moment you lose capacity.
Revoking a POA
You can revoke a POA at any time while you are mentally competent. Revocation typically requires a signed, notarized written notice. Deliver a copy directly to your bank so it stops accepting the former agent’s instructions. Until the bank has that notice in hand, it can continue honoring the agent’s transactions in good faith.
Merchants You Authorized for Recurring Payments
When you sign up for autopay on a utility bill, insurance premium, gym membership, or streaming subscription, you give that company standing permission to pull money from your account through the Automated Clearing House (ACH) network. Federal law requires that preauthorized transfers be authorized in writing, and the company collecting payment must give you a copy of that authorization.2Office of the Law Revision Counsel. 15 USC 1693e – Preauthorized Transfers
Your bank processes these debits automatically based on the merchant’s request. It doesn’t verify each individual charge or confirm the amount matches your latest bill. An incorrect or unwanted charge can go through, which is why reviewing your statements matters.
Stopping a Recurring Payment
You have the right to stop any preauthorized transfer by notifying your bank at least three business days before the next scheduled payment. You can give this notice orally, but the bank may require written confirmation within 14 days. If you don’t confirm in writing, the stop-payment order expires after those 14 days.2Office of the Law Revision Counsel. 15 USC 1693e – Preauthorized Transfers A written stop-payment order generally lasts six months and can be renewed.3Legal Information Institute. UCC 4-403 – Customer’s Right to Stop Payment
You don’t need to notify the merchant for the stop-payment order to take effect at the bank, though revoking authorization directly with the merchant in writing creates a paper trail and helps avoid billing disputes.4HelpWithMyBank.gov. How Can I Stop a Preauthorized Debit From Being Paid From My Checking Account? If a charge goes through despite a valid stop-payment order, the bank is generally liable for the amount.
Creditors With a Court Judgment
A creditor who sues you and wins a judgment can force your bank to hand over funds through a bank levy. Once the bank receives the court order, it freezes assets in your account up to the amount of the debt. There’s typically a waiting period, often 15 to 21 days depending on state law, during which you can claim that some or all of the money is exempt. After that window closes, the bank sends the frozen funds to the creditor. Most banks also charge a processing fee for handling the levy.
The IRS Can Skip the Courtroom
The IRS has broader power than a private creditor. Federal law authorizes it to seize bank deposits administratively to collect unpaid taxes, without first suing you.5Internal Revenue Service. IRM 5.17.3 Levy and Sale The IRS must send you a notice of intent to levy at least 30 days before seizing funds, but it doesn’t need a judge’s sign-off. Certain amounts are exempt based on your filing status and dependents, and the IRS publishes the exempt figures annually.6Internal Revenue Service. Publication 1494 – Tables for Figuring Amount Exempt From Levy
Federal Benefits Are Protected
Some money in your account is off-limits to private creditors even with a valid garnishment order. When a bank receives a garnishment, it must review your account to determine whether a federal agency deposited benefit payments within the prior two months.7eCFR. 31 CFR 212.5 – Account Review Protected deposits include Social Security, Supplemental Security Income, veterans benefits, Railroad Retirement benefits, and federal employee retirement benefits.8eCFR. 31 CFR Part 212 – Garnishment of Accounts Containing Federal Benefit Payments The bank must keep those funds available to you and notify you within three business days of its review, explaining what’s protected and what has been frozen.
Wage Garnishment Limits
Federal law also caps how much of your paycheck a creditor can take before it hits your bank account. For ordinary consumer debt, the maximum is the lesser of 25 percent of your disposable earnings for the week, or the amount by which your weekly disposable earnings exceed 30 times the federal minimum hourly wage.9Office of the Law Revision Counsel. 15 USC 1673 – Restriction on Garnishment Some states shield an additional amount inside your bank account from any garnishment, regardless of source.
Payable-on-Death Beneficiaries: Not While You’re Alive
A payable-on-death (POD) designation names someone to receive your account balance after you die. Worth stating plainly because people ask: a POD beneficiary has no access to your money while you are living. The designation only activates on death, when the beneficiary presents a death certificate and identification to claim the funds. A POD designation overrides any conflicting instruction in your will, so keeping the form current matters.
When Someone Withdraws Money Without Authorization
Everything above is legal access. The other side of the question is unauthorized access, and this is where most people’s worry actually sits.
Criminals use phishing emails, texts, and phone calls to trick you into revealing login credentials or account numbers. Skimming devices attached to ATMs and card readers capture debit card data. Identity theft goes further: with your Social Security number and date of birth, someone can reset passwords, order replacement cards, and pass phone-based security questions. Account takeover schemes often start with a criminal changing your mailing address and turning off alerts, so you don’t notice while they drain the account.
Report Fast to Limit Your Liability
How much you lose depends heavily on how quickly you report. Federal law sets tiered limits:
- Report within two business days of learning your card or credentials were lost, stolen, or used: maximum liability is $50.
- Report after two business days but within 60 days of the statement showing the unauthorized activity: liability can rise to $500.
- Report more than 60 days after the statement was sent: you can be responsible for the full amount of any unauthorized transfers that happen after the 60-day window, with no cap.
These tiers come from the Electronic Fund Transfer Act’s implementing regulation.10eCFR. 12 CFR 205.6 – Liability of Consumer for Unauthorized Transfers The practical rule is simple: watch your statements and report anything you don’t recognize right away.
How the Bank Handles Your Report
Once you notify the bank of an unauthorized transfer, it must investigate and resolve the dispute within 10 business days. If it needs more time, it can extend the review to 45 days, but only if it provisionally credits your account for the disputed amount within the initial 10 business days.11eCFR. 12 CFR 205.11 – Procedures for Resolving Errors For certain types of transactions, the investigation period can extend to 90 days.
After the investigation, the bank must report its findings within three business days. If it confirms an error, it has one business day to correct it. If it decides no error occurred and reverses a provisional credit, it must explain why and provide the documents it relied on if you request them.
Protecting Your Account
A few habits go a long way toward keeping your account under your own control:
- Turn on transaction alerts in your bank’s app or website so you get real-time notifications for withdrawals and purchases.
- Use a unique, strong password for online banking and enable two-factor authentication.
- Never share your account number, PIN, or login credentials in response to unsolicited emails, texts, or calls. Your bank will never ask for your full password.
- Review your statements at least monthly and flag anything unfamiliar within two business days.
- Think carefully before adding a joint owner or signing a broad power of attorney. Both give the other person the same access to your money that you have.