How to Lock Your Bank Account: Card Lock vs. Full Freeze

To lock your bank account against a lost card or a suspicious charge, open your bank’s mobile app, go to card management, and toggle the card lock on. That takes under a minute and blocks new purchases and ATM withdrawals immediately. A true full-account freeze is a different, more restrictive step that most banks won’t let you do from the app; for that you’ll need to call the fraud line or visit a branch. Which one you want depends on what’s been compromised, and moving fast matters because federal law ties how much you can lose to how quickly you report.

Card Lock or Full Account Freeze

A card lock disables your physical debit card so it can’t be used for new point-of-sale purchases or ATM withdrawals. It’s the right tool when the card is lost, stolen, or you see a charge you didn’t make. Banks treat it as a reversible toggle you flip yourself. Direct deposits, recurring ACH payments, and transfers already in motion typically keep processing, because those move through your account and routing numbers rather than the card number.

A full account freeze goes further. It restricts activity on the account itself, including outgoing transfers and sometimes incoming deposits. Banks generally don’t offer this through the app. You’ll need to call or come in, and the bank may ask for a formal fraud affidavit before putting it in place. Reach for this when you believe someone has your account and routing numbers, not just your card details.

Most people searching for how to lock their account actually need the card lock. If unauthorized charges are showing up from your card, locking it stops the bleeding while you sort out the rest. If the account itself has been accessed, calling the fraud department is the faster route.

Locking Your Debit Card in the App

Sign in to your bank’s mobile app. Most banks require a second verification step beyond your password, such as a one-time code sent to your phone or generated by an authenticator app, before letting you into security controls.¹ Look for a section labeled Card Management, Card Controls, Lock Card, or Freeze Card under your checking account.

Pick the specific card, especially if you have more than one linked to different accounts. Flip the toggle, confirm, and the status changes right away. You’ll usually get a push notification or email confirming the lock. From that point, any attempt to use the physical card at a store or ATM is declined at the terminal.

Digital Wallets Are Not Automatically Locked

This trips people up. Locking your physical card does not lock the version stored in Apple Pay, Google Pay, or Samsung Pay. If your card is saved in a digital wallet, those transactions can still go through after you lock the card.² Lock or remove the card in each wallet separately. If you think the card number itself was exposed rather than the physical card being stolen, check every wallet where you’ve saved it.

Locking by Phone or at a Branch

If you can’t get into the app, call the number on the back of the card or your bank’s main customer service line. The automated menu will have an option for lost, stolen, or fraudulent card activity, and that option routes you to someone who can lock the card right away. You’ll verify your identity by confirming personal details such as your Social Security number, date of birth, or recent transaction amounts.

A branch visit works too, but it’s slower. Bring a government-issued photo ID. A banker can place the lock through the bank’s internal system and give you a printed reference number. The same customer identification standards that apply when you open an account apply when you request security changes in person.³

Either way, write down the date and time of your request and the name of anyone you spoke with. That timestamp is what establishes when you notified the bank, and notification timing controls your liability.

What Still Processes After a Card Lock

Locking the card doesn’t shut down your financial life. Understanding what keeps running helps you avoid missed bills or surprise overdrafts.

Direct deposits keep arriving. Paychecks and government benefits sent through ACH use your account and routing numbers, not the card.
Recurring ACH bill payments set up through your account number, such as a mortgage or insurance premium, typically continue.
Digital wallet payments linked to the locked card may still go through unless you remove the card from the wallet.²
Pending transactions authorized before the lock will likely still post.
New card purchases and ATM withdrawals are blocked. That’s the point.

If you also need to stop specific ACH debits, ask the bank about a stop-payment order on those recurring charges, or request the full account freeze.

Why Speed Matters: Your Liability Window

The Electronic Fund Transfer Act caps how much you can lose to unauthorized debit card activity, and the caps get worse the longer you wait to report. There are three tiers:

Report within two business days of learning about the loss or theft: your liability is capped at $50, or the amount taken before you notified the bank, whichever is less.⁴
Report after two business days but within 60 days of the statement showing the charge: liability can climb to $500.⁴
Report more than 60 days after the statement is sent: you can be liable for every dollar taken after that 60-day mark, with no cap, if the bank shows it could have prevented those later losses with earlier notice.⁴

The two-day clock starts when you learn about the loss or theft. The 60-day clock starts when the bank sends the statement showing the unauthorized charge. They run independently.

Credit cards work differently. Federal law caps liability on an unauthorized credit card charge at $50 total with no escalating tiers, and the burden of proof is on the card issuer.⁵ With a debit card, the money leaves your account first and you fight to get it back.

Filing the Fraud Dispute

Locking the card stops new damage. To get money already taken back, you have to file a formal dispute. Report each unauthorized transaction by phone or through the app, giving the date, amount, and merchant name for each. Note who you spoke with and when.

Here’s a step people miss. If you report by phone, the bank can require written follow-up within 10 business days. Skip that written notice and the bank isn’t required to provisionally credit your account while it investigates.⁶ Ask whether written follow-up is required, get the mailing address or secure message channel, and send it. Keep a copy.

The written notice needs your name, account number, why you believe an error occurred, and the type, date, and amount of each disputed transaction.⁷

What the Bank Must Do and When

Once you dispute a transaction, federal rules put deadlines on the bank. It has 10 business days to investigate and decide whether an error occurred. If the bank confirms the error inside that window, it must correct it within one business day and tell you the results within three business days.⁷

If the bank wants more time, it can extend the investigation to 45 days, but only if it provisionally credits your account for the disputed amount within those initial 10 business days.⁷ The bank can withhold up to $50 from that provisional credit if it reasonably believes the transfer was unauthorized. It must notify you of the provisional credit within two business days of posting it and give you full use of the funds while the investigation runs.

If the bank decides no error occurred, it can reverse the provisional credit, but it must tell you in writing at least three business days beforehand and explain why. You can request the documents the bank relied on.

Unlocking or Replacing the Card

If you locked the card as a precaution and no fraud turned up, unlocking is the same toggle in reverse. The card reactivates instantly.

If the card was actually compromised, don’t unlock it. Request a replacement. Your bank will issue a new card with a different number, so the old number is dead even if someone still has it. Standard delivery typically takes seven to 10 business days. Expedited shipping is usually available for a fee, often around $20, though it varies. Ask whether you can get temporary ATM-only access or use a digital wallet with the new card number before the physical card arrives.

Once the new card is in hand, update any merchants or subscriptions that had the old number on file. This is the step most people forget, and it shows up a few weeks later as declined autopay and late fees.

One habit does more than any single action after the fact: check your account at least monthly. The 60-day window under federal law is a hard deadline, and regular review is what keeps you inside it.⁴

1
Federal Financial Institutions Examination Council (FFIEC). Authentication and Access to Financial Institution Services and Systems
2
Bank of America. How to Lock or Unlock Your Debit Card With the Mobile Banking App
3
eCFR. 31 CFR 1020.220 – Customer Identification Program Requirements for Banks
4
Office of the Law Revision Counsel. 15 US Code 1693g – Consumer Liability
5
Office of the Law Revision Counsel. 15 US Code 1643 – Liability of Holder of Credit Card
6
Consumer Financial Protection Bureau. How Do I Get My Money Back After I Discover an Unauthorized Transaction or Money Missing From My Bank Account?
7
Consumer Financial Protection Bureau. Regulation E 1005.11 – Procedures for Resolving Errors