You can use your mobile banking app abroad in nearly every country, as long as you’re not trying to log in from a location covered by U.S. sanctions and you’ve prepared your account for foreign access before you leave. Set a travel notice, confirm you can receive authentication codes on your phone overseas, keep the app updated, and know which currency to choose at the point of sale. The rest is largely the same experience you have at home, with a few extra verification prompts.
Countries Where Your App Will Not Work
The Office of Foreign Assets Control (OFAC), a division of the U.S. Treasury, maintains sanctions programs that prohibit American banks from doing business in certain places. Banks enforce this by watching IP addresses and geolocation data, and they’ll block a login attempt from a prohibited area automatically.
As of early 2026, comprehensive sanctions apply to:
- Cuba
- Iran
- North Korea
- Russia
- The Crimea, Donetsk, and Luhansk regions of Ukraine
If you travel to any of these locations, expect your app to be inaccessible for the duration of your stay. Beyond the sanctioned list, many banks maintain their own internal risk lists for countries with elevated digital fraud rates. You may find that some features, such as large wire transfers, are unavailable even when basic login works.
Do Not Use a VPN to Get Around It
Masking your location with a VPN is a bad idea for two reasons. First, most banking apps detect VPN traffic and refuse the connection anyway. Second, OFAC has taken enforcement action against companies whose employees advised users in sanctioned countries to use VPNs to bypass compliance controls, treating those transactions as sanctions violations.1U.S. Department of the Treasury – OFAC. OFAC Enforcement Action – VPN Circumvention of Sanctions Controls The exposure is personal, not just a locked account.
Set Up Your App Before You Leave
A few minutes in the app before departure prevents the most common problems travelers run into.
File a Travel Notice
Most banking apps have a travel notification feature buried in the profile or security settings. Enter your dates and every country on your itinerary. The bank’s fraud engine will then recognize foreign logins and card swipes as legitimate rather than suspicious. Skip this step and you’ll likely see a security block the first time you try to use your card overseas.
Make Sure Your Authentication Codes Will Reach You
When you log in from an unfamiliar network, most banks send a one-time code by SMS or email. If your mobile plan doesn’t include international texting, the code never arrives and you’re locked out. Confirm with your carrier that your plan supports SMS abroad, or turn on Wi-Fi calling if your carrier offers it.
Voice-over-IP numbers like Google Voice or Skype are often rejected by U.S. banks for authentication. If that’s your primary number, add a standard mobile number to your bank profile before you go. App-based authenticators and push notifications, where your bank offers them, are the most reliable option because they work over any Wi-Fi connection without touching your cellular plan.
Update the App and Check Your Limits
Older app versions may not support the security certificates needed to establish an encrypted connection from a foreign internet provider. Install the latest version before you fly. While you’re in there, look at your daily ATM withdrawal and purchase limits under card management. Some banks let you raise these temporarily for a set period, which is useful if you’ll be relying on cash more than usual.
What to Expect When Logging In Overseas
Even with a travel notice on file, the first login from a foreign IP address almost always triggers an identity challenge. A code goes to your registered device, you enter it, and you’re in. Codes sometimes take a few minutes to arrive over roaming or hotel Wi-Fi; most apps let you request a fresh one or switch to email or a security question if the first attempt stalls.
Public Wi-Fi at airports, cafes, and hotels tends to attract extra security prompts because banks classify these networks as higher risk. Some institutions restrict functions like large transfers when they detect an unverified public connection. Sticking to one connection method for the trip, such as your own cellular data, cuts down on the number of repeated verifications.
If you can’t get in at all, the international customer service line printed on the back of your debit or credit card is usually available for collect calls. Placing a collect call from outside the U.S. or Canada often requires dialing through a local operator, so write down the local access codes for your destination before you leave home.
Fees and the Currency Choice at Checkout
Standard checking and debit accounts typically charge a foreign transaction fee of 1% to 3% on purchases and ATM withdrawals made in another currency. Some premium account tiers waive these fees and reimburse foreign ATM operator surcharges. If you travel often, it’s worth asking whether your bank offers such a tier.
At a foreign merchant or ATM, you’ll often be asked whether to pay in U.S. dollars or the local currency. Choose the local currency. Selecting dollars triggers dynamic currency conversion (DCC), where the merchant or ATM operator sets the exchange rate and applies its own markup, often 3% to 5% on top of any fee your bank already charges. Paying in the local currency lets Visa or Mastercard set the rate, which is almost always lower.2HSBC Bank USA. Should You Pay in Local Currency Outside the U.S.?
Your Rights If Something Goes Wrong
Regulation E, the federal rule governing electronic fund transfers, protects you against unauthorized debit card charges and electronic transfers no matter where they happen. What changes overseas is the timing and, in some cases, the paperwork.
Liability Caps for Unauthorized Transfers
How much you can be held responsible for depends on how quickly you notify the bank:
- Within two business days of discovering the loss or unauthorized use, your liability is capped at $50, or the total unauthorized amount if less.3eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
- After two business days but within 60 days of the statement that shows the transfer, your liability can rise to $500.
- After 60 days, you can be responsible for the full amount of any further unauthorized transfers.
If something like a hospitalization or natural disaster kept you from notifying the bank in time, those deadlines are extended to a reasonable period.
Longer Investigation Window for Foreign Transactions
When the disputed transfer was initiated outside the United States, your bank has up to 90 days to investigate rather than the usual 45. Provisional credit, if the bank hasn’t finished its review, must arrive within 20 business days instead of 10.4Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors Plan around those timelines if you need to dispute a charge while still on the road.
Foreign ATMs and Receipts
A bank isn’t required to provide a terminal receipt for a transaction initiated outside the U.S., but it still has to treat any inquiry you make about that transaction as a formal error notice and follow the standard dispute process.3eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E) No paper slip doesn’t mean no recourse.
If Your Phone Is Lost or Stolen
Losing the device that holds your banking app is an urgent problem. The faster you act, the smaller your Regulation E exposure and the narrower the window for someone else to get in.
- Remote-wipe the device. Apple’s Find My iPhone and Google’s Find My Device let you erase the phone from any browser, which removes the banking app and any stored credentials.
- Call your bank on the international line printed on the back of your card. Ask them to freeze your digital credentials and block the physical cards. Notifying within two business days holds your liability to $50.
- From another device, change the password on your bank account, your email, and anything else the phone had access to.
- When you have access again, review your transaction history and report anything unfamiliar within 60 days of the statement to keep your dispute rights.
Carrying a backup, such as a second debit card on a different account or a small stash of local currency, keeps you from being stranded while the bank works through its security process.
A Note on Foreign Account Reporting
Using your U.S. banking app while abroad does not create any foreign account reporting obligation on its own. The FBAR filing requirement applies only if you actually open or hold an account at a foreign financial institution, and only when the combined value of your foreign accounts exceeds $10,000 at any point in the year.5Internal Revenue Service. Report of Foreign Bank and Financial Accounts (FBAR) If your trip involves opening a local account or loading a foreign prepaid card, track the balance and check whether you cross that threshold.