What to do if you shared bank login details
Online banking credentials give direct access to your money. Act immediately to lock the attacker out.
Quick answer
Online banking credentials give direct access to your money. Act immediately to lock the attacker out.
- Contact your bank's fraud line immediately
- Change online banking credentials from a trusted device
- Enable two-factor authentication
- Review recent activity
Do this now
Contact your bank urgently as your first action.
Understanding what happened
Your online-banking login is the most sensitive thing you can share, because it can give direct access to move money. If you entered your username and password into a fake page - especially if you also approved a code or 'verification' - assume someone may be trying to get into the account right now.
Scammers often pair a stolen login with a follow-up call: a fake 'fraud team' that references your details and pressures you to move money to a 'safe account' or approve a payment 'to cancel' a transaction. No genuine bank ever asks you to do this.
Speed is everything. Contacting your bank immediately through a number you find yourself lets them freeze access, stop payments, and reset your credentials before more damage is done. The steps below put those actions first, then help you secure the device and other accounts.
First 5 minutes
- Contact your bank's fraud line immediately
- Change online banking credentials from a trusted device
- Enable two-factor authentication
- Review recent activity
First 24 hours
- Watch for 'safe account' follow-up scams
- Set transaction alerts
- Keep evidence
- Report to your fraud authority
What not to do
- Do not pay anyone who promises to recover your money for an upfront fee
- Do not act on follow-up messages claiming to be the fraud team
- Do not delete evidence before saving it
Evidence to save
- Screenshots of the message and sender details
- Phone numbers, usernames, links, and account or wallet addresses
- Transaction references, receipts, and amounts
How to report
Report through official channels for your area.
Find official reporting links for your country in the reporting directory.
- Do not use phone numbers or links from the suspicious message - look up the official ones yourself.
- Report quickly if money was sent or ID documents were shared; speed improves your options.
- Keep your evidence - see how to save scam evidence.
Beware of recovery scams: no legitimate service guarantees getting your money back for an upfront fee.
This is general safety information, not legal, financial, or cybersecurity incident-response advice.
Frequently asked questions
How quickly should I act?
As soon as possible. Fast action - especially contacting your bank - gives the best chance of limiting harm or stopping a payment.
Will I get my money back?
Sometimes, if you act quickly, but there is no guarantee. Be very cautious of anyone who promises guaranteed recovery for an upfront fee - that is a recovery scam.