Gave Bank Info to IRS Scammer — What Happens Next

Kathryn Jones — Founder, The Identity Vault

Kathryn built The Identity Vault to stop scams before they happen. Updated April 2026.

If you gave bank info to an IRS scammer, the next few minutes matter most. Banks can often stop or reverse unauthorized transactions — but only if you act immediately.

Here is exactly what to do right now.

How the Scam Works That Made You Give Bank Info to an IRS Scammer

A victim received a call about a supposed IRS payment error and provided bank details for a “refund.” Days later, unauthorized withdrawals began draining their checking account.

The “refund” framing is deliberate. Scammers know that asking for bank details to receive money feels safer than asking you to send a payment. In reality, a routing and account number is everything needed to initiate an ACH transfer or create fraudulent checks.

The IRS does not issue refunds by calling and asking for your bank account number. Refunds go to the account listed on your tax return, or arrive by check.

Step 1: If You Gave Bank Info to an IRS Scammer — Call Your Bank Now

Call the fraud or security department at your bank using the number on the back of your debit or credit card — not any number from the scam call. Tell them what information you shared and ask them to:

• Place a fraud alert on your account immediately
• Block any pending ACH debits or transfers you did not authorize
• Issue a new account number and debit card if necessary
• File an internal fraud claim

Step 2: Freeze Your Accounts

Depending on what information you shared, your bank will recommend one of these actions:

• If you shared your routing and account number: Request a new account number. This closes the old account to new debits while preserving your balance and history.
• If you shared a card number: Your bank will cancel the existing card and issue a new one. If your PIN was also compromised, mention that too.

Step 3: Change Your Credentials

Update your online banking passwords immediately. Enable two-factor authentication on your bank account, and on any other financial account that shares the same password. Use an authenticator app rather than SMS codes.

Step 4: Monitor Your Transactions

Even after reporting to your bank, check your account every day for at least 30 days. Set up real-time transaction alerts through your bank’s app. Watch for small “test” transactions of $0.01 or $1.00 — scammers sometimes run these to verify an account before making larger withdrawals.

Also freeze your credit at all three bureaus — Equifax, TransUnion, Experian — in case the scammer also has your SSN and attempts to open new accounts in your name.

Step 5: Report the Scam

Report to these agencies — your bank may require a report number to process the fraud claim:

• FTC: ReportFraud.ftc.gov
• Treasury Inspector General: 1-800-366-4484
• FBI IC3: ic3.gov
• Local police: File a police report for your records

Your Legal Protections

Federal law gives you real protection. Under Regulation E, if you report unauthorized ACH or debit transactions within 2 business days, your liability is capped at $50. Report within 60 days and it’s capped at $500. Most major banks offer zero-liability fraud policies for prompt reports — ask about this when you call.

For credit card transactions, the Fair Credit Billing Act caps your liability at $50 if unauthorized charges are reported within 60 days of the statement date.