The quick answer
Contact your bank or credit union immediately. Use its official mobile application, the telephone number on the back of your card, or the number on a recent statement. Explain exactly what you shared and whether any money moved. Do not contact the bank using a telephone number or link supplied by the recruiter.
Call the financial institution’s fraud department immediately and ask whether the transaction can be stopped, recalled, reversed, or disputed. Recovery depends on the payment method and circumstances, so do not wait for the scammer to respond.
First, determine what was exposed
“Bank information” can describe several different types of information. Tell the bank precisely what the recruiter received so its fraud team can recommend the correct protections.
| Information or activity | Why it matters | Immediate priority |
|---|---|---|
| Bank name, routing number, or account number | The account information may be used in attempted financial fraud. | Notify the bank and ask what protections it recommends. |
| Debit-card number, expiration date, or security code | The card may be used for unauthorized purchases or withdrawals. | Lock the card if available and contact the issuer immediately. |
| Online-banking username or password | Someone may attempt to access or control the account. | Contact the bank and change exposed credentials immediately. |
| PIN or one-time verification code | The information may allow unauthorized access or transactions. | Tell the bank exactly which code was shared and when. |
| A transfer, payment, check, or cryptocurrency transaction | Funds may already be moving or available to the scammer. | Contact the relevant financial provider without delay. |
| Money received and forwarded for the “employer” | You may have been recruited as an unwitting money mule. | Stop moving funds and immediately contact your bank. |
Immediate recovery steps
Stop communicating and preserve the evidence
Do not send additional information, verification codes, money, cryptocurrency, gift cards, or photographs of identification. Save the job listing, recruiter messages, email addresses, telephone numbers, usernames, payment instructions, receipts, and transaction details before blocking the sender.
Contact your real financial institution
Call the number on your card or statement, or use the institution’s official application. Explain that the information was shared during a suspected fake-job or recruiter scam.
Ask whether the bank recommends restricting the account, replacing a card, changing account credentials, blocking transactions, replacing an account number, or taking another protective action. Do not close or alter an account without discussing pending payments, deposits, and automatic bills with the institution.
Secure online access
If login information was exposed, change the banking password using a trusted device and the official website or application. Use a unique password that is not shared with another account.
Secure the email account connected to your banking profile as well. Review recovery information, sign out unfamiliar sessions where possible, and enable multifactor authentication. Never give anyone a one-time authentication code.
Review transactions and enable alerts
Review recent transactions for unfamiliar transfers, withdrawals, purchases, payees, or small test charges. Continue monitoring because suspicious activity may not appear immediately.
Enable available alerts for transactions, account changes, new payees, password changes, and sign-ins. Report anything unfamiliar to the financial institution promptly.
Report unauthorized transactions promptly
Consumer protections can depend on the type of transaction and how quickly it is reported. The Consumer Financial Protection Bureau advises consumers to notify their bank or credit union immediately when they discover an unauthorized transaction or missing money.
Keep notes showing when you reported the issue, whom you spoke with, any case number, and what follow-up documentation the institution requested.
Protect your identity if other information was shared
If the recruiter also received your Social Security number, driver’s license, date of birth, passport, or other identity documents, visit IdentityTheft.gov for a personalized recovery plan.
You may also need to review your credit reports or place credit freezes. Follow the recovery steps that apply to the exact information exposed.
Report the job scam
Report the incident to the platform where the job appeared, the real company being impersonated, the Federal Trade Commission at ReportFraud.ftc.gov , and the FBI’s Internet Crime Complaint Center when appropriate.
Unauthorized transaction versus a payment you initiated
Tell the bank whether someone accessed the account without permission or whether you personally authorized a payment after being deceived. These situations may be handled differently.
If you sent the payment yourself, recovery may be difficult, but you should still contact the bank or payment provider immediately. Ask whether the transaction is pending and whether any stop, recall, cancellation, or fraud-review option is available.
Do not pay another person who promises guaranteed recovery. Scammers may return pretending to be investigators, bank employees, attorneys, or recovery specialists.
Could this be a money-mule scheme?
A fake employer may deposit money into your account and instruct you to forward it, purchase cryptocurrency, send gift cards, or pay another person. The Consumer Financial Protection Bureau explains that some money mules unknowingly move funds originating from fraud.
If an unfamiliar employer sends money and asks you to forward it, stop. Contact your financial institution and explain the complete situation. Do not return or redirect the money based on instructions from the recruiter.
Can a legitimate employer request bank information?
A verified employer may request banking information for direct deposit during formal onboarding after hiring. The timing, purpose, and submission method matter.
Confirm the employer and job independently. Submit payroll information through the company’s official employee or payroll system—not through an unexpected text, messaging application, personal email account, or form controlled by an unverified recruiter.
Recovery checklist
- I stopped communicating with the suspected scammer.
- I saved the messages, job listing, receipts, and transaction details.
- I contacted my bank using independently verified information.
- I explained exactly what information was exposed.
- I secured any affected banking and email credentials.
- I reviewed recent activity and enabled available alerts.
- I reported unfamiliar transactions promptly.
- I created an identity-theft recovery plan if identity data was exposed.
- I reported the fake job to the platform and impersonated company.
- I will not pay anyone promising guaranteed recovery.
Frequently asked questions
What should I do if I gave a fake recruiter my bank information?
Contact your real bank or credit union immediately. Explain what information was shared and whether any money moved. Follow the fraud team’s instructions and preserve all evidence.
Should I close my bank account?
Let the bank determine whether the account should be restricted, replaced, monitored, or closed. Ask how any change could affect legitimate deposits, checks, and automatic payments.
Can my bank reverse a payment sent to a scammer?
It depends on the payment method, timing, and circumstances. Contact the bank or payment provider immediately and ask what options remain. Recovery is not guaranteed.
What if I only shared my routing and account numbers?
Contact the bank and tell it exactly what was shared. Its fraud team can evaluate the exposure and recommend monitoring, restrictions, replacement, or other protections.
What if the fake recruiter also has my identification?
Visit IdentityTheft.gov and follow the recovery plan for the specific information exposed. Tell your bank that identity documents were also shared.
Organize the evidence
Record recruiter details, suspicious messages, payments, warning signs, and preserved evidence in a private browser-based summary.