A correct password no longer proves it is you signing in, so banks also score the device, the network, the phone number, the way you type and where the money goes. Drawing on the FFIEC's authentication guidance and the Federal Reserve's 2026 account takeover toolkit, this piece walks through seven signals bank fraud systems use, from unrecognized devices and impossible travel to a new payee right after an email change. It explains why travel, VPNs, new phones and caregivers set off the same flags, works through a hypothetical San Francisco-to-New York login, and ends with a checklist for the next time a bank stops a sign-in.
Scammers now send fake bank fraud alerts and flood inboxes to hide real ones, so the alerts on your own card account need a second look. This guide covers three settings the big issuers offer in their apps: a purchase alert set to $0 or the lowest amount allowed, since Visa says card-testing charges are often under $10; alerts for online, phone and foreign charges; and security alerts for changes to your contact details, sign-ins and digital wallets, moved off email-only delivery. It sets out debit and credit liability rules with their deadlines, works through a stolen-card case where a quick report keeps the loss to $40 instead of $500, and shows how to check whether an alert is real.
In July 2026 a New York judge refused to throw out the state's fraud lawsuit against Zelle's operator, and by June Nacha's ACH fraud-monitoring rules covered every bank on that network. Neither one changes the basic US rule. Regulation E covers transfers someone else makes from your account, including with a login or code tricked out of you, but generally not a payment a scammer talked you into sending yourself. This page explains FedNow, RTP and Zelle and their 2026 limits, five places where fraud controls fail, and a hypothetical minute-by-minute scam showing what each protection would pay back. It ends with a reporting checklist built around the two-business-day and 60-day deadlines.
Buy now, pay later plans are showing up on more credit reports, but the scores most lenders pull have not changed to count them. This guide sets out, provider by provider, what Affirm, Klarna, Afterpay, PayPal and Zip say they report and to which bureau, separating pay-in-four plans from longer monthly loans. It explains how Experian, TransUnion and Equifax keep BNPL entries apart, where FICO's BNPL scores stand, and what the September 2026 Fannie Mae and Freddie Mac score changes mean for a mortgage application. A worked example adds up three overlapping pay-in-four plans month by month, and a closing checklist covers free weekly reports and disputes.
A law signed on May 9, 2025 voided the CFPB's $5 overdraft fee cap before it could take effect, so in 2026 what you pay still depends on your bank: $0 at Capital One and Citi, $10 at Bank of America and $34 to $36 at Chase, Wells Fargo and U.S. Bank. Opting out under Regulation E stops overdraft fees only on ATM withdrawals and one-time debit card purchases, so checks, ACH bills and subscriptions can still trigger them. This guide sorts the impact by bank and situation, covers California's $14 cap at state-licensed credit unions, runs one bad day three ways and shows how to opt out online, by phone or at a branch.
On September 16, 2026 the Federal Reserve raised its target range to 3.75%–4%. The FDIC's September national averages, which use end-of-August data from just before the hike, put savings at 0.37% and interest checking at 0.07%. That gap is not an accident. Using FDIC and Fed data from 2022 to 2026, the piece shows how little of each rate move reached ordinary savings, why many checking accounts are designed to pay nothing, and what Regulation DD forces banks to disclose about APY, tiers and variable rates. A worked example prices a year on $10,000 at the averages and at 3.50%, before and after tax, and a checklist covers insurance, sweeps and Form 1099-INT.
An Atlanta Fed report released in May 2026 found that phones and tablets were used for 14% of in-person payments in 2025, up from 11% a year earlier. Every tap still runs on one card, so the cards you rarely choose can go idle. Card agreements from Chase and Citi give the issuer broad power to close accounts, and Regulation Z requires no advance notice of a closure or a limit cut. A worked example shows one closure lifting utilization from 12% to 20%. The guide also covers the notices you can still expect, wallet tokens after a card is replaced, debit card protections, deposit insurance gaps for app balances, and a checklist for keeping older cards open.
Losses to fake police and officials nearly doubled; here's how to protect money a wire can't easily get back. The FBI's 2025 crime report and its September 2026 warning about fake police and officials show where wire-linked fraud grew. Government-impersonation losses nearly doubled to $798 million, while business email compromise, the scam most tied to wires, rose 10% but sits only 3% above 2023. This guide covers four common wire scams, why UCC Article 4A rarely undoes a wire you approved, when consumers get 30 minutes to cancel a transfer abroad, and a first-hours plan built on the FBI's freeze process, which froze 58% of the money at stake in 2025.
Alabama now makes crypto ATMs refund some scam victims, but most new rules warn or delay instead of repaying. Since October 1, 2026, Alabama crypto ATM operators must fully refund a customer in their first 30 days who was tricked into a deposit, fees included, and give back half to everyone else, as long as the victim reports within 60 days. This guide sorts the 2025 and 2026 changes into those that return money and those that only warn, delay or investigate: Arizona's refund law for new customers and Indiana's kiosk ban, gift card warning laws in New Jersey and Maryland, FINRA's pending brokerage holds and the House-passed GUARD Act. A worked example shows how the Alabama deadlines play out, and a short checklist covers the first calls and reports to make.
Breach notices topped 471 million in six months of 2026, but surveys disagree on whether more people freeze. One Identity Theft Resource Center survey shows self-reported freezes falling from 38.1% to 25.8%, while other ITRC readings point the other way. The law is settled: a free security freeze keeps lenders from pulling your report for new credit, takes effect within one business day of an online or phone request and lifts within an hour. The guide sorts next steps by situation, from Defense Department breach letters to apartment applications and children under 16, compares freezes with fraud alerts and paid locks, and covers four lesser-known agencies and what a freeze leaves open, from tax refunds to medical claims.
