PanicStation.org
UK USA
us Money & financial emergencies

What to do if…
your direct debit or automatic payment has been changed without your permission

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Use a trusted phone number or your bank’s official app or website to stop the next payment where possible, then report the change as unauthorized. Do the same with the merchant or biller so the payment permission is revoked at both ends.

Do not do these things

  • Don’t click payment-confirmation links or call numbers from a suspicious text, email, or pop-up.
  • Don’t wait for the next debit to see what happens; stopping it can help prevent more loss.
  • Don’t close the account immediately before asking the bank how that affects the stop-payment request, dispute, and records.
  • Don’t share security codes, passkeys, one-time passwords, or login details with anyone who contacts you.
  • Don’t assume a password change alone fixes it if the payment authorization or bill-pay instruction was changed.

What to do now

  1. Check what actually changed. In your bank app, card account, or bill-pay screen, write down the merchant or payee, amount, date, account ending, and whether it looks like an ACH bank debit, recurring card charge, or bank bill-pay payment. Take screenshots if you can do this safely.
  2. Call the bank or card issuer using a trusted route. Use the number on your card, a statement, or the official app. Say: “An autopay or recurring payment was changed without my permission. I need to stop the next payment and report any unauthorized transfer or charge.”
  3. Ask for the right stop action.
    • For an ACH or preauthorized electronic transfer, ask for a stop-payment order. If the debit is at least three business days away, say that clearly; if it is sooner, still call and ask what can be done.
    • For a recurring card charge, ask the card issuer what it can do to block further charges from that merchant and open a dispute for any unauthorized charge.
    • For bank bill pay, ask the bank to cancel or pause the scheduled payment and check whether any new payee was added.
  4. Report the problem promptly. Tell the bank: “This was unauthorized, or the preauthorized payment was changed without my permission.” If an unauthorized electronic transfer is already on a statement, try to report it within 60 days after that statement was sent.
  5. Ask what written follow-up is required. Ask: “Do you need written confirmation, what is the deadline, what address or secure message route should I use, and what details should I include?” Save the confirmation number, chat transcript, secure message, or letter.
  6. Revoke authorization with the company or biller. Contact the merchant through its official website, app, or known customer-service number. Say you are withdrawing permission for future debits or recurring charges, give the payment details, and ask for written confirmation that autopay is off.
  7. Secure the accounts connected to the payment. Change the passwords for your banking, card, merchant, and email accounts. Turn on multi-factor authentication. Review contact details, linked accounts, external transfer settings, trusted devices, new payees, and recent logins.
  8. If this may be identity theft, start the official recovery steps. Go to IdentityTheft.gov and follow the recovery plan. Consider a fraud alert or credit freeze; a credit freeze is usually placed separately with Equifax, Experian, and TransUnion.

What can wait

  • You do not have to decide today whether to switch banks, change your phone number, or file a police report unless your bank specifically asks for one for the claim.
  • You do not need to prove who changed it right now; focus first on stopping future payments, reporting the unauthorized change, and securing access.
  • You can wait on deeper credit cleanup until the payment route is contained, unless you see signs of new accounts or broader identity theft.

Important reassurance

This can feel alarming because it affects both money and control of your accounts. You are not overreacting. A steady sequence is enough for now: stop the next payment where possible, report it, revoke permission, and lock down access.

Scope note

These are first steps only to stop further payments, trigger the bank or card issuer’s process, and secure your accounts. Later decisions, including identity-theft recovery, complaints, or legal questions, may need specialist help.

Important note

This is general information, not legal, financial, or professional advice. If you feel unsafe or threatened by someone connected to the change, prioritize immediate safety and contact local emergency services.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us