Your debit card can be safe in your wallet while someone else uses a different card tied to the same bank account. Federal prosecutors in Maryland say that is essentially what happened to more than 40 people, most of them seniors. Learn how the alleged scheme worked, the warning signs that are easy to miss, and what to check on your own account.
Your Debit Card Never Left Your Wallet — But Someone Else Got One
Debit Card Fraud Without Your Card: How an Address Change Can Lead to a New Card in Someone Else’s Hands
Most people think protecting their debit card means keeping it in their wallet and never sharing the PIN. That is good advice. But a new federal case shows it may not be enough.
Prosecutors in Maryland describe an alleged scheme involving more than 40 victims, over 1,500 ATM withdrawals, and more than $1 million taken. Most of the people targeted were seniors, with an average age of 81.
The victims did not lose their cards or hand them to anyone. According to prosecutors, someone else got new cards tied to their accounts instead.
What Prosecutors Say Happened
According to the Justice Department, Roy Dave Davis, a 34-year-old Maryland man, obtained personal information belonging to customers of a financial institution.
Prosecutors say he changed the mailing addresses on their accounts to locations he controlled, then ordered debit cards in their names. Those cards were allegedly used at ATMs and for more than $100,000 in luxury fashion purchases.
Davis has been charged with bank fraud. He has not been convicted, and the allegations still have to be proved in court. The Justice Department has not named the financial institution or explained how the personal information was allegedly obtained.
Your Card Is Only One Part of Your Bank Account
When people think about debit card fraud, they usually think about the card itself. Keep it safe. Don’t give out the PIN. Don’t click strange links.
But your account is more than the card. It also has a mailing address, a phone number, an email address, login credentials, approved devices, and every card connected to it.
If someone takes control of those details, you could still be holding your original debit card while something completely different happens behind the scenes.
Why This Kind of Fraud Is So Easy to Miss
Picture it from the customer’s side. You look in your wallet, and the card is there. It may still work. Nothing looks wrong.
Meanwhile, someone may have changed the address on the account and requested another card. If you get paper statements, the next one may not arrive. You would probably assume the mail is late, not that someone changed your address at the bank.
Then unfamiliar withdrawals start showing up, and by that point another card may already be active.
Each step can look routine on its own. An address change does not move money. People replace cards all the time. But an address change, then a new card request, then ATM withdrawals is a pattern. The missing money may not be the start of the fraud. It may be one of the last steps.
The 30-Day Rule for Card Issuers
Federal banking rules have recognized this warning sign for years.
If a card issuer gets a change of address on an existing debit or credit card account, and then gets a request for an additional or replacement card during at least the first 30 days, it has to assess whether the address change is valid before issuing the new card.
That can mean contacting the customer at the old address, using a communication method already set up with the bank, or using another verification step in the institution’s identity theft prevention program.
This does not mean the bank in the Maryland case did anything wrong. The Justice Department has not said when the address changes happened, what verification the bank used, or how those checks may have been defeated.
Red Flags Banks Watch For
Banks also look for other warning signs, including:
- Unusual spending
- Heavy use of available funds
- Mail returned while transactions continue
- Missing statements
- Customers reporting activity they don’t recognize
Any one of these can be innocent. People move, travel, and replace cards. The concern grows when several of them happen together.
Why ATM Withdrawals Hit So Hard
ATM withdrawals take money directly out of the account you may use for rent, groceries, medicine, and utilities.
Even if the bank eventually resolves the dispute, the money is missing in the meantime. If you live on a fixed income and rent is due, that gap can be a real problem. That is why catching this early matters.
The Warning Sign That’s Easy to Brush Off: A Missing Statement
Not everyone checks a banking app every day. Many older adults still rely on monthly paper statements.
Most people won’t worry because one envelope didn’t show up. But if someone changed the mailing address on the account, a missing statement could be one of the first clues that something is wrong.
If your statement normally arrives every month and suddenly doesn’t, find out why.
How to Protect Your Bank Account
Turn On Alerts for Account Changes, Not Just Spending
Many people turn on alerts for purchases or large withdrawals and stop there. Look for alerts about changes to the account itself, too.
Will your bank tell you if your mailing address changes? What about your phone number or email? Will you get a notice if a replacement debit card is ordered, or if a new device signs in?
Every bank is different, so don’t assume one general fraud alert covers everything. Check your settings to see what is available. If you haven’t set up online access yet, our guide on how to set up online banking walks through it.
Check Your Contact Information
From time to time, make sure your bank still has the right address, phone number, and email.
Do this through the official banking app, the bank’s website, a trusted phone number, or a branch. Never use a phone number or link from an unexpected message that claims to be from your bank.
Consider a Trusted Contact for Older Relatives
Some banks and credit unions let you name a trusted contact. That gives the bank another person to reach if it suspects financial exploitation or can’t get in touch with the account holder.
A trusted contact ordinarily cannot withdraw money or manage the account. That is different from a joint owner or a power of attorney. Ask what your bank offers.
What to Do If Money Disappears
If you notice an unauthorized withdrawal, don’t wait to see whether another one happens. Call your bank or credit union right away.
Federal consumer guidance says that if you still have your physical debit card and your PIN or security code wasn’t lost or stolen, you should report an unauthorized transaction immediately, and no later than 60 days after the statement showing it was sent. Waiting longer can increase your possible liability for later transfers in some situations.
Different timing rules can apply if the card, PIN, or security code was lost or stolen. The simplest rule is this: if something looks wrong, report it immediately.
The bank generally has 10 business days to investigate an unauthorized electronic transaction, although federal error-resolution rules can affect that process.
Save everything: statements, transaction details, emails, texts, alerts, and any notice showing your account information changed. If identity theft or elder financial exploitation may be involved, consider reporting it to law enforcement, Adult Protective Services, the Federal Trade Commission, or the FBI’s Internet Crime Complaint Center. For a step-by-step checklist, see what to do first if you’ve been scammed.
What This Means for You
Protecting your debit card is only part of protecting your bank account. According to prosecutors, the most troubling part of this case is not that someone grabbed a victim’s card. It is that the banking system was allegedly persuaded to create another card and send it somewhere else.
So when you check your account, don’t only look at money coming in and going out. Look at the address, phone number, and email on file. Pay attention to new devices and replacement card requests.
Frequently Asked Questions
Can someone use my bank account if I still have my debit card?
Yes. In the Maryland case, prosecutors say new debit cards were ordered in victims’ names after their mailing addresses were changed, while the victims still had their original cards.
What should I do if my bank statement doesn’t arrive?
Contact your bank through its official app, website, phone number, or a branch and ask why. A missing statement can be a sign that someone changed the mailing address on your account.
Does my bank have to check an address change before sending a new card?
If a card issuer gets a new card request during at least the first 30 days after an address change, federal rules require it to assess whether the address change is valid before issuing the card.
How long do I have to report an unauthorized debit card withdrawal?
Report it immediately. If you still have your card and your PIN wasn’t lost or stolen, federal guidance says to report no later than 60 days after the statement showing the transaction was sent. Waiting longer can increase your possible liability.
Can a trusted contact take money out of my account?
Ordinarily, no. A trusted contact is someone the bank can reach out to. That is different from a joint owner or someone with power of attorney.
Has the man in the Maryland case been convicted?
No. He has been charged with bank fraud, and the allegations still have to be proved in court.
Key Takeaway
Your debit card is only one key to your account. Your address, phone number, email, devices, and account settings can help someone create another one.
- Turn on alerts for address, phone, email, device, and card changes.
- Check your contact information through official channels.
- If a statement stops coming or a withdrawal looks wrong, call your bank right away.
Money Instructor provides educational information only and does not offer legal, financial, or banking advice. The case described involves allegations that have not been proved in court. Bank features, alerts, and liability rules vary, so confirm details directly with your bank or credit union using its official website, app, or phone number. To report fraud, contact your bank first and visit ReportFraud.ftc.gov.
