Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →If an Android banking trojan may have captured your PIN or bank login, stop using the suspected phone for banking and contact your bank’s fraud department immediately from a trusted number. Then secure your accounts from a separate device you believe is clean, and only afterward work through Android malware cleanup. Do not wait to confirm the infection before telling the bank.
1. Contact your bank and contain the risk
Use the phone number on your bank card or statement, or open the institution’s official app or website on a separate trusted device. Do not use contact details in an unexpected call, text, pop-up, or email. Tell the fraud department that your Android phone may have malware and that your PIN or login may have been captured.
As an Amazon Associate I earn from qualifying purchases.
- Ask the bank to secure online access and affected payment methods, and to block or review suspicious transfers.
- Report any unfamiliar transactions or changes to account details, even if the amount seems small.
- Follow the bank’s official account-recovery process if you cannot sign in.
- Keep a record of when you contacted the bank, reference numbers, and the instructions you received.
If someone calls or messages claiming to help, never give them a one-time verification code. The FTC states, “Anyone who asks you for your account verification code is a scammer.” Use the trusted contact route above instead. FTC guidance on bank impersonation scams.
2. Change credentials from a separate device
Do not sign in to banking or other sensitive accounts on the suspected phone while you are addressing the possible infection. On a different device you believe is clean, change the bank password and any other password reused on the phone. Use a unique password for each account.
#1 Best Overall
- Sign out other active sessions if the bank or service offers that control.
- Enable two-factor authentication where available.
- Check that account-recovery email addresses and phone numbers are still yours.
- Secure the email account used for bank recovery, especially if it shares a password with the bank.
If you cannot change a password or regain access, use the service’s official recovery flow and tell the bank the phone may have been infected. FTC guidance also recommends stopping sensitive logins on a suspected device, updating security software, scanning, and changing passwords with two-factor authentication enabled. FTC guidance on recognizing and removing malware.
3. Know the US reporting deadlines
US rules depend on what was stolen and what kind of transaction occurred. The CFPB’s guidance, last reviewed in 2026, describes these timelines for the situations below; they are not a guarantee of reimbursement for every transfer or a rule for every country. Contact the bank promptly even if a listed deadline has not passed. CFPB: liability for stolen debit cards and card numbers.
| Situation | CFPB guidance |
|---|---|
| Someone stole and used your debit PIN or security code | Notify the bank or credit union within two business days of discovering the theft. For the covered transactions described by the CFPB, timely reporting protects you from paying more than $50. |
| An unauthorized electronic transfer is reported to the bank | The bank generally has ten business days to investigate, or 20 business days if the account has been open for less than 30 days. |
| The bank determines an error occurred | It must correct the error within one business day and report its findings within three business days. |
| An unauthorized withdrawal appears on a statement, but you did not lose a card or PIN | Notify the bank right away and no later than 60 days after the statement was sent. |
The two-business-day advice for a stolen PIN or security code is the urgent rule when that applies. The statement deadline covers a different situation, so do not assume one replaces the other.
Free tools Windows power users keep installed
One-click scans. No signup required.
4. Check transactions and report identity misuse
Review recent transactions and account details for unfamiliar activity. Look for small debits, new payees, changed contact information, password-reset notices, or transfers you did not authorize. Report suspicious transfers to the bank as soon as you see them and retain your notes and any case numbers.
If other identity information was misused in the United States, the CFPB recommends closing affected accounts and contacting the financial institutions’ fraud departments. You can report identity theft at IdentityTheft.gov and consider whether a fraud alert or credit freeze is appropriate. Report scams to the FTC at ReportFraud.ftc.gov. Outside the US, contact your institution and your country’s fraud-reporting agency; the deadlines above are US-specific.
5. Remove the suspected Android malware
After banking access is contained, use Google’s Android guidance to check the phone. Android menu names vary by version and manufacturer, so labels may differ.
- Enable Google Play Protect and run its available checks.
- Install available Android, security, and Google Play system updates.
- Uninstall apps you do not trust or did not intentionally install. Do not reinstall the suspected app or enter banking credentials on the phone while resolving the issue.
- Review your Google Account security settings for unfamiliar activity or changes.
Google says a device reset may be necessary if signs of malware continue, or you may need help from the device manufacturer. If you are not confident you can remove the malware, contact manufacturer support or a trusted technician—not a phone number or ad that appears unexpectedly. A scan can help identify problems, but it cannot guarantee that every compromise is gone. Google: remove unwanted ads, pop-ups and malware.
If you already used the infected phone
Do not spend time trying to determine exactly what the trojan captured before contacting the bank. Treat the PIN or login as potentially exposed: report the risk, stop using the phone for sensitive sign-ins, and change credentials from a separate device. If the bank confirms there is no unauthorized activity, continue monitoring the account and complete the device cleanup before using the phone for banking again.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
