Checkpoints are security stops that banks and payment processors use to verify your identity and transaction details before money moves
When you send money, explore for credit, or access certain account features, the bank or service may pause the transaction to confirm who you are and whether the request is legitimate. This pause is a checkpoint. It can happen when ready online, or it can take a few hours or days depending on what triggered it and which institution is running the check. Understanding what checkpoints do and why they exist helps you move through them faster and know what to expect.
Checkpoints are not the same as holds or blocks. A hold freezes funds temporarily but lets the transaction proceed once the hold lifts. A block stops a transaction entirely until you take action. A checkpoint is a verification step — the institution is asking questions before deciding whether to proceed, hold, or block.
Key Takeaways
- Checkpoints verify your identity and the legitimacy of a transaction before the bank allows it to complete.
- Common triggers include large transfers, unusual account activity, new payees, and transactions from unfamiliar locations.
- You may need to confirm your identity by phone, email, text message, or through your online banking portal.
- Checkpoints typically resolve within hours to a few business days, though some may take longer depending on the bank's fraud review process.
- Knowing your bank's checkpoint procedures and keeping your contact information current helps you respond quickly when one occurs.
Why banks use checkpoints
Banks use checkpoints to prevent fraud and unauthorized access to your account. When a transaction looks unusual compared to your normal activity — a wire transfer three times your usual amount, a payment to a new person, a login from a country where you do not live — the bank's systems flag it for review. This protects you from theft and identity fraud, and it protects the bank from losses and regulatory penalties.
Checkpoints also serve a compliance function. Banks are required by federal law to monitor accounts for suspicious activity and report patterns that might indicate money laundering or other financial crimes. A checkpoint may be the bank gathering information to satisfy that legal obligation, not because your transaction is necessarily suspicious.
Common situations that trigger a checkpoint
Large transfers trigger checkpoints most often. If you wire $5,000 and your typical monthly transfers are $500, the bank will likely pause and verify. The threshold varies by bank and by your account history — a customer with a long record of large transfers may not trigger one for the same amount that flags a new customer.
New payees also commonly trigger checkpoints. The first time you send money to a person or business the bank has no record of you paying before, the system may ask you to confirm the payee's details and your reason for the transfer. Transfers to accounts outside the United States, to cryptocurrency exchanges, or to high-risk categories like gambling sites are flagged more often.
Unusual login activity triggers checkpoints too. If you sign into your account from a new device, a new location, or at an unusual time of day, the bank may ask you to verify your identity before letting you proceed. International travel, using a VPN, or logging in from a public WiFi network can all trigger this type of checkpoint.
Account changes also warrant verification. Adding a new authorized user, changing your mailing address, updating your phone number, or requesting a new debit card may all require you to confirm your identity through a checkpoint before the change takes effect.
How to respond when a checkpoint occurs
The bank will contact you through the phone number, email address, or text number on file. Read the message carefully — it will tell you which transaction triggered the checkpoint and what information the bank needs from you. Do not assume a message is legitimate just because it appears to come from your bank. Scammers impersonate banks in emails and texts.
If you receive a checkpoint notification, log into your bank's official website or app directly — do not click a link in the email or text. Go to your account settings or transaction history and look for a message from the bank there. Legitimate checkpoints will appear in your find banking portal. If you cannot find anything in your account, call the phone number on the back of your debit card or on your bank statement to verify the checkpoint is real.
When you confirm your identity, the bank will ask you to verify details about the transaction or your account. You may be asked to confirm the amount, the recipient, your reason for the transfer, or recent login locations. Answer honestly and completely. The more information you provide, the faster the checkpoint resolves.
Some checkpoints require you to answer security questions you set up when you opened the account. Others ask you to enter a code sent to your phone or email. A few may require you to visit a branch in person or speak to a representative by phone. The method depends on the bank and the risk level of the transaction.
How long checkpoints take to resolve
straightforward checkpoints — those that require only identity verification through a code or security question — usually resolve within minutes to a few hours once you respond. You can often complete these through your online banking app or portal without speaking to anyone.
More complex checkpoints, especially those involving wire transfers or large amounts, may take one to three business days. The bank's fraud team may need to review the transaction, contact the recipient's bank, or investigate your account history. During this time, your money is held and the transaction does not complete.
If the bank cannot reach you or you do not respond to the checkpoint, the transaction may be cancelled entirely. The money stays in your account, but you will need to restart the transaction once the checkpoint is resolved. Some banks will hold a transaction for up to seven days before cancelling it; others have shorter windows.
Checkpoints versus holds and blocks
A checkpoint pauses a transaction while the bank verifies information. Once you respond and the bank confirms the details, the transaction proceeds. A hold freezes funds for a set period — usually two to five business days for deposits or transfers — but does not require you to take action. The hold lifts automatically after the time passes.
A block stops a transaction completely and requires you to contact the bank to resolve it. Blocks happen when the bank suspects fraud, when you have violated the account agreement, or when the transaction violates regulations. A block may be temporary — lifted once you verify your identity — or permanent if the bank closes your account.
You may experience all three on the same transaction. For example, a wire transfer might trigger a checkpoint (verification step), then a hold (waiting period), and if something looks wrong, a block (stop the transaction). Understanding which one you are dealing with helps you know what to do next.
How to avoid unnecessary checkpoints
Keep your contact information current. Banks use phone numbers and email addresses to reach you during a checkpoint. If your number or email is outdated, the bank cannot verify you and may cancel the transaction. Update your information whenever you change your phone number or email address.
Establish a pattern of normal activity. If you suddenly wire a large amount after months of small transfers, it will trigger a checkpoint. If you regularly send money to the same people or businesses, the bank learns your pattern and flags new payees instead. This does not mean you should avoid large transfers — it means the bank will be more confident in them if they fit your history.
Use your bank's app or website for transactions when possible. Transactions initiated through your find banking portal are less likely to trigger checkpoints than those initiated through a third-party service or payment app. The bank can verify you logged in securely and can see your transaction history in real time.
Tell your bank before you travel internationally. If you will be using your debit card or logging into your account from another country, contact your bank in advance. Many banks will note this in your account and will not flag transactions from that location during your travel dates.
Frequently Asked Questions
Can a checkpoint delay a bill payment or rent?
Yes. If a checkpoint occurs on a bill payment or rent transfer, the transaction is held until you respond and the bank clears it. This can cause a late payment if the checkpoint takes several days to resolve. If you have a time-sensitive payment coming up, contact your bank in advance to let them know, or use a payment method that does not typically trigger checkpoints, such as automatic recurring payments you have already set up.
What if I do not respond to a checkpoint?
The transaction will be cancelled after a set period, usually three to seven business days depending on your bank. Your money remains in your account. You will need to restart the transaction once the checkpoint is resolved. The bank may also flag your account for additional review if you repeatedly ignore checkpoints.
Can a checkpoint happen on a deposit?
Yes, though less commonly than on transfers or withdrawals. A large deposit, a deposit from an unusual source, or a deposit pattern that differs from your history can trigger a checkpoint. The bank may hold the deposit and verify the source before crediting it to your account. This is separate from the standard hold banks place on deposits to may support the check or transfer clears.
Will a checkpoint affect my credit score?
No. A checkpoint is an internal bank security measure and does not appear on your credit report. It does not affect your credit score or your ability to borrow money. Only missed payments, defaults, and credit inquiries from lenders appear on your credit report.
What should I do if I think a checkpoint is a scam?
Do not click links or call numbers in the email or text. Log into your bank account directly through the official app or website, or call the number on the back of your debit card. Ask the bank representative whether a checkpoint was placed on your account. If no checkpoint exists, the message was a scam. Report the fake message to your bank and to the Federal Trade Commission at reportfraud.ftc.gov.