Banking App Setup, Made Safe and Simple
Set up Chase, Wells Fargo, Bank of America, Capital One, U.S. Bank, Citi, or your credit union app — with confidence. Mobile check deposit, Zelle safety, alerts, and the scams every bank customer should know.
Pick your bank
Tap the card for your bank to see enrollment, biometric login, day-one tasks, mobile deposit, Zelle setup, transfer limits, and eStatement enrollment.
Chase Bank — step by step
Largest U.S. bank by assets — full-featured app, wide ATM network.
1. Enroll in online banking
Open chase.com in a web browser on a desktop or laptop first. Click "Sign in" in the top right, then "Not enrolled? Sign up now." You will need your account number (on a paper statement or the bottom of a check), your Social Security number, and your date of birth. Create a username at least 8 characters long and a password with letters, numbers, and a symbol. Chase will text or email a 6-digit code to confirm it is you.
2. Download the app
On iPhone, open the App Store and search for "Chase Mobile." On Android, open the Google Play Store and search for the same. The official app is made by "JPMorgan Chase." Look for the blue octagon logo. Tap "Get" or "Install" — the app is free.
3. Turn on biometric (Face or Fingerprint) login
Open Chase Mobile and sign in with your username and password. Tap the person icon at the bottom right, then "Profile & settings." Tap "Security" then "Face ID" (iPhone) or "Fingerprint" (Android). Slide the switch on and confirm with your face or finger. From now on, you can sign in without typing your password.
4. Day one — what to do first
- Check your balance on the home screen — it is the big number at the top.
- Tap "Accounts" to see recent transactions. Scroll to spot anything you do not recognize.
- Tap the menu (three lines) → "Profile & settings" → "Manage alerts" and turn on: low balance alert, large transaction over $200, and sign-in from a new device.
- Tap "Pay & transfer" → "Pay bills" → "Add a payee" to set up automatic bill pay for your electric, cable, or water bill.
5. Mobile check deposit
Tap "Pay & transfer" → "Deposit checks." Pick the account to deposit into, type the amount, and sign the back of the paper check including the words "For Mobile Deposit Only to Chase." Hold your phone flat above the check on a dark, solid surface in bright light. Tap the shutter for the front, then flip the check and tap again for the back. Review and tap "Deposit." Most checks post the same business day; funds may be available by the next morning. Deposit limit is usually $10,000 per day for most customers.
6. Zelle — with scam warnings
Tap "Pay & transfer" → "Send money with Zelle." The first time, agree to the terms and confirm your email and phone number. To send money, pick a contact or type their email or mobile number, enter the amount, and confirm. Money moves within minutes and CANNOT be taken back. Only send to people you know in person. Chase will never ask you to send yourself money with Zelle to "verify" or "protect" your account.
Learn more about messaging scams on our Social Media — Safe & Sane guide.
7. Transfer limits to know
Zelle: $2,000 per day, $16,000 per 30 days for standard checking. Chase QuickPay to external accounts: $25,000 per day with 3-day delivery. Wire transfer: up to $250,000 per day but requires a visit or phone call for first-time recipients.
8. Enroll in eStatements
Tap your account → "Account services" → "Paperless." Agree to the terms and pick which accounts. You will get an email each month when a new statement is ready. Save or print the PDF for your records — tax time is easier when they are in one folder.
Universal security — do these for EVERY bank
Whatever bank you use, these settings and habits matter. Spend 10 minutes on each one and you have done more than most customers ever will.
Turn on two-factor authentication (2FA)
What 2FA is, in plain English
Two-factor authentication ("2FA") means you need TWO things to sign in — your password plus a one-time 6-digit code texted to your phone. Even if a criminal steals your password, they still cannot get in without your phone. Every bank app in this guide supports 2FA, and every one of them should have it turned on.
Turn on 2FA for every bank
Inside the bank's app, go to Settings → Security. Look for "Two-factor authentication," "Enhanced Security," or "One-Time Passcodes." Pick "Text message" as the delivery method and confirm your phone number. You will get a test code. Save backup codes somewhere safe (not on your phone) in case you lose your phone.
Use biometric login too
Face ID (iPhone) or Fingerprint (Android) is extra protection. Your face or finger unlocks the app on your phone only — if the phone is lost or stolen, the thief cannot sign in. Turn it on in each bank app's Security settings after you enable 2FA.
Alert types every customer should enable
Low balance alert
Get a text or email whenever your balance drops below an amount you pick ($100 is common). This catches withdrawals you did not make and keeps you from accidentally overdrafting.
Large transaction alert
Any purchase or withdrawal over a threshold you pick (try $100 or $200) triggers an immediate alert. This is the single best fraud-detection alert you can turn on.
Sign-in from new device
If anyone signs into your account from a phone, tablet, or computer the bank has not seen before, you get a text instantly. If you did not sign in moments ago, that is fraud — change your password and call the bank.
Debit card purchase
Some banks let you alert on every debit card purchase. It sounds like a lot of texts, but you will spot a fake charge within minutes instead of days.
Password rules that actually work
- Use at least 12 characters — longer is always stronger.
- Mix uppercase letters, lowercase letters, numbers, and a symbol like ! or #.
- Never reuse your bank password anywhere else. If any site you used the password on gets hacked, your bank is at risk too.
- Avoid names, birthdays, pet names, or anything a stranger could find on Facebook.
- Use a passphrase — four random words with spaces or dashes, like "coffee-lamp-orchid-forty-7" — easier to remember and very hard to crack.
- Consider a password manager (1Password, Bitwarden, or Apple's built-in Passwords app) so you do not have to remember every password.
Real bank emails vs. phishing
Never click a link inside a "bank" email or text. Open the app yourself instead.
- Never click a link in an email or text that says it is from your bank. Open the bank app directly or type the web address yourself.
- Real bank emails address you by name — "Dear Mr. Smith" — not "Dear Customer."
- Real banks do not ask for your password, PIN, full Social Security number, or one-time code by email, text, or phone. Ever.
- Your caller ID can be faked. If a "bank" call feels off, hang up and dial the number on the back of your card.
- Hover over links (on a computer) or long-press (on a phone) to see the real web address. chase.com is real; chase-secure-login.net is a scam.
- Check the email sender. Real Chase emails come from @chase.com — not @chase-support.com or @jpmorgan-secure.co.
Mobile check deposit — step-by-step
The single biggest complaint with mobile deposits is a blurry photo. These six habits fix that for any bank.
Lighting is everything
Stand near a window during the day, or turn on the brightest overhead light you have. No shadows — if your phone throws a shadow on the check, move or use a flashlight held to the side. The app rejects dark, blurry photos.
Put the check on a dark, flat surface
A dark wood table, a black countertop, or a piece of black paper works. The contrast helps the app find the edges of the check. Never hold the check in your hand — it will move and the photo will blur.
Endorse both sides the right way
Flip the check over. In the top part on the back (marked "Endorse here"), sign your name exactly as it appears on the front. Under your signature, write "For Mobile Deposit Only at [Your Bank]." Many banks reject checks without this line — they started requiring it in 2018.
Hold the phone flat and steady
Hold the phone directly above the check, about 6–10 inches away, so the phone is parallel to the table. Most apps auto-capture when the check is centered and in focus. If it does not auto-capture, move closer or farther until the edges show in green.
Keep the paper check for 30–60 days
After your mobile deposit posts, write "Deposited [date] via mobile" on the front of the check and put it in a safe folder for 30–60 days. If the deposit is ever reversed or questioned, you still have the paper. After 60 days of normal activity, shred the check — never toss it in the trash uncut.
Never deposit the same check twice
Depositing one check at two banks — or re-submitting after it posts — is check fraud. The banks notice within days, and you will owe the money back plus fees. If the app seems to have failed, wait 10 minutes and check the pending list before trying again.
Quick Tip
Write "For Mobile Deposit Only at [Your Bank]" on the back of every check you deposit with the app. Without this line, many banks will reject the deposit — and you will have to mail the check or take it to a branch.
Real bank scam scripts — know them, avoid them
These are actual messages and calls reported to the FTC and AARP. Scammers reuse these scripts because they work. Read them now and you will recognize the next one in your phone.
The "Chase Fraud Department" call
"Hello, this is Michael from Chase Fraud Services. We detected a $1,200 charge in Miami on your debit card. Did you authorize this? No? Okay, to protect your account, I need you to move your balance to a new, secure account. I'll stay on the line while you send it via Zelle."
How to spot it
Real fraud departments NEVER ask you to send yourself money, move funds to a "safe account," or share a one-time code. They cancel your card and issue a new one. Hang up and call the number on the back of your card.
The "verify your account" text
"Wells Fargo Alert: Unusual activity detected. Tap the link to verify your account now: wellsfargo-security[dot]com/verify. Failure to respond within 2 hours will result in account lockout."
How to spot it
The real Wells Fargo domain is wellsfargo.com. Hyphens, "security," "verify," or "login" in the middle of the domain are red flags. Never tap bank links in texts — open the bank app yourself.
The one-ring callback
Your phone rings once from an 876, 268, or 473 area code. You call back — it charges $5 per minute like a 900 number while a "bank officer" keeps you on the line asking security questions.
How to spot it
Look up unfamiliar area codes before calling back. 876 is Jamaica, 268 is Antigua, 473 is Grenada — all international pay-per-minute numbers. Do not return calls to numbers you do not recognize.
The gift card request
"Your account has been frozen due to unpaid federal taxes. To unfreeze it, pay the balance in Apple gift cards or Target gift cards. Purchase $500 and read me the codes on the back — I'll credit your account immediately."
How to spot it
No bank, no IRS, no police officer, no utility company — nobody real — asks for payment in gift cards. Ever. The moment a caller says "gift cards," hang up.
The Zelle reversal scam
"Hi, this is Jessica from Bank of America fraud. Somebody tried to Zelle $900 from your account. To reverse it, send $900 to your OWN phone number using Zelle, and we'll cancel the original."
How to spot it
You can't Zelle yourself to "cancel" anything. Sending Zelle to your own phone number sends it to whatever account that number is registered to — which is probably the scammer's account. Hang up and call the bank directly.
The "login from new device" panic text
"New sign-in from Chicago, IL detected on your Citi account. If this wasn't you, reply NO. (Then the scammer calls you pretending to be Citi fraud, asking you to confirm your one-time code.)"
How to spot it
Real bank texts don't ask you to reply or share codes by phone. Open the Citi app and check if anything is actually wrong. Never share a one-time code with anyone who calls you — banks do not need your codes; the codes are FOR you.
Frequently asked questions
The questions nearly everyone asks after setting up their first bank app.
Is mobile banking actually safe?
Yes — and in many ways safer than paper. Banks use strong encryption and multi-step verification, and they are federally required to refund unauthorized charges if you report them within 60 days of your statement. Your biggest risks are scammers tricking YOU, not the app itself. Turn on 2FA, use biometric login, watch for phishing, and never share one-time codes with anyone.
What if my phone is lost or stolen?
Sign in to your bank from any computer and change your password — this signs the app out on all devices. Then call the bank fraud number. Your bank can flag the account and watch for unusual activity. Because the app uses biometric login (and your Face ID or fingerprint does not match the thief), they cannot get in even with your phone in hand. Using "Find My iPhone" or "Find My Device" on Android, you can also remote-wipe the phone.
Does Zelle have buyer protection like a credit card?
No. This is the single biggest thing to understand. Zelle is a way to send cash — like handing someone a twenty-dollar bill. Once it is sent, it is final. If you paid for something that never arrived or was fake, the bank will not refund you. Zelle is for paying people you know in person (family, friends, your landlord, your babysitter) — never strangers, never online sellers, never anyone who pressures you.
Can I still go in person after I set up the app?
Absolutely. Branches and tellers are still there for every customer. Many seniors use the app for balance checks and deposits at home but still visit the branch for cash, cashier's checks, or anything complicated. The bank does not penalize you for using the branch.
What if I forget my password and type it wrong 5 times?
Every bank locks the account temporarily after 3–5 wrong attempts to prevent attacks. Usually the lockout lifts in 15–30 minutes. If you cannot wait, tap "Forgot password" in the app — the bank texts you a reset code, and you pick a new password. You can also call customer service (the number on the back of your card) and they will reset it after confirming your identity.
What should I do the moment I think my account is compromised?
Open the bank app and change your password. Sign out of all devices in Security Settings. Call the bank fraud number on the back of your card to freeze the account and reissue cards. Review recent transactions and dispute anything you did not make — banks give you 60 days from the statement. Change your email password too, since that is how criminals often get into bank accounts. Our Refund & Return Helper walks through the full recovery steps.
Should I use a fingerprint or Face ID instead of a password?
Use both. Your password is your primary identity; Face ID or Fingerprint is a convenient shortcut on your specific phone. If the phone is lost, your password still protects you on any new device.
Is it safe to use bank apps on public Wi-Fi (coffee shop, airport)?
It is safer than it used to be — bank apps encrypt traffic from end to end. But to be extra safe, use your phone's cellular data (turn off Wi-Fi for a moment), or install a VPN. Never sign into the bank from a public computer at a library or hotel business center.