What to Do in Case of a Cyberattack on the Banking System

In 2016, a coordinated cyberattack on the SWIFT interbank messaging system resulted in $81 million stolen from Bangladesh’s central bank. In 2021, a ransomware attack took down a major U.S. fuel pipeline — not a bank, but proof that critical infrastructure can be taken offline in hours. The question isn’t whether banking systems can be attacked — they already have been, repeatedly. The question is what a family of 4 should have in place before access to their money is disrupted.

This guide covers the practical financial preparedness steps that protect your family in a banking system disruption — not abstract cybersecurity theory, but concrete actions with specific dollar amounts and timelines.

Realistic Threat Assessment

What scenarios are actually plausible, and how long do they typically last?

Prepare primarily for the high-probability scenarios: a week-long disruption to your primary bank or card network. The systemic scenario requires more extensive preparation but is less likely in the short term.

Before Any Attack: Financial Preparedness Steps

1. Maintain an Emergency Cash Reserve

This is the single most important financial preparedness step and the one most families skip entirely. Digital payment systems can go offline simultaneously and without warning — and when they do, cash is the only medium of exchange that works.

Recommended cash reserve for a family of 4:

• Minimum: $500 in small bills (twenties and below) stored at home in a secure location — covers 3–5 days of essential purchases if cards are down
• Recommended: $1,000–$2,000 — covers 1–2 weeks of groceries, fuel, and essential services
• Enhanced: $3,000–$5,000 — covers extended disruption including potential car repair, medical co-pay, or short-notice accommodation

Bills to keep: Prioritize $20s and $10s. Large bills ($50, $100) are sometimes refused or can’t be made change for. Small bills ($1, $5) are useful for small purchases.

2. Keep Offline Records of All Financial Accounts

If your bank’s online portal goes down, you may have no way to access your account numbers, routing numbers, or recent transaction history. Keep a printed or written record (stored securely) that includes:

• All bank account numbers and routing numbers
• All credit card numbers, expiration dates, and customer service numbers
• Investment account numbers and contact information
• Mortgage/loan account numbers and servicer contact information
• Most recent statements (printed) — useful as proof of account in disputes
• Insurance policy numbers and provider contact information

Update this document annually and store it in a fireproof safe or with a trusted family member in another location. A USB drive with encrypted copies is also useful.

3. Distribute Accounts Across Multiple Institutions

Concentrating all your money in a single bank is a single point of failure. A banking cyberattack that takes down one institution leaves you completely without access. Distribution protects against this:

• Primary checking account: Your main bank for day-to-day transactions
• Secondary account at a different institution: A credit union or online bank (Marcus, Ally, Capital One 360) with 1–2 months of expenses in it — specifically for when your primary bank is unavailable
• Emergency credit line: A credit card at a different bank from your primary, kept at low utilization, available for large emergency purchases when your primary card doesn’t work

FDIC insurance covers up to $250,000 per depositor per institution — another reason not to concentrate all deposits at one bank.

4. Establish Non-Banking Value Stores

In a serious banking disruption, having some wealth outside the banking system provides additional security. Practical options for a family:

• Precious metals (gold/silver coins): 1 oz silver coins (~$30 each) are practical-sized stores of value that can be exchanged or bartered. 10–20 oz is a practical starting point ($300–$600). Keep them secured at home or in a bank safe deposit box at a different institution.
• Physical store of trade goods: Consumables with stable value — coffee, alcohol, tobacco, medications — have historically functioned as informal currencies in disrupted economies
• I-bonds and Treasury bills: Held directly through TreasuryDirect.gov outside the normal banking system — not immediately liquid, but safe from bank-specific disruptions

During a Banking System Disruption

First 24 Hours: Assess and Prioritize

1. Confirm the scope: Is it your bank specifically, or a broader disruption? Check news sources and your bank’s status page. Try accessing your secondary account at another institution.
2. Access your cash reserve: Get your emergency cash from your home storage. Don’t wait — during a disruption, ATMs quickly run out of cash as everyone rushes to withdraw.
3. Identify immediate needs: What purchases does your family need in the next 7 days? Groceries, fuel, medications, school supplies? Prioritize your cash reserve for these.
4. Alert your household: Make sure every adult family member knows the situation, knows where the cash is, and has access to the offline account records.

Extended Disruption (Beyond 24 Hours)

• Use your secondary institution for digital transactions — this is exactly what it’s for
• If cash becomes scarce regionally, prioritize essential purchases over discretionary ones
• Notify employers and billers about the disruption if automatic payments may fail
• Contact your bank via phone (customer service number from your printed records) for status updates — mobile apps and websites may be down while phone lines are operating
• Watch for scams — cyberattacks are accompanied by phishing attempts that impersonate your bank asking you to “verify” your account. Your bank will NOT ask for your password or PIN by phone or email.

After a Banking System Breach: Protecting Your Accounts

If a banking cyberattack involves data theft (vs. just a service disruption), your personal and financial information may be compromised. Take these steps:

Immediate Account Protection

• Change all online banking passwords: Use unique, strong passwords for each financial account. A password manager (1Password, Bitwarden) makes this practical.
• Enable multi-factor authentication (MFA): On every financial account. Authenticator apps (Google Authenticator, Authy) are more secure than SMS codes.
• Review recent transactions: Go back 90 days on all accounts. Report any unauthorized transaction to your bank immediately — federal regulation requires banks to investigate within 10 business days for electronic transfers.
• Change any reused passwords: If you’ve used the same password at your bank as at other sites, change those too — credential stuffing (using leaked passwords to access other accounts) is standard practice after a breach.

Credit Protection

• Place a credit freeze: Free at all three bureaus (Equifax, Experian, TransUnion). Prevents anyone — including you — from opening new credit in your name. Unfreeze when you need to apply for new credit. This is the most effective protection against identity theft after a data breach.
• Place a fraud alert: Requires creditors to verify your identity before opening new accounts. Active for 1 year; free; only needs to be placed at one bureau (they notify the others).
• Monitor your credit reports: annualcreditreport.com provides free reports from all three bureaus. Check all three immediately and set calendar reminders to check again in 90 days.

Tax Identity Theft Protection

Banking data breaches can enable tax identity theft — where a criminal files a fraudulent return in your name before you do, claiming your refund. Protect against this by filing an Identity Protection PIN with the IRS (available at IRS.gov) — this adds a 6-digit PIN requirement to your federal tax filing that only you know.

Longer-Term Financial Hardening

Common Mistakes in Financial Preparedness

1. Relying entirely on digital payment methods

When Visa had a system-wide outage in 2018, millions of cardholders were unable to pay for anything for hours — gas stations, grocery stores, pharmacies. Cash-carrying has declined to the point where many families have literally zero cash at home. This is a significant vulnerability for a household of any income level.

2. Storing sensitive financial documents only in cloud or online accounts

If your bank’s portal is down and your password is stored in a cloud-based password manager that requires your bank account for billing verification — you have a circular dependency problem. Keep critical financial information in physical, offline form.

3. Not diversifying across institutions

Most families have all accounts (checking, savings, credit cards) at one or two banks. A targeted attack on that institution leaves the entire household financially paralyzed. Diversification across at least three financial institutions — a primary bank, a secondary credit union or online bank, and a credit card from a different issuer — provides meaningful resilience.

4. Assuming the bank will make you whole immediately

FDIC insurance covers deposits up to $250,000 if a bank fails — but it’s for bank failures, not cyberattacks, and it doesn’t guarantee immediate access to funds. In a disruption, your money may be intact but inaccessible for days or weeks. The insurance protects you from permanent loss; it doesn’t protect you from temporary illiquidity. Cash on hand does.

5. Not having a plan for automatic payments

Mortgage, utilities, insurance, and subscription payments may fail if your primary account is disrupted. Know which automatic payments you have, know which accounts fund them, and have a plan for manually processing them from a secondary account if needed. Missing a mortgage payment due to a banking cyberattack is still a missed payment.

FAQ

How much cash should I keep at home for a banking emergency?

For a family of 4, I recommend a minimum of $1,000 in small bills accessible at home. The $1,000 covers roughly 7–10 days of essential household expenses (groceries, fuel, utilities) if card payments are down. If you want to be prepared for a 2-week disruption, $2,000 is the target. Keep it in a fireproof safe or hidden secure location — not in your wallet or a single easily-found spot.

Is it legal to freeze my credit and what does it cost?

Completely legal and free. Since 2018, the Economic Growth, Regulatory Relief, and Consumer Protection Act requires the three major bureaus to offer free credit freezes to all consumers. You can freeze and unfreeze your credit online through each bureau’s website at any time, typically effective within 24 hours. This is the single best identity theft prevention tool available and has no negative impact on your existing credit.

What’s the difference between a credit freeze and a fraud alert?

A credit freeze prevents any new credit from being opened in your name — no exceptions without your explicit unfreeze. A fraud alert asks creditors to take extra verification steps before opening new credit, but doesn’t block new accounts outright. A freeze is significantly stronger protection. Use both if you’ve been part of a data breach: file the fraud alert first (it automatically notifies all three bureaus), then individually freeze at each bureau.

Should I keep cash in gold or silver instead of regular currency?

For a short-term disruption (days to weeks), cash in dollars is more practical than precious metals — local businesses will accept $20 bills; few will accept a silver coin at fair value on short notice. Precious metals are a useful store of value for longer-term disruptions or systemic financial crises. Think of them as a different tool: cash handles short-term disruption, precious metals hedge against long-term dollar debasement or systemic banking failure. Both have a role.

Bottom Line

A banking cyberattack is one of the more likely infrastructure disruptions your family might face — more likely than an EMP, more likely than a volcanic eruption, less dramatic but more financially impactful in the short term. The preparation is straightforward: $1,000 in cash, offline records of your accounts, a secondary account at a different institution, and a credit freeze. Four steps, one afternoon, and your family can function through most realistic banking disruption scenarios.

Start with the cash. Everything else follows.

Dan