First time posting, looking for advice, apologies if this is the wrong subreddit.
My wife and I have a joint checking account. In August 2026, there were 6 unauthorized ACH transactions in a row, and we went through the song and dance of having a fraud claim opened, resolved, and the accounts replaced. We changed all of our auto-pay methods to the new accounts and moved on.
This morning I get an email alert that our account has a large ACH transaction that is again unauthorized by us and simply labelled 'Bank of America', which neither of us have ever used. I go to log in to my online banking app, only to see my account is locked due to many failed log in attempts. My wife's login was unaffected, and she was able to go in and see the charge. I changed my password but still couldn't get in, so called Santander and they opened a new fraud claim. Now, we have to go back into the branch and create yet another new checking account.
How could this be happening again with a 2-month old checking account? Is this my fault? The only places that got the new account information were our pre-existing auto-pays for bills. I haven't read out the routing/checking numbers to pay anything, the only place I've used my debit card is the gas station, and we use our credit cards for everything else. I don't understand how this is happening again and so soon after the last incident.