<prompt> Human: The other day, I got an email from Wells Fargo updating me on my bank account balance. It was at -650. Quickly, I logged onto my wells fargo account from my phone to figure out what was going on. Somehow, I couldnt log in. So I called the wells fargo number to check what the most recent transactions were. The automated system said there were two transactions for 500 and then for 1000 to Aspiration Funds - Mary Smith. It was an ACH transfer. I immediately called the fraud number to report these unauthorized transactions. Wells Fargo gave me a claim number. Anyways, I checked again today, and it looks like these transactions, which were pending on Friday, are now posted. Looks like the thief officially has my money now. I really thought by reporting the fraud early Wells Fargo would be able to stop the electronic transfer from going through, but they didnt. Do you guys know if they could have stopped a pending transaction from going through anyway? Anyways, today I got hit with an insufficient funds fee and an overdraft fee. At the time the fraudulent transactions were initiated, I had less than a 1k in my bank account. Why? Because thank goodness I had just made a big rent payment 2k as well as a large car payment 1k - Im trying to pay off my car as soon as possible prior to the transaction. Wells Fargo says it takes 10 business days to resolve the claim. I also read on their website that sometimes it can take up to 90 days??? Also, a google search has revealed cases where they have denied consumers fraud claims. Im really scared. Right now, I am using my credit card while this is being resolved, but I do have to pay a credit card payment soon. Unfortunately, credit cards cant be paid... with other credit cards, and pretty soon, rent and car payments will also be due again.Other background info:- The day prior, I had received an email from wells fargo about an application for a bulk order of visa gift cards was saved. I thought this was suspicious but I didnt immediately call Wells Fargo because 1 I thought it might have been a promotional email? 2 I might have accidentally applied because I play around with my phone a lot and 3 no money was stolen at this point.. So I clicked on the link in the email, which took me to wells fargo.com. I logged in, and deleted any pending applications for gift cards.- My gmail account said there was a suspicious login from Chile. - One of my credit cards said my account was included in a list of accounts that did business with a merchant that had a data breach. Fortunately, there were no fraudulent transactions on this card, and I have order a new card.Given this information, what should I do to protect myself going forward? Ive already changed my passwords to all my account. Do I change my checkings account number as well? I havent done so yet, because I have a direct deposit going through this week, and my work said I cant change the account number of the direct deposit because its already in process. I can change the account number as soon as I get the deposit though.A friend also suggested I delete all personally identifiable information from facebook and social media sites.I also went ahead and closed 3 credit cards I dont use.Assistant: You got phished. You clicked on an email from Wells Fargo that brought you to a mirrored site where they took your log in details.Never click on a link in an email for your financial institutions. Only go directly to those financial institution websites by typing in the URL.Human: My co-worker said it might have been a phishing email. But I checked the email address and it said And the link did take me to the wellsfargo.com website. I think they really did have my account login and tried to apply for gift cards through my wells fargo account.  <response>: The email address is usually spoofed faked to appear familiar. Ive gotten spam emails from my own email address. I know I didnt send myself spam.The actual site you were sent to could have been a site designed to look exactly like Wells Fargos. Thats how they get you to put in your information. If it looked like NOT WFs site, you wouldnt put your login creds in.Nothing youve said makes me think you didnt get phished. 