A routing number alone cannot access your checking account
No. A company cannot withdraw money, transfer funds, or access your account using only your routing number. Your routing number identifies which bank holds your account, but it does not authorize anyone to move money. To actually access your account, someone would need both your routing number and your full account number, plus explicit authorization from you — usually in the form of a signed agreement or a direct authorization you give through your bank's system.
The routing number is the first piece of information, but it is not enough by itself. Think of it like a street address: it tells you which building to go to, but it does not give you a key to any apartment inside.
Key Takeaways
- Your routing number identifies your bank but cannot be used to access your account without your account number and your written or electronic authorization.
- Companies that process payments (payroll, bill pay, direct deposit) need both your routing and account number, plus a signed agreement or authorization form.
- ACH transfers — the electronic system most companies use — require explicit authorization from you before any money can move.
- If you give a company your routing and account number without authorization, you have not given them permission to take money; you have only given them the information they would need if you later authorized them.
What information a company actually needs to move money
To initiate an electronic transfer from your checking account, a company needs three things: your routing number, your account number, and your authorization. The authorization is the part that matters legally. It is usually a signed form, a checkbox you click online, or a verbal recording (for phone-based transactions). Without that authorization, the transfer cannot happen.
This is why payroll departments ask you to fill out a direct deposit form. They are not just collecting your routing and account number — they are getting your written authorization to move money into that account on a regular schedule. The same applies when you set up bill pay with a utility company or authorize an automatic payment to a creditor.
The authorization is what the Federal Reserve's ACH (Automated Clearing House) system requires before any transfer can be processed. Your bank will reject transfers that lack proper authorization, even if the routing and account number are correct.
When you should and should not share your routing and account number
You should share your routing and account number when you are setting up a legitimate transaction you want to happen. Common examples include direct deposit from an employer, automatic bill payments you have chosen, wire transfers you have initiated, or refunds from a company you have done business with. In each case, you are the one starting the process and authorizing the transfer.
You should not share your routing and account number with someone who contacts you unexpectedly asking for it, especially if they are pressuring you or claiming there is an urgent problem. Scammers sometimes pose as banks, utility companies, or government agencies and ask for this information over the phone or email. Legitimate companies rarely ask for your account number this way — they already have it if you are a customer, or they will ask you to log into your account to provide it securely.
If someone asks for your routing number alone, that is a lower-risk situation than if they ask for both numbers. But the safest approach is to verify who you are talking to before giving out any banking information. Call your bank directly using the number on your statement, or log into your account through your bank's official website.
How ACH transfers are authorized and protected
The ACH system is the network that handles most electronic transfers between checking accounts. Before any ACH transfer can be initiated, the person or company requesting the transfer must have written authorization from the account holder. This authorization can be a signed form, an electronic signature, or a recorded verbal authorization (for phone-based transactions), but it must be documented.
Your bank is required to verify that authorization exists before processing the transfer. If you later dispute a transfer and tell your bank you never authorized it, the bank will investigate. If the company cannot produce evidence of your authorization, the bank will typically reverse the transfer and return the money to you. This is called a chargeback, and it is one of the main protections you have against unauthorized ACH transfers.
That said, authorization disputes can take time to resolve — often 10 to 30 days — so it is better to prevent the problem by not authorizing transfers you do not understand or trust.
What happens if you give your information to a scammer
If you have given your routing and account number to someone you now believe was a scammer, the when ready risk depends on whether you also authorized them to take money. If you only gave them the numbers but never signed anything or agreed to let them withdraw funds, they cannot legally process a transfer through the ACH system. However, they could try to use that information in other ways — for example, posing as you to open a new account or explore for credit in your name.
If you did authorize a transfer (even unknowingly, by clicking a box or verbally agreeing), you should contact your bank when ready and report the transaction as unauthorized. Your bank can freeze your account, reverse the transfer if it has already gone through, and help you file a dispute. The sooner you report it, the better your chances of recovering the money.
You should also consider placing a fraud alert on your credit report with one of the three major credit bureaus (Equifax, Experian, or TransUnion). This makes it harder for someone to open accounts in your name, because creditors will have to verify your identity more carefully before approving new credit.
The difference between routing number, account number, and authorization
These three pieces of information do different jobs. Your routing number identifies your bank — it is nine digits that tell the ACH system which institution to send money to or pull money from. Your account number identifies your specific account within that bank — it is usually 8 to 17 digits and is unique to you. Your authorization is your permission for a specific transfer or series of transfers to happen.
A company that has your routing and account number but no authorization is in the same position as someone who knows your mailing address but has no key to your house. They know where to go, but they cannot enter without permission. The authorization is the key.
This is why you will sometimes see your routing and account number printed on the bottom of your checks — it is information that is already semi-public. The real protection comes from the fact that no one can use those numbers to move money without your authorization.
Frequently Asked Questions
Can a company charge my account if I only gave them my routing number?
No, not through the ACH system. They would also need your account number and your authorization. If someone is claiming they can charge you with only a routing number, they are either mistaken about how the system works or they are attempting a scam. Contact your bank if you are unsure.
What should I do if a company has my routing and account number but I do not remember authorizing them?
Check your email and any documents you may have signed — look for a direct deposit form, a bill pay agreement, or an authorization form. If you genuinely did not authorize them and a transfer has already occurred, contact your bank and report it as unauthorized. Your bank can reverse the transfer and investigate.
Is it safe to put my routing and account number on a check?
Yes. Your routing and account number are printed on every check you write, and they are not sensitive information on their own. The risk comes only if someone uses that information to initiate a transfer without your authorization — which is illegal and can be reversed if you report it to your bank.
Can someone open a bank account using my routing and account number?
Not with just those numbers. Opening an account requires identity verification — a government ID, Social Security number, and other personal information. However, if a scammer has your routing and account number along with other personal details, they could attempt identity theft. This is why it is important to monitor your credit and place a fraud alert if you suspect your information has been compromised.