Yes, but only to people and organisations you trust with your money
Your checking account number alone cannot drain your account. A thief needs both your account number and your routing number to move money out, and even then only through specific channels — ACH transfers, checks, or direct debit. But sharing your account number is still a decision to make carefully, because the right combination of information in the wrong hands creates real risk.
The safest rule: give your account number only when you initiate the transaction yourself, or when you have a direct relationship with the organisation asking for it. A bank you use, an employer paying you, a utility company you chose — these are different from a stranger who called you, or a website you found through a search result.
Key Takeaways
- Your account number by itself cannot be used to withdraw money, but combined with your routing number it can be used for ACH transfers or to set up automatic payments you did not authorise.
- Share your account number with your bank, your employer's payroll department, and organisations you have chosen to pay — not with people who contact you first.
- If someone calls or emails asking for your account number, hang up or delete the message and contact the organisation directly using a phone number or website you know is real.
- Scammers often pose as utility companies, the IRS, or your bank because people expect to give account information to those organisations.
Who should have your account number
Your bank has it. Your employer's payroll or HR department needs it to deposit your paycheque. Any organisation you have chosen to pay — your electric company, your mortgage lender, your insurance company — may ask for it to set up automatic payments or to process a payment you initiated.
These are situations where you are in control. You went to the organisation, or you called them, or you logged into their website. You decided to give the information. That is the baseline for safety: you made the first move.
Government agencies sometimes need your account number too. The IRS uses it to deposit tax refunds. Social Security uses it to deposit benefits. But again, you are in control — you provided the number on a form you filled out, or through a find portal you logged into yourself.
Who should never have your account number
Anyone who calls you and asks for it. Anyone who emails you asking for it. Anyone who texts you a link and asks you to enter it. Anyone you found through a search result or an ad.
Scammers pose as utility companies, banks, the IRS, and debt collectors because those are organisations people expect to ask for account information. They use real-sounding names, they may even spoof a real phone number so it appears on your caller ID, and they create a sense of urgency — your account is locked, your bill is overdue, you owe back taxes.
The rule is straightforward: if someone contacts you first asking for your account number, do not give it. Hang up. Delete the email. If you think the request might be real, call the organisation back using a phone number you find yourself — not a number they gave you. Your bank's number is on your debit card. The IRS number is on your tax return. A utility company's number is on your bill.
What happens if someone has both your account and routing number
They can set up an ACH transfer — an electronic transfer from your account to theirs. This is how payroll deposits work, how bill payments work, how most money moves between accounts. ACH transfers are not when ready; they take one to two business days. Your bank may catch a fraudulent transfer and stop it, but that depends on whether the transfer looks suspicious and whether your bank is monitoring for it.
They can also write a check against your account if they have access to your checkbook, though this is less common in modern fraud. And they can set up automatic payments — recurring charges that pull money from your account on a schedule.
The damage is real, but it is not unlimited. Federal law limits your liability for unauthorised electronic transfers to $50 if you report the fraud within two business days, and to $500 if you report it within 60 days. After 60 days, you may lose all protection. This is why monitoring your account matters: log in regularly, read your statements, and report anything you do not recognise when ready.
How to protect your account number
Do not write it on a cheque unless the cheque is going to someone you trust. Do not leave bank statements in the trash — shred them. Do not give it over the phone unless you called the number yourself. Do not enter it on a website unless you typed the web address yourself or clicked a link from an official source you know is real.
If you use online bill pay through your bank, you do not need to give your account number to the companies you pay. Your bank handles the transfer. This is safer than giving your account number directly to each utility, each creditor, each service provider.
Use strong passwords on your bank account and your email account. Your email is the key to resetting passwords and recovering accounts, so protect it as carefully as you protect your bank login. Enable two-factor authentication if your bank offers it — this means a scammer needs not just your password but also a code sent to your phone.
What to do if you gave your account number to the wrong person
Contact your bank when ready. Tell them you shared your account number with someone you should not have. Ask them to monitor your account for unauthorised activity. Some banks will issue you a new account number and a new debit card, though this is not always necessary.
Check your account for the next 60 days. Look for charges you do not recognise, transfers you did not make, or new automatic payments you did not set up. If you see anything suspicious, report it to your bank right away. Take a screenshot or write down the date, amount, and description of the transaction.
If the person also has your routing number and has already made an unauthorised transfer, report it as fraud. Your bank will investigate and may reverse the transfer. Keep records of everything — the date you reported it, who you spoke to, what they said they would do.
Account number versus routing number: why both matter
Your account number identifies your specific account. Your routing number identifies your bank. Together, they are the information needed for an ACH transfer — the electronic system that moves money between banks.
Someone with only your account number cannot do much. They cannot transfer money without knowing which bank to transfer it from. Someone with only your routing number cannot do much either — they know the bank but not which account to pull from.
But someone with both can initiate a transfer. This is why the combination matters more than either number alone. It is also why you should be cautious about sharing either one, even though the account number is less sensitive than a password or a PIN.
Frequently Asked Questions
Is my account number the same as my debit card number?
No. Your debit card number is printed on the front of your card. Your account number is different — you can find it on your cheques, on your bank statements, or by logging into your online banking. A thief with your debit card number cannot access your account without the card itself and your PIN.
Can someone withdraw cash from my account if they have my account number?
Not directly. They cannot walk into a bank branch and withdraw cash using only your account number. They would need a debit card, a cheque, or access to your online banking login. But they can use your account number to set up an ACH transfer to move money to their own account, which they can then withdraw.
What if a company I trust asks for my account number but I am not sure it is real?
Hang up or close the email. Find the company's official phone number on your bill, on their website, or on the back of your card. Call that number and ask whether they were trying to reach you. If they were, they can help you again. If they were not, you have just avoided a scam.
Do I need to give my account number to set up direct deposit?
Yes. Your employer needs your account number and routing number to deposit your paycheque. This is a standard, safe request. Provide it through your company's official payroll system or HR department, not through email or a link someone sends you.
Can I change my account number if I think it has been compromised?
Yes. Contact your bank and ask them to issue you a new account number. They will close the old account and open a new one. You will need to update your direct deposit information with your employer and any organisations that pull automatic payments from your account. This takes time but is worth it if you believe your account number is in the wrong hands.