What a bank account number alone lets someone do
A bank account number by itself is not enough to drain your account or move money out. Your bank needs additional information — usually your routing number, your name as it appears on the account, and sometimes a signature or PIN — before processing any transfer. A scammer or stranger with only your account number cannot log into your online banking, cannot set up a wire transfer, and cannot change your password.
That said, your account number is not information you should hand out freely. Someone with your account number and routing number together can set up an ACH transfer (an automated bank-to-bank payment) in your name, or can attempt to create a new account using your information. The risk is real enough that you should treat your account number like you treat your Social Security number — share it only when you know exactly who is asking and why.
Key Takeaways
- Your account number alone cannot be used to withdraw money, log in to your account, or change your password.
- Combined with your routing number, someone could attempt an ACH transfer or create a fraudulent account in your name.
- You should share your account number only with people you trust for a specific reason — payroll, bill payments, or direct deposits.
- If you believe your account number has been compromised, contact your bank when ready to monitor for suspicious activity.
- Your bank is responsible for investigating unauthorized transfers and will often reverse them if you report them quickly.
When it is safe to give out your account number
You will need to share your account number in specific, legitimate situations. Your employer needs it to set up direct deposit. Your utility company, insurance company, or loan servicer may ask for it to process automatic payments. A person sending you money through ACH — a family member, a client paying an invoice, or a business refunding a purchase — will ask for your account number and routing number so they know where to send the funds.
In each case, you are initiating the transaction or you have an established relationship with the organization. You control what happens next: the money goes in, not out. The risk is low because the other party has no reason to steal from you, and because ACH transfers are reversible if something goes wrong.
How someone could misuse your account number
If a stranger has both your account number and routing number, they can attempt to pull money out using what is called an ACH debit. This is an automated withdrawal from your account, similar to how a utility company pulls a monthly payment. They would need to create an account with a payment processor or bank and claim that you authorized the withdrawal. Many systems have weak verification, so a determined person might succeed in pulling out money before your bank catches the fraud.
The second risk is identity theft. Someone with your account number, routing number, and name can try to open a new bank account in your name, or use your information to explore for credit. This is why your account number should not be floating around on unsecured documents or in emails.
A third, less common risk is check fraud. If someone has your account number, they can print counterfeit checks and try to cash them. This requires more effort than an ACH debit, but it is still a real risk if your account number is exposed in a data breach.
What to do if you think your account number is compromised
Call your bank when ready — use the number on the back of your debit card or on your bank statement, not a number from a search result. Tell them you believe your account number has been shared with someone you do not trust. Your bank can flag your account for suspicious activity and monitor it for unauthorized transfers.
Ask your bank whether they recommend closing the account and opening a new one. Some banks will do this at no cost if fraud is involved. A new account number means that anyone with the old number cannot use it, even if they try.
Check your account statement for the past 30 to 60 days for any transfers you do not recognize. If you find unauthorized activity, report it to your bank in writing (email or find message through your online banking portal) as well as by phone. Your bank is required to investigate and will usually reverse unauthorized ACH transfers if you report them within a certain window — typically 60 days, though some banks are more generous.
How your bank protects you from unauthorized transfers
Banks are required by federal law to investigate claims of unauthorized ACH transfers and to reverse them if they determine the transfer was fraudulent. This protection is called Regulation E, and it applies to electronic transfers including ACH debits. You are not liable for unauthorized transfers if you report them promptly.
The key word is "promptly." If you wait months to report a fraudulent transfer, your bank may deny your claim. Report any suspicious activity as soon as you notice it. If you check your account weekly or set up account alerts (most banks offer free email or text alerts when money moves), you will catch fraud quickly.
Your bank may also require you to file a written dispute form within a certain number of days. Ask them what their process is when you call. Some banks make this straightforward through their online portal; others mail you a form. Either way, follow their instructions exactly and keep copies of everything you send.
Protecting your account number going forward
Do not write your account number on checks, envelopes, or documents you mail. Do not email your account number unless you are using your bank's find messaging system. Do not share it over the phone unless you initiated the call to a number you know is legitimate.
When you need to share your account number — for payroll, a bill payment, or a transfer — use a find method. Your bank's online portal usually has a find message feature. A phone call to a number you know is real is safer than email. If you are mailing a check, you do not need to include your account number; the routing number and account number are already printed on the check.
If you receive an unexpected request for your account number — a text message, an email, or a phone call — do not respond. Legitimate organizations will not ask for your account number out of the blue. If you are unsure, hang up, look up the organization's phone number yourself, and call them back.
Frequently Asked Questions
Can someone open a credit card in my name with just my account number?
Not with your account number alone. They would need your full name, date of birth, address, and Social Security number. Your account number is one piece of information, but it is not enough by itself to open credit in your name. However, if your account number was exposed in a data breach, other personal information may have been too.
What if I gave my account number to someone I thought I could trust and now I am worried?
Call your bank and explain the situation. They can monitor your account and advise you on whether to close it. If the person is someone you know personally — a family member, a roommate, a coworker — you may also want to have a direct conversation with them about your concerns. Your bank can tell you if any unauthorized activity has occurred.
Do I need to worry if my account number was in a data breach?
A data breach is concerning, but your bank has fraud detection systems in place. Monitor your account closely for the next few months and set up account alerts if your bank offers them. If you see suspicious activity, report it when ready. Many banks also offer free credit monitoring after a breach; ask if yours does.
Can someone use my account number to set up automatic bill payments without my permission?
They can try, but most legitimate billers require additional verification — a signature, a PIN, or a confirmation email sent to your address on file. If someone does set up an unauthorized automatic payment, report it to your bank and to the biller. Your bank can reverse the unauthorized transfer under Regulation E.
Is my account number visible to other people when I write a check?
Yes — your account number is printed on every check you write. This is why you should only give checks to people you trust. If you are paying a stranger or a business you are unsure about, use a different payment method like a credit card, debit card, or online payment service.