Yes, but only certain things — and your bank account number alone is less dangerous than your full banking details
Someone with only your bank account number can set up automatic payments from your account without your permission, but they cannot straightforward withdraw money or drain your balance. They need additional information — usually your routing number, your name as it appears on the account, or access to your online banking login — to do real damage. The risk is real, but it is limited and specific.
Think of your bank account number like your mailing address. It tells someone where to send something, but it does not give them a key to your house. What matters is what they can send, and to whom.
Key Takeaways
- A scammer with only your account number can attempt to set up automatic payments or ACH transfers, but most banks will reject these without matching your name and routing number.
- The real danger comes when a scammer has your account number plus your routing number, name, and signature — this combination lets them create unauthorized checks or ACH debits.
- Your debit card number, PIN, and online banking password are far more dangerous than your account number alone because they give direct access to your money.
- If someone uses your account number fraudulently, federal law limits your liability to $50 if you report it within 60 days of your statement.
- The fastest way to stop unauthorized payments is to call your bank directly and ask them to block ACH debits or issue a new account number.
What a scammer can actually do with your account number
The most common scam using only an account number is setting up an automatic payment or ACH debit — a recurring charge that pulls money from your account. A scammer might pose as a utility company, a subscription service, or a charity and ask you to "confirm" your account number. Then they set up a monthly charge.
However, most banks now require more than just the account number to process an ACH debit. They also want your routing number (the nine-digit code for your specific bank branch) and your name as it appears on the account. Some banks ask for a signature or authorization form. Without these, the payment often fails or gets flagged and reversed.
The second risk is check fraud. If a scammer has your account number, routing number, and knows your name, they can print fake checks and cash them. This is less common now because many businesses verify checks electronically, but it still happens. The money comes out of your account, and you may not notice for days.
What a scammer cannot do with only your account number
A scammer cannot log into your online banking with just your account number. They cannot use it as a debit card. They cannot call your bank and transfer money out without additional proof of identity. They cannot see your balance or transaction history.
This is why your PIN, your online banking password, and your debit card number are much more valuable to a scammer than your account number. Those give direct access. Your account number is one piece of a larger puzzle.
How to know if someone has used your account number fraudulently
Check your bank statement every week, not just once a month. Look for charges you do not recognize, especially small recurring ones — scammers often test with a small charge first to see if you notice. If you see an unauthorized ACH debit or a check you did not write, contact your bank when ready.
Many banks offer free alerts that notify you by text or email when a charge over a certain amount hits your account. Set this up if your bank offers it. Some also let you freeze ACH debits entirely until you unfreeze them, which is a strong defense if you are worried about fraud.
What to do if someone has used your account number
Call your bank's fraud line right away — do not wait for a letter or for the charge to post. The phone number is on the back of your debit card or on your bank's website. Tell them what happened and ask them to reverse the charge and block any future ACH debits from that source.
Ask your bank whether you should close the account and open a new one. Some banks will do this for free if fraud has occurred. A new account number means the scammer's information is useless.
If the fraud involved a check, ask your bank to flag your account so that any checks presented against it are verified by phone before they clear. This takes a few extra days but stops forged checks cold.
Write down the date, time, and name of the person you spoke to at the bank. Ask them to send you a written confirmation of the fraud report. Keep this in case you need to dispute the charge later or report it to the Federal Trade Commission.
Your legal protection if fraud happens
Federal law (Regulation E) limits your liability for unauthorized ACH debits and electronic transfers to $50 if you report the fraud within 60 days of your statement. If you wait longer than 60 days, your liability can be much higher — potentially the full amount stolen.
This protection applies only to electronic transfers and ACH debits, not to forged checks. Forged check fraud is covered under different rules, and your bank may take longer to investigate. Report it when ready and in writing.
If your bank drags its feet on investigating, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) or your state's banking regulator. The CFPB has a complaint portal at consumerfinance.gov.
How to protect your account number going forward
Do not give your account number to anyone who calls you, even if they claim to be from your bank. Your bank already has your account number — they do not need you to repeat it. If someone calls asking for it, hang up and call your bank directly using the number on your statement.
Be cautious about giving your account number to new businesses. If you are paying a utility bill or a medical bill for the first time, use your bank's bill pay feature instead of giving your account number directly. This way, your bank controls the transaction, not the other company.
Do not write your account number on checks you mail. Some people do this to speed up processing, but it puts your account number in the mail, where it can be stolen. The routing number and account number are already printed at the bottom of the check — that is enough.
Shred bank statements and any mail with your account number before throwing it away. Dumpster diving for financial information is a real tactic.
Frequently Asked Questions
Can someone open a new bank account in my name using just my account number?
No. Opening a new account requires a government ID, a Social Security number, and usually a credit check. Your account number alone is not enough. However, if a scammer has your Social Security number and other personal information, they could open an account fraudulently — but that is identity theft, not account number theft.
If I give my account number to pay a bill online, is that safe?
It depends on the website. Legitimate bill payment sites (your utility company's official website, your doctor's office portal) are generally safe because they use encryption and are regulated. Avoid entering your account number on unfamiliar websites or links sent in emails. When in doubt, call the company directly and ask for their official payment website.
What is the difference between my account number and my routing number?
Your routing number identifies your bank and branch — it is the same for everyone at your bank. Your account number identifies your specific account at that bank. Together, they are printed at the bottom of your checks. A scammer needs both to do serious damage, though your account number alone can still be used for attempted ACH fraud.
Do I need to close my account if someone got my account number?
Not necessarily. If the fraud was caught quickly and reversed, you may not need to. However, if the scammer also has your routing number, name, and signature, closing the account and opening a new one is the safest move. Ask your bank what they recommend based on what information was compromised.
How long does it take a bank to investigate fraud?
For ACH fraud, banks typically investigate within 10 business days and must resolve it within 45 days. For check fraud, the timeline is longer — sometimes 30 to 90 days — because checks move through a slower clearing system. Your bank should credit your account temporarily while they investigate, but confirm this when you report the fraud.