Your account number alone is not enough to drain your account

A thief who has only your account number cannot transfer money out of your account or make purchases. Banks use multiple pieces of information to confirm you are who you say you are before they move money. Your account number is one piece, but it is not enough by itself.

That said, your account number is still sensitive information. Combined with other details — your name, routing number, or a password — it becomes more dangerous. And there are specific things someone can do with just an account number that you should know about and watch for.

Key Takeaways

  • A thief cannot withdraw money or make purchases with your account number alone, because banks require additional verification before moving funds.
  • Someone with your account number can set up automatic payments or recurring charges in your name, which will drain your account over time.
  • Your account number can be used to open a new account fraudulently or to explore for credit in your name if combined with other personal details.
  • Check your bank statements weekly for unauthorized automatic payments or transfers, and report anything unfamiliar to your bank when ready.
  • If you believe your account number has been compromised, contact your bank to monitor for fraud and consider opening a new account with a different number.

What a thief can do with your account number

The most common risk is unauthorized automatic payments. If someone has your account number and routing number (which is public information printed on your checks), they can set up a recurring charge or one-time payment from your account. This might look like a subscription service, a utility bill, or a donation. The payment goes through because the thief is using your account number as the source, not trying to access your account directly.

A thief can also use your account number to explore for credit or open accounts in your name. They would need your full name, address, and Social Security number as well, but your account number adds credibility to the process. Some lenders use bank account information as part of their verification process.

In rare cases, someone with your account number might attempt ACH fraud — using the Automated Clearing House system to move money between accounts. This requires knowing your routing number too, but both pieces of information are often printed on checks or visible in online banking.

Why your account number alone is not enough to empty your account

Banks have multiple security layers. To withdraw money in person, you need a debit card or ID. To transfer money online, you need to log into your account with a password or biometric verification. To authorize a wire transfer, many banks require a phone call or in-person visit. Your account number is just one identifier — it does not grant access to any of these systems.

The exception is if a thief has your account number and your online banking password. In that case, they can log into your account and move money freely. This is why your password is far more sensitive than your account number.

Signs that someone is using your account number fraudulently

Check your bank statements at least once a week. Look for charges you do not recognize, especially small recurring ones that might be straightforward to miss. Fraudulent automatic payments often start small — $5 or $10 per month — to avoid triggering fraud alerts.

You might also notice that bills you normally pay are being paid twice, or that a payment went to an unfamiliar company. Some people discover fraud when they try to make a purchase and their debit card is declined because the account is overdrawn from unauthorized charges.

If your bank sends you a notice about a new account opened in your name, or if you receive bills for accounts you did not create, your account number may have been part of a larger identity theft.

What to do if you think your account number has been compromised

Contact your bank when ready. Tell them you believe your account number has been used fraudulently. Ask them to:

  • Review your recent transactions for anything you did not authorize.
  • Cancel any automatic payments or recurring charges you do not recognize.
  • Flag your account for fraud monitoring.
  • Issue you a new debit card if one is linked to the account.

Your bank can reverse unauthorized charges, but you need to report them quickly — most banks have a window of 30 to 60 days to dispute a transaction. Do not wait.

Consider whether you want to close the compromised account and open a new one with a different account number. This is not always necessary, but it eliminates the risk that the old number will be used again. If you do close the account, make sure to update any automatic payments (paychecks, bill payments, subscriptions) to the new account number.

How your account number gets exposed

Account numbers are compromised in several ways. A data breach at a company you do business with might expose it. If you write checks, anyone who handles them can see your account number. Phishing emails or fake websites can trick you into entering it. A dishonest employee at a business where you provided payment information might steal it.

Some of these exposures are beyond your control. Others you can prevent by being cautious about where you share your account number and by checking your statements regularly.

Protecting your account number going forward

Do not share your full account number over email, text, or phone unless you initiated the contact and you are certain you are talking to your bank. Your bank will never ask you for your account number via email.

When you write checks, store them securely and do not leave them in an unsecured mailbox. If you receive a check from someone else, handle the account number on it as sensitive information.

Use your bank's online portal or app to pay bills instead of mailing checks when possible. This keeps your account number out of the mail system. If you must provide your account number to a business, ask how they store it and whether they use encryption.

Frequently Asked Questions

Can someone open a bank account using just my account number?

Not with your account number alone. They would need your name, address, date of birth, and Social Security number to open an account in your name. However, if they have your account number along with these other details, it makes the fraud more convincing to the bank.

If someone has my account number and routing number, can they take all my money?

They can set up unauthorized automatic payments or ACH transfers, but they cannot straightforward withdraw all your money at once without additional access. However, repeated unauthorized charges can drain your account over time, which is why monitoring your statements is critical.

Do I need to close my account if my account number was exposed in a data breach?

Not necessarily. Monitor your account closely for unauthorized activity, and ask your bank to flag it for fraud. If you see fraudulent charges, report them when ready. You can close the account if you prefer extra peace of mind, but many people keep the account open and straightforward watch it carefully.

What is the difference between my account number and my routing number?

Your routing number identifies your bank and branch — it is the same for all customers at that location. Your account number identifies your specific account at that bank. Both are printed on your checks, and together they allow someone to set up payments from your account.

How long does it take the bank to reverse a fraudulent charge?

Most banks can reverse an unauthorized charge within a few business days once you report it. However, you must report it within 30 to 60 days of the transaction appearing on your statement, depending on your bank's policy. After that window closes, reversing the charge becomes much harder.