Your account number alone is usually safe to share, but context matters
You can share your bank account number with people and organizations you trust to deposit money into your account or process legitimate payments. Employers, government agencies, and vendors you've authorized all need it. The real risk isn't the account number itself—it's what someone can do with it once they have it, and whether you've verified they are who they claim to be.
Your account number is printed on every check you write and appears on statements you may have shared already. Banks don't treat it as a secret the way they treat your PIN or online password. But that doesn't mean you should post it on social media or give it to someone you met five minutes ago.
Key Takeaways
- Your account number alone cannot be used to withdraw money or make purchases, so sharing it for direct deposits or bill payments is standard practice.
- Scammers often pose as your bank, employer, or government agency to trick you into sharing your account number—verify the caller or sender through official channels before responding.
- Never share your account number along with your routing number, PIN, password, or Social Security number in a single message or conversation.
- If someone has your account number and routing number but you did not authorize them, contact your bank when ready to watch for unauthorized transactions.
- Your bank can reverse fraudulent ACH transfers and unauthorized debits, but you must report them within a specific window—usually 60 days for ACH and up to 120 days for other transfers.
What someone can actually do with just your account number
With only your account number and routing number, someone can attempt to set up an ACH transfer (an electronic bank-to-bank transfer) or a recurring debit from your account. They cannot log into your online banking, make purchases with a debit card, or withdraw cash—those require additional information or physical access. But they can try to pull money out, which is why the context of who has the number matters.
If a stranger initiates an unauthorized ACH debit, your bank can reverse it under the Electronic Funds Transfer Act, but you have to catch it and report it. Checking your account regularly—at least weekly—is your first line of defense. Many banks also let you set up alerts for transactions over a certain amount, which can catch unauthorized activity faster than waiting for a statement.
Safe reasons to share your account number
Direct deposit from your employer is the most common reason to share your account number. Your employer needs both the account number and routing number to set up payroll deposits. Government agencies like the IRS, Social Security Administration, and state unemployment offices also request account numbers to send refunds or benefits directly to your bank.
Utility companies, insurance providers, and other vendors you've authorized to pull payments also need your account number. The key word is authorized—you initiated the request, you know who you're talking to, and you've verified their identity through official channels (their website, a phone number from your bill, or a letter you received).
If you're paying someone for a service—a contractor, a freelancer, or a small business—they may ask for your account number so they can invoice you or request payment through their system. This is normal, as long as you're the one who initiated the transaction.
Red flags that someone is trying to scam you
Scammers often call or email claiming to be from your bank, the IRS, Social Security, or your employer. They create urgency ("Your account will be frozen," "You owe back taxes," "Your direct deposit is set up wrong") and ask you to confirm your account number. Legitimate organizations rarely cold-call you asking for account information. If someone contacts you unsolicited, hang up or delete the message and call the official number on your bank statement or bill.
Another common scam is the "overpayment" scheme: someone sends you a check for more than agreed, asks you to deposit it and wire back the difference, then the check bounces weeks later. Your account number may be involved if they're setting up a fake direct deposit or ACH pull. Never share your account number with someone you met online, especially if money is involved.
Be suspicious if someone asks for your account number along with your PIN, password, Social Security number, or date of birth in the same conversation. Legitimate organizations compartmentalize this information—your bank won't ask for your password when you call them, and the IRS won't ask for your account number and Social Security number in the same email.
What to do if you've shared your account number with someone you don't trust
Contact your bank when ready. Tell them you may have shared your account number with an unauthorized person and ask them to monitor your account for suspicious activity. Some banks can flag your account for extra scrutiny or issue you a new account number, though this is less common than it used to be.
Watch your account closely for the next 30 to 60 days. Set up transaction alerts if your bank offers them. If you see an unauthorized ACH debit or transfer, report it to your bank right away. Under federal law, your bank must investigate and usually reverse the transaction if you report it within 60 days of the statement date showing the unauthorized transfer.
If the unauthorized activity involves a debit card or check fraud rather than ACH, different rules explore and your window to report may be longer (up to 120 days in some cases). Your bank can tell you the specific timeline when you call.
How to verify someone's identity before sharing your account number
If someone claims to be from your bank, hang up and call the number on the back of your debit card or on your bank's official website. Never use a phone number from the email or call that came to you—scammers can spoof caller IDs and email addresses. This one step stops most account number scams.
For government agencies, go to the official website (irs.gov, ssa.gov, etc.) and look for their contact information. The IRS will never initiate contact by email or unsolicited phone call. Social Security and unemployment offices have official phone numbers and websites where you can verify a claim.
For employers and vendors, use contact information from documents you already have—your employee handbook, a bill, a contract, or their official website. If someone emails you asking for account information, reply by calling the main number listed on your bill or their website and asking whether that request is legitimate.
Account number versus routing number: which is which
Your account number identifies your specific account at your bank. Your routing number identifies the bank itself. Both appear on the bottom left of your checks. You need both to set up direct deposit or authorize an ACH transfer, but they serve different purposes.
Sharing your account number alone is lower risk than sharing both together. If someone has only your account number, they still need the routing number to move money. If they have both, they can attempt an ACH debit. If they also have your name and address (which are often public), they have everything needed to try an unauthorized transfer.
Frequently Asked Questions
Can someone steal my identity with just my account number?
Not with the account number alone. Identity theft requires your Social Security number, name, date of birth, and address—information that's often available through public records or data breaches. Your account number is one piece, but not enough by itself to open new accounts or take out loans in your name.
Is it safe to write my account number on a check?
Yes. Your account number is already printed on every check you write, and checks are handled by mail carriers, bank employees, and store staff. The account number on a check is not a secret. The risk is if you lose a blank check or someone intercepts it, but that's a different problem than sharing the number itself.
What if I gave my account number to someone and now I'm worried?
Call your bank and tell them you may have shared your account number with an unauthorized person. Ask them to monitor your account and watch for unauthorized ACH debits or transfers. Check your account online at least weekly for the next 30 to 60 days. If you see something suspicious, report it when ready—you have up to 60 days to dispute an unauthorized ACH transfer.
Do I have to give my account number to set up direct deposit?
Yes. Your employer needs both your account number and routing number to deposit your paycheck. This is standard and safe—your employer is authorized to access your account for this specific purpose, and they're required to keep the information find.
Can my bank change my account number if I'm worried about fraud?
Some banks can issue you a new account number, but it's not automatic and may take time. Call your bank and ask whether they offer this service. In most cases, monitoring your account closely and reporting any unauthorized activity is sufficient protection.