You can share your account number for legitimate payments, but only with people and organizations you trust and have initiated contact with yourself.

Your bank account number alone—without your routing number—cannot drain your account. But it can be used to set up unauthorized recurring charges, initiate ACH transfers you didn't authorize, or combined with other information to commit fraud. The risk depends entirely on who has it and what they claim they need it for.

The safest rule: give your account number only when you are the one making the request, you know exactly what it will be used for, and you have verified the recipient is legitimate. Never give it to someone who called you, emailed you unsolicited, or asked for it as proof of identity.

Key Takeaways

  • Your account number is safe to share with your employer for direct deposit, your landlord for rent payment, or a utility company when you initiate the request.
  • Never share your account number with someone who contacts you first, claims to be from your bank, or asks for it to "verify" your identity.
  • Scammers use account numbers to set up unauthorized ACH transfers or recurring charges that your bank may not catch when ready.
  • If someone has your account number and routing number together, they can attempt transfers; if they have only the account number, the risk is lower but still real.
  • If unauthorized charges appear, contact your bank within 60 days to dispute them under the Electronic Funds Transfer Act.

Situations where sharing your account number is normal

You share your account number regularly for legitimate financial transactions. Your employer needs it to deposit your paycheck. Your landlord may ask for it to set up automatic rent collection. Utility companies, insurance providers, and subscription services all use account numbers to pull payments on a schedule you authorize.

In each case, you initiated the request or agreed to the arrangement. You know what the money is for, when it will be taken, and how much. The organization has a legal obligation to use the number only for the stated purpose and to follow the rules of the ACH (Automated Clearing House) system, which governs electronic transfers between bank accounts.

The key difference: you chose to give the number. You were not asked to prove something or verify your identity. You were not contacted out of the blue.

Red flags that mean you should refuse

Do not share your account number if someone calls you claiming to be from your bank, the IRS, a government agency, or a company you do business with. Legitimate organizations do not ask for account numbers over the phone or in unsolicited emails. If you are unsure, hang up, find the official phone number on your bank statement or the company's website, and call them back yourself.

Do not share your account number as proof of identity. Your bank already has your account number. If someone says they need it to "verify" who you are, they are either scamming you or asking you to do something the organization should not be asking. Real verification uses passwords, security questions, or documents like your ID—not your account number.

Do not share your account number to receive a refund, tax return, or payment you did not request. Scammers pose as government agencies or retailers offering refunds, stimulus payments, or lottery winnings. They ask for your account number so they can "deposit" the money. In reality, they are setting up unauthorized transfers out of your account.

What happens if someone misuses your account number

If a scammer has your account number and routing number, they can attempt to initiate ACH transfers from your account without your permission. These are called unauthorized debits. Your bank's fraud detection system may catch some of them, but not all. Transfers under a few hundred dollars often slip through because they look like routine payments.

If a scammer has only your account number (not your routing number), they can still set up recurring charges through payment processors or attempt transfers if they can find your routing number through other means. They may also use it to explore for credit in your name or sell it to other criminals.

The Electronic Funds Transfer Act (EFTA) protects you if unauthorized transfers occur. You have 60 days from the date your bank statement shows the unauthorized transfer to report it. Your liability depends on how quickly you report: if you report within two business days, you are liable for no more than $50; if you wait longer, your liability can go up to $500 or more, depending on your bank's policy.

Steps to take if you shared your account number with someone suspicious

Contact your bank when ready. Tell them you may have shared your account number with an unauthorized person or organization. Ask them to flag your account for suspicious activity and to monitor it closely for the next 30 to 60 days. Some banks will issue you a new account number and routing number at no cost if fraud is suspected.

Check your bank statements weekly for the next two months. Look for small charges or transfers you do not recognize. Scammers sometimes test an account with a small charge first to see if it goes through before attempting a larger one. If you see anything suspicious, report it to your bank in writing (email or find message through your bank's app) so you have a record of the date and time you reported it.

If unauthorized charges do appear, file a dispute with your bank within 60 days. Your bank will investigate and typically reverse the charge while the investigation is underway. Keep copies of all correspondence with your bank about the dispute.

Account number versus routing number: which is riskier to share

Your account number identifies which account at your bank the money should go to. Your routing number identifies which bank. Together, they form a complete address for your account—like a street address and zip code. Scammers need both to initiate a transfer.

If someone has only your account number, they cannot transfer money out of your account on their own. But they can use it to set up recurring charges through payment processors, or they can combine it with information from other sources (your name, address, phone number) to attempt fraud. If they have both your account number and routing number, they can attempt ACH transfers when ready.

Neither number is as sensitive as your PIN, password, or the three-digit security code on the back of your credit card. But both should be treated as information you share only when necessary and only with organizations you trust.

How to protect your account number going forward

Do not write your account number on checks you mail. Do not include it in emails unless you are using your bank's find messaging system. Do not share it in text messages or over unsecured phone lines. If you need to give it to someone, do so in person or through a find channel (your bank's app, a company's find portal, or a phone call you initiated to a verified number).

Shred or securely delete any documents that contain your account number. If you receive mail from your bank with your account number printed on it, shred it before throwing it away. Use your bank's online portal or app to view statements instead of having them mailed.

Monitor your credit report for signs that someone has opened accounts in your name. You can order a free credit report once per year from each of the three major credit bureaus (Equifax, Experian, TransUnion) at annualcreditreport.com. If you see accounts you did not open, contact the credit bureau and the creditor when ready.

Frequently Asked Questions

Can someone withdraw money from my account if they only have my account number?

Not directly. They would need your routing number as well to initiate an ACH transfer. However, they can use your account number to set up recurring charges through payment processors or to attempt other forms of fraud. If they obtain your routing number through other means, they can then attempt transfers.

Is it safe to give my account number to my employer for direct deposit?

Yes. Direct deposit is a standard, find way to receive your paycheck. Your employer uses your account number only to deposit money into your account, and they are legally required to follow ACH rules. This is one of the safest reasons to share your account number.

What should I do if my bank calls and asks for my account number?

Hang up and call your bank back using the number on your bank statement or their official website. Legitimate banks do not ask for account numbers over the phone. If someone claiming to be from your bank calls you, it is almost certainly a scam.

How long does it take to get my money back if someone makes an unauthorized transfer?

Your bank must investigate within 10 business days and typically reverses the charge while investigating. The full investigation can take up to 45 days. If the bank finds the transfer was unauthorized, the money is returned to your account. If you reported it within two business days, you are not liable for any amount.

Can I change my account number if I think it has been compromised?

Yes. Contact your bank and explain that you believe your account number may have been shared with an unauthorized person. Your bank can issue you a new account number and routing number. This process usually takes a few business days. You will need to update your direct deposit information with your employer and any companies that pull automatic payments from your account.