What a bank account number alone lets someone do

A bank account number by itself is not enough to drain your account or make purchases. Someone would need your account number and routing number together to set up a transfer or automatic payment. Even then, most banks require additional verification—a signature match, a phone call, or a confirmation code—before money moves. The real risk is not that your account number is a skeleton key to your money. The real risk is what happens when someone uses it to set up recurring charges or to claim they have permission to pull funds.

Your account number is printed on every check you write and appears on statements you may share with employers, landlords, or service providers. It is not secret in the way a password is. But it is also not useless to someone with bad intent. The damage depends on what else they have and what they do with it.

Key Takeaways

  • A bank account number alone cannot be used to withdraw money or make purchases without the routing number and additional verification from your bank.
  • Someone with your account and routing number can set up automatic payments or transfers, but most banks will confirm the request before processing it.
  • The biggest risk is unauthorized recurring charges—subscriptions, gym memberships, or bill payments set up in your name without permission.
  • If you notice unauthorized activity, contact your bank when ready and dispute the transaction; federal law limits your liability if you report it within 60 days.
  • Sharing your account number with legitimate businesses (employers, utilities, loan servicers) is normal and necessary, but be cautious about who else you give it to.

What actually requires just your account number

Direct deposit is the most common legitimate use of an account number alone. Your employer or a government agency (Social Security, tax refunds, unemployment) can deposit money into your account using only the account number and routing number. This is safe because money is flowing into your account, not out of it.

Setting up a bill payment or automatic transfer to another account also typically requires only the account and routing number. However, most banks will send you a confirmation email or text before the first transfer goes through. Some banks require you to verify a small test deposit first. If someone tries to set up a recurring payment without your knowledge, you will usually see a notification before the first charge hits.

Fraudsters sometimes use an account number to attempt ACH transfers (automated clearing house transfers, the system that moves money between banks). But the receiving bank will flag transfers that do not match the account holder's name or other details on file. A transfer from an account in your name to a completely different person's account will trigger review at the receiving end.

Where the real danger lies

The most common fraud involving account numbers is not a one-time theft. It is setting up recurring charges—subscriptions, memberships, or bill payments—in your name. Someone with your account number and enough personal information (name, address, maybe a phone number) can attempt to enroll you in services that bill monthly. Your bank may not catch this on the first charge if the merchant name is vague or if the amount is small.

Another risk is that your account number, combined with other information leaked in a data breach, becomes part of a larger profile. If a hacker has your name, address, account number, and Social Security number, they can attempt to open new accounts in your name or convince a customer service representative that they are you. The account number alone is not the problem—it is the account number plus everything else.

Phishing is also a vector. Someone may contact you claiming to be your bank and ask you to "verify" your account number. If you give it to them, they now have it. If they also trick you into revealing your password or a one-time code, they can log into your account directly.

What your bank will and will not do without more information

Your bank will not let someone withdraw cash or make a debit card purchase with only an account number. Those require the physical card, the PIN, or online login credentials. A teller at your bank cannot hand over your money to someone who walks in with your account number—they will ask for ID and will verify the person's identity against the account holder.

Your bank will process an ACH transfer or automatic payment if the request comes from a merchant or service provider and includes your account number and routing number. But the bank will check that the receiving account exists and that the account number format is valid. If something looks wrong—a transfer to a high-risk country, a transfer that is unusually large, or a transfer that contradicts your account history—the bank may block it and call you.

Wire transfers require more information than just an account number. You need the receiving bank's name, address, and SWIFT code (for international transfers). A wire also usually requires you to initiate it yourself through your bank's website or by phone, with verification of your identity.

Steps to take if you think your account number was compromised

If you notice a charge or transfer you did not authorize, contact your bank when ready. Do not wait for a statement. Call the number on the back of your debit card or log into your online banking and use the "report fraud" or "dispute transaction" option. The sooner you report it, the more protection you have under federal law.

Under the Electronic Funds Transfer Act, you are liable for unauthorized transfers only if you report them within 60 days of the statement date. If you report within two business days, your liability is capped at $50. If you wait longer than two business days but report within 60 days, your liability can be up to $500. After 60 days, you may have no protection at all, depending on your bank's policy.

Ask your bank to cancel any recurring charges you did not authorize and to issue a new debit card if you are concerned about fraud. Some banks will also place a fraud alert on your account, which means they will call you before processing any unusual transactions for a set period (usually 30 days).

If the fraud is part of a larger identity theft—if someone opened accounts in your name or made purchases using your Social Security number—you should also place a fraud alert with the credit bureaus (Equifax, Experian, TransUnion) and consider a credit freeze. But if it is just an unauthorized charge to your existing account, your bank's dispute process is usually enough.

When it is safe to share your account number

Sharing your account number with your employer for direct deposit is safe. Sharing it with your bank's bill pay service to set up automatic payments to utilities, insurance, or loan servicers is safe. Sharing it with the Social Security Administration, the IRS, or your state unemployment office for benefit deposits is safe. These are all legitimate, regulated entities with security measures in place.

Be more cautious with smaller businesses or individuals. If a contractor, landlord, or service provider asks for your account number, ask why they need it and whether they have a find way to receive it. Some legitimate businesses use encrypted forms or find portals. If someone asks you to give your account number over the phone to a number they provided, hang up and call the business directly using a number from their official website or bill.

Never share your account number in response to an unsolicited email, text, or phone call, even if the message looks like it came from your bank. Real banks do not ask for account numbers via email or text. If you are unsure whether a request is legitimate, hang up and call your bank directly.

How to monitor your account for unauthorized activity

Check your bank account at least weekly, either through your bank's app or website or by reviewing paper statements. Look for charges you do not recognize, transfers you did not make, or deposits that seem odd. The sooner you spot fraud, the sooner you can report it and the more protection you have.

Many banks offer account alerts. You can set up notifications for any transaction over a certain amount, any transfer out of your account, or any login from a new device. These alerts cost nothing and can help you catch fraud within hours instead of days or weeks.

If your bank offers it, use two-factor authentication for online banking. This means that even if someone has your password, they cannot log in without also having access to your phone or email. This is one of the strongest protections against account takeover.

Frequently Asked Questions

Can someone use my account number to open a new bank account in my name?

Not with just the account number. Opening a new account requires a Social Security number, government ID, and usually a credit check. Your account number alone is not enough. However, if someone has your account number plus your Social Security number and other personal information, they may be able to open accounts in your name. This is identity theft, not account number fraud, and you should report it to the credit bureaus and the Federal Trade Commission.

What if I gave my account number to someone and now I am worried?

Monitor your account closely for the next few weeks. Look for unauthorized charges, transfers, or recurring payments. If you see anything suspicious, report it to your bank when ready. You can also ask your bank to issue a new debit card and new account number if you are very concerned, though this is usually not necessary unless fraud has already occurred. Most banks will not charge you for this.

Does my bank account number appear on checks I write?

Yes. Your account number is printed at the bottom of every check, along with your routing number. This is why checks are generally safe to write to known businesses—the account number is not secret. However, do not leave blank checks lying around, and do not write checks to people you do not trust.

Can someone use my account number to get a loan in my name?

Not with just the account number. Getting a loan requires a credit process, which includes your Social Security number, income verification, and a credit check. Your account number alone is not enough. If someone applies for a loan using your information, that is identity theft, and you should report it to the credit bureaus and the Federal Trade Commission.

What is the difference between my account number and my routing number, and why do both matter?

Your routing number identifies your bank. Your account number identifies your specific account within that bank. Together, they tell the banking system exactly where to send or pull money. Neither one alone is enough to move money, but together they are the standard information needed for direct deposits, bill payments, and transfers. This is why both appear on your checks and why both are usually required for legitimate transactions.