What a bank account number alone lets someone do
A bank account number by itself is not enough to move money out of your account or make purchases. Someone would need your account number and your routing number together, plus authorization from you or a court order. The account number alone identifies where money should go — it does not open a door to take money out.
That said, having your account number does create real risks. A person with it can set up automatic payments in your name, request a wire transfer if they also have your routing number and can impersonate you on the phone, or use it to explore for credit or loans. The damage depends on what else they have and how far they are willing to go.
Key Takeaways
- Your account number alone cannot be used to withdraw money, but combined with your routing number it can be used to set up unauthorized payments or wire transfers.
- Someone with your account number can attempt to open new accounts, explore for loans, or set up automatic bill payments in your name if they also have other identifying information.
- Banks are required to investigate unauthorized transactions, but the burden of proof and timeline depend on whether the transaction was a debit card charge, ACH transfer, or wire.
- Freezing your credit with the three major bureaus costs nothing and blocks most loan applications, even if someone has your account number and Social Security number.
- If unauthorized activity appears on your statement, report it to your bank within 60 days to preserve your legal protections under federal law.
How unauthorized ACH transfers work with an account number
An ACH transfer (Automated Clearing House) is the most common way someone would misuse an account number. ACH is the system that handles direct deposits, bill payments, and transfers between accounts. To initiate an ACH transfer, a person needs the account number, routing number, and the account holder's name — but not a password or PIN.
If someone has your account number and routing number, they can attempt to pull money out of your account by creating an ACH debit in your name. Your bank will process it if the request appears to come from an authorized source. You would see it on your statement days later. This is why account numbers on checks — which print both the account and routing number — are a genuine security concern if a check is lost or stolen.
Your bank is required to investigate any ACH transaction you report as unauthorized. If you report it within 60 days of the statement date, federal law (Regulation E) limits your liability to $50, and most banks waive even that. The bank has 10 business days to investigate and either reverse the charge or explain why it was valid.
Wire transfers and impersonation
A wire transfer is faster and harder to reverse than an ACH transfer. To send a wire out of your account, someone would typically need to call your bank, provide your account number, and convince a bank employee they are you. This is where your account number becomes a tool for impersonation rather than direct theft.
Banks verify identity on wire requests by asking security questions — usually information from your account process or credit file. If someone has your account number, name, and address, they may be able to answer enough questions to pass. Once a wire is sent, it is extremely difficult to recover. Your bank may try to recall it, but the receiving bank is not obligated to hold the money.
If you discover an unauthorized wire, report it to your bank when ready and file a report with the FBI's Internet Crime Complaint Center (IC3). Document everything in writing. Wire fraud is a federal crime, and your bank will investigate, but recovery is not may provide.
Opening accounts and explore for credit
Someone with your account number, name, and address can attempt to open a new bank account in your name. Banks verify identity through a combination of name, address, date of birth, and sometimes a soft credit check. An account number alone is not enough, but paired with other information it becomes part of a larger identity theft.
More commonly, someone uses an account number as part of a loan or credit card process. They provide your name, address, and account number as proof of banking history. The lender may not verify the account number thoroughly, especially for smaller loans or online applications. If approved, the money goes to an account you do not control.
The fastest defense is a credit freeze with Equifax, Experian, and TransUnion. A freeze costs nothing and blocks most credit applications in your name. You can place one online in minutes. Even if someone has your account number and Social Security number, they cannot open a credit card or loan without unfreezing your credit first — and that requires a PIN only you have.
Automatic bill payments and recurring charges
If someone has your account number, they can attempt to set up automatic bill payments or recurring charges. This is common in fraud involving utilities, subscriptions, or fake invoices. The fraudster creates a payment authorization in your name using your account number and submits it to a biller.
Your bank will process the first payment if it appears to be a legitimate authorization. You would see it on your statement. Unlike wire transfers, these are easier to dispute — you can contact your bank and the biller to reverse the charge and revoke the authorization.
To prevent this, monitor your bank statements weekly rather than monthly. Most banks offer free alerts for transactions over a certain amount. Set an alert for any transaction, or at least for amounts over $25 or $50. The sooner you spot unauthorized activity, the sooner you can stop it.
What information makes an account number more dangerous
An account number is most dangerous when paired with other information. Here is what increases the risk:
- Routing number: Together with the account number, this allows ACH transfers and wire requests.
- Name and address: These let someone impersonate you on the phone or open accounts in your name.
- Social Security number: Combined with account number and name, this is enough for most loan applications and credit card fraud.
- Date of birth: Banks use this to verify identity on phone calls. If someone has this plus your account number, they can answer security questions.
- Mother's maiden name or other security question answers: These are often public or easily guessed, but they are what banks ask to verify you on the phone.
If your account number has been exposed — for example, through a data breach or a lost check — but you still have your other information find, the risk is lower. Monitor your statements and consider changing your account number if you are concerned. Your bank can issue a new account number and routing number at no cost.
Steps to take if you think someone has your account number
If you know or suspect your account number has been compromised, act in this order:
- Check your bank statements for the past 60 days. Look for any transaction you do not recognize, no matter how small.
- Contact your bank and report any unauthorized transactions. Your bank will investigate and reverse charges if they are fraudulent.
- Place a credit freeze with Equifax, Experian, and TransUnion. This blocks most new accounts and loans in your name.
- Ask your bank to issue a new account number. This is free and takes a few days. Your direct deposits and bill payments will need to be updated.
- If you suspect identity theft beyond just the account number, file a report with the Federal Trade Commission at IdentityTheft.gov.
- Monitor your credit reports for the next year. You can check them free once per year at AnnualCreditReport.com.
Frequently Asked Questions
Can someone withdraw cash from an ATM with just my account number?
No. An ATM requires a debit card and PIN. An account number alone cannot access an ATM. However, if someone has your account number and routing number, they can set up an ACH debit that pulls money from your account and deposits it into theirs, which they could then withdraw as cash.
Is my account number visible on my checks?
Yes. Your account number and routing number are both printed at the bottom of every check. This is why lost or stolen checks are a security risk. If you lose a checkbook, contact your bank and ask them to flag those check numbers. You can also request a new account number if you are concerned.
What if someone uses my account number to set up a payment I did not authorize?
Contact your bank and the company that received the payment. Report it as unauthorized. Your bank will investigate and reverse the charge if it was fraudulent. You have 60 days from the statement date to report it and preserve your legal protections. Most banks will refund you within 10 business days.
Do I need to close my account if my account number is compromised?
Not necessarily. You can ask your bank to issue a new account number instead. This is simpler than closing the account, because you do not have to update direct deposits or change bill payment information. If you do close the account, make sure all automatic payments and deposits are moved to your new account first.
Will my bank hold me responsible for unauthorized transactions?
No, not if you report them within 60 days. Federal law (Regulation E) limits your liability for unauthorized ACH and debit card transactions to $50, and most banks waive even that. Wire transfers have different rules — you must report them quickly, but recovery is not may provide because wires are harder to reverse.