Your account number alone is not enough to drain your bank account
A person who has only your account number cannot log into your account, transfer money out, or make purchases in your name. Banks use multiple layers of verification before they move money — they need your password, they may ask security questions, and they watch for unusual activity. Your account number is one piece of information, but it is not the key to your account.
That said, your account number is not completely harmless. Someone with your account number and routing number can set up automatic payments from your account, and in some cases they can attempt ACH transfers (electronic transfers between bank accounts). This is why you should not share these numbers with people you do not trust, and why you should monitor your account regularly.
Key Takeaways
- Your account number alone cannot be used to log in or access your account online.
- Someone with your account number and routing number can attempt to set up automatic payments or ACH transfers from your account without your permission.
- Banks are required to investigate unauthorized transfers and often reverse them, but the process takes time and you must report the fraud quickly.
- The real risk is not your account number being public — it is your account number combined with your name, address, or other personal details that make fraud easier.
- Monitoring your account weekly and setting up account alerts are the most effective ways to catch unauthorized activity early.
What someone can do with your account and routing numbers
If someone has both your account number and your routing number, they can attempt to initiate an ACH transfer — an electronic transfer between bank accounts. This is how payroll deposits and bill payments work. A person with these two pieces of information can try to pull money from your account without your permission, though most banks now require additional verification before processing transfers from new payees.
Someone can also set up automatic bill payments or recurring charges using your account number. If you have given your account number to a utility company, subscription service, or online retailer, that company has it on file. If someone gains access to that company's records or impersonates you to that company, they could attempt to change where payments go or set up new charges.
The key word is "attempt." Banks have fraud detection systems that flag unusual activity. A transfer that does not match your normal patterns, or a transfer to an account that was just added, may be held for review. This is why the fraud does not always succeed — but it can still happen, and you need to know how to respond.
Why your account number is safer than your debit card number
Your debit card number is actually riskier than your account number. Someone with your debit card number, expiration date, and CVV can make purchases online or over the phone without needing anything else. Your account number does not work that way — it is designed for bank-to-bank transfers and bill payments, not for retail transactions.
This is why debit card fraud is more common than ACH fraud. Debit card numbers are easier to use and harder for merchants to verify. Your account number requires more steps and more verification, which makes it less attractive to someone trying to commit quick fraud.
What happens if someone uses your account number without permission
If you notice an unauthorized transfer or charge, contact your bank when ready. Under federal law, your bank must investigate unauthorized ACH transfers and electronic transfers. If the bank confirms the transfer was not authorized by you, they must reverse it and return your money — though this process can take 10 business days or longer.
The speed of the reversal depends on how quickly you report it. If you report the fraud within two business days, your liability is limited to $50. If you wait longer, your liability can be up to $500. If you wait more than 60 days, you may not be protected at all. This is why checking your account weekly matters.
When you report fraud, your bank will ask you to sign an affidavit stating that you did not authorize the transfer. They will also ask for details about when you first noticed it and whether you recognize the receiving account. Keep records of all your communications with the bank — emails, call dates, and the names of the people you spoke with.
How to reduce the risk of ACH fraud
Do not share your account number and routing number with people you do not know or trust. These numbers are safe to give to your employer (for direct deposit), your bank, and established companies you do business with. They are not safe to give to someone who calls you claiming to be from your bank, or to a stranger online.
Set up account alerts through your bank's website or app. Most banks let you set alerts for transfers over a certain amount, transfers to new payees, or any transfer at all. These alerts arrive by text or email within minutes of the transaction, which gives you time to contact your bank before the transfer clears.
Check your account at least once a week. Look for transfers you do not recognize, recurring charges that should have stopped, or changes to your account settings. Many people check their account only when they receive a statement, which means they do not notice fraud for 30 days or more. Weekly checks catch problems much faster.
If you are concerned about a specific transaction, contact your bank directly using the phone number on the back of your debit card or on your bank statement. Do not use a phone number from an email or text message, because that could be a scam.
The difference between account number fraud and identity theft
Account number fraud is when someone uses your account number to move money out of your account. Identity theft is when someone uses your personal information — your name, Social Security number, address, or date of birth — to open new accounts in your name or explore for credit.
Identity theft is more serious and harder to fix. Account number fraud is limited to the money in your account and is usually reversible. If someone steals your identity, they can open credit cards, take out loans, or explore for government benefits in your name. This can damage your credit score and take months or years to resolve.
Your account number alone does not give someone enough information to commit identity theft. They would need your name, address, and Social Security number as well. This is why you should be cautious about sharing multiple pieces of personal information, even if each piece seems harmless on its own.
What to do if your account number has been compromised
If you believe your account number has been stolen or shared with someone you do not trust, contact your bank and ask whether you should close the account. Some banks will close the account and open a new one for you at no charge. This is the safest option if you are worried about ongoing fraud.
If you decide to keep the account open, increase your monitoring. Check your account more frequently, set up alerts for all transfers, and consider temporarily lowering your daily transfer limit if your bank offers that option. Some banks let you restrict who can initiate transfers from your account or require you to approve new payees before they can withdraw money.
If your account number was compromised because a company you do business with was hacked, that company should notify you. Read the notification carefully — it will tell you what information was exposed and what steps the company is taking to find your information. You may also be offered free credit monitoring for a period of time.
Frequently Asked Questions
Can someone open a new bank account using just my account number?
No. Opening a new account requires a government-issued ID, proof of address, and your Social Security number. Your account number alone is not enough. However, if someone has your name, address, and Social Security number along with your account number, they could potentially open accounts in your name.
Is it safe to write my account number on a check?
Yes. Your account number appears on every check you write, and it is meant to be shared with people who receive your checks. The risk is not the account number itself — it is if someone uses that check to set up unauthorized automatic payments from your account. Monitor your account for unexpected charges.
What if I gave my account number to a scammer?
Contact your bank when ready and tell them you may have shared your account number with someone unauthorized. Ask them to watch your account for suspicious activity and consider whether you should close the account and open a new one. Do not panic — your bank can help you protect your account.
Can someone use my account number to get a loan in my name?
No. A lender needs your Social Security number, proof of income, and a credit check to approve a loan. Your account number alone is not enough. However, if someone has your full personal information, they could attempt to open accounts or take out loans in your name, which is identity theft.
How do I know if my account number has been stolen?
You will usually find out when you see an unauthorized transfer or charge on your account. This is why checking your account weekly is important — you catch the fraud quickly and can report it before more money is taken. If a company you do business with is hacked, they will notify you by mail or email.