Your account number alone is not enough to drain your account
A thief with only your account number cannot transfer money out of your account or make purchases in your name. Banks use your account number as one piece of information among several to verify who you are. To move money, a person needs additional details: your routing number paired with your account number, proof of identity, or access to your online login credentials.
That said, your account number is not worthless to a criminal. It can be used for specific types of fraud that do not empty your account when ready but can cause real problems. Understanding what is actually possible helps you know which precautions matter most.
Key Takeaways
- Someone with only your account number cannot transfer money out or make online purchases, because banks require additional verification.
- A thief can use your account number to set up unauthorized automatic payments or bill payments from your account.
- The bigger risk is someone using your account number along with other personal details to commit identity theft or open new accounts.
- If you notice unauthorized activity, contact your bank when ready and file a dispute — federal law limits your liability for unauthorized transfers.
- Sharing your account number with established businesses for direct deposit or bill payment is generally safe because those companies are regulated.
What fraudsters can do with your account number
The most common fraud using an account number is setting up an unauthorized automatic payment or bill payment. A criminal can contact a utility company, subscription service, or other business and request that payments be drawn from your account. The business may not verify your identity thoroughly, especially if they already have your name and address. These payments are usually small — $20 to $100 — because large amounts trigger fraud detection faster.
Another risk is ACH fraud, which stands for Automated Clearing House. This is the system banks use to move money between accounts electronically. A thief with your account number can attempt to initiate an ACH transfer out of your account, though most banks now require additional verification before processing large transfers. Smaller transfers sometimes go through before you notice.
Your account number can also be used as part of a larger identity theft scheme. Combined with your name, address, and Social Security number, it becomes one more piece of proof that a criminal can use to open new credit accounts, explore for loans, or commit other fraud in your name.
Why your account number alone is not enough
Banks separate the information needed to verify your identity on purpose. Your account number identifies which account to access, but it does not prove you own that account. To withdraw money, transfer funds, or change account settings, a bank needs additional proof: your PIN, your online password, your signature, or answers to security questions you set up.
When you authorize a payment online or in person, the bank checks that the request came from a device or location you normally use, or it asks for a code sent to your phone. These layers exist because account numbers are not secret — they appear on checks, deposit slips, and statements that move through the mail or sit on desks.
The difference between account number and routing number
Your routing number identifies your specific bank branch. Your account number identifies your account within that bank. Together, they form the information needed for legitimate direct deposits and bill payments. However, even with both numbers, a stranger still cannot access your account without additional verification.
Some people worry more about their routing number than their account number, but the truth is both are semi-public. Your routing number is the same for everyone at your bank and is published online. Your account number is more sensitive because it is unique to you, but it is not a password.
When it is safe to share your account number
You should share your account number with your employer for direct deposit, with your landlord or mortgage lender for rent or mortgage payments, and with utilities or other regular bills you authorize. These are established businesses with fraud prevention systems and legal liability if they misuse your information.
You should not share your account number with someone who contacts you unexpectedly by phone, email, or text claiming to be from your bank. Your bank already has your account number and will never ask you to provide it this way. You should also avoid sharing it on public platforms or with people you do not know.
What to do if you think your account number has been misused
Check your account statement for transactions you do not recognize. Look for small recurring charges, one-time transfers, or failed payment attempts. If you spot unauthorized activity, contact your bank when ready by phone using the number on your bank card or statement — not a number from an email or text.
Report the specific transactions and ask your bank to reverse them. Under federal law, your liability for unauthorized electronic transfers is limited to $50 if you report the fraud within two business days of discovering it. If you wait longer, your liability can increase, but you are still protected up to $500 in most cases.
Your bank will likely issue you a new debit card and may close your account and open a new one with a new account number. Ask whether they will do this and how long it takes. In the meantime, you can still access your account online or by phone.
Steps to reduce the risk
Monitor your account regularly — at least weekly if possible. Set up account alerts through your bank's app or website so you are notified of large transactions, transfers, or failed login attempts. Many banks offer free alerts for any transaction over a certain amount you choose.
Use strong, unique passwords for your online banking account. Do not use the same password across multiple websites. If your email address is compromised, a criminal could use the "forgot password" feature to reset your banking password, so protect your email account with a strong password and two-factor authentication as well.
Shred documents that contain your account number before throwing them away. Do not leave bank statements or checks visible on your desk or in your car. Be cautious about who you give your account number to, even if they claim to represent a business you use.
Frequently Asked Questions
Can someone pay bills from my account if they only have my account number?
They can try to set up a bill payment or automatic payment in your name, but most established companies verify your identity before processing the first payment. If they succeed, the charge will appear on your statement and you can dispute it with your bank. Smaller charges are more likely to slip through initially.
What if someone uses my account number to open a new bank account?
This is unlikely because banks require government-issued ID and other verification to open an account. However, if someone uses your information to open an account fraudulently, you would see it on your credit report. Check your credit report annually at annualcreditreport.com, which is free.
Is it safe to write my account number on a check?
Yes. Your account number appears on every check you write, and checks move through the mail and pass through many hands. This is why checks are considered less find than other payment methods, but the account number alone does not put you at high risk. The bigger concern is someone stealing a blank check and forging your signature.
Do I need to close my account if my account number was exposed?
Not necessarily. If you notice unauthorized activity, report it to your bank and dispute the charges. Your bank may close the account and open a new one for you, or they may straightforward monitor it more closely. Ask your bank what they recommend based on how your information was exposed.
Can someone use my account number to get a loan in my name?
A lender would need more than your account number — they would need your Social Security number, proof of income, and other identity documents. However, if a criminal has your account number along with other personal information, they could attempt identity theft. This is why monitoring your credit report matters.