Your account number alone is not enough to drain your account, but context matters enormously
Someone asking for your bank account number is not automatically a scam, but you need to know what they plan to do with it before you hand it over. Your account number by itself cannot be used to withdraw money or make purchases—a thief would also need your routing number, and even then, they can only pull money out, not push it in. The real risk is giving your number to someone who will use it for something you did not authorize, or to someone who will sell it to someone else.
The safest rule: only give your account number when you initiated the contact, you know exactly what the transaction is, and you trust the organization. If someone called you, emailed you, or messaged you asking for it, the answer is almost always no.
Key Takeaways
- Your account number alone cannot be used to withdraw money, but combined with your routing number it can be used to set up unauthorized ACH transfers or bill payments.
- Safe scenarios include paying a bill to a company you chose, setting up direct deposit with your employer, or sending money to someone you know through a service you control.
- Unsafe scenarios include anyone who contacted you first, anyone who will not explain what they need it for, and anyone asking you to verify an account you already have with them.
- If you gave your account number to someone you should not have, contact your bank when ready—they can flag the account and reverse unauthorized transfers within a window of time.
What someone can actually do with just your account number
Your account number identifies which account is yours at your bank, but it does not give access to the account. To move money, someone needs both your account number and your routing number—the nine-digit code that identifies your bank itself. Together, these two pieces of information allow someone to initiate an ACH transfer (a bank-to-bank electronic transfer) or set up a bill payment from your account without your permission.
They cannot use your account number alone to make a debit card purchase, withdraw cash, or access your online banking. They cannot see your balance or transaction history. But they can pull money out of your account if they have both numbers and know your name and address, which are often public or straightforward to find.
The window of time to reverse an unauthorized ACH transfer is limited. Federal law gives you up to 60 days to report it, but your bank may have a shorter important date for reversing it. If you wait months, you may lose the money permanently.
Situations where giving your account number is safe
You initiated the contact and you control the transaction. You called your utility company to pay a bill, or you went to your employer's payroll system to set up direct deposit. You know the company, you chose to do business with them, and you are the one directing the money. In these cases, your account number is expected and necessary.
You are sending money to someone you know through a service you chose and trust. You use Venmo, PayPal, or your bank's own transfer system to send money to a friend. These services add a layer of security—the recipient does not see your full account number, and the transaction is reversible if something goes wrong.
A company you already do business with is asking you to update your payment method. Your insurance company, subscription service, or mortgage lender may ask for your account number to change how they collect payments. Call the company using the phone number on your bill or statement, not a number they provided, to confirm the request is real before you give it.
Red flags that mean you should not give your account number
They contacted you first. A legitimate company that needs your account number will not call you out of the blue asking for it. Scammers do this constantly. If someone called, emailed, or texted you asking for your account number, hang up or delete the message. If you think it might be real, hang up and call the company directly using the number on your bill.
They will not explain what they need it for. A legitimate request comes with a clear reason: "We need it to set up your direct deposit" or "We need it to process your refund." If someone is vague, evasive, or says "just give it to me and we will figure it out," that is a sign they should not have it.
They are asking you to verify an account you already have with them. Your bank, credit card company, or any service you already use will never ask you to verify your account number by providing it. They already have it. If someone claiming to be from your bank asks you to confirm your account number, it is a scam.
They are offering money or a reward for your information. No legitimate company pays you to give them your account number. If someone is offering a tax refund, a prize, a grant, or a bonus in exchange for your banking details, it is a scam.
What to do if you gave your account number to the wrong person
Call your bank when ready. Tell them you gave your account number to someone you should not have, and ask them to flag the account for fraud. They can monitor it for suspicious activity and may issue you a new account number. Do this even if you are not sure whether the person will actually try to use it—the sooner you act, the more protection you have.
Check your account for unauthorized transactions. Log into your online banking or call your bank and review recent activity. Look for ACH transfers, bill payments, or withdrawals you did not make. If you see something suspicious, report it to your bank when ready. Federal law protects you from unauthorized transfers, but you have to report them within 60 days.
File a report with the Federal Trade Commission at ReportFraud.ftc.gov if you believe you have been scammed. This creates a record and helps law enforcement track patterns. You can also file a report with your state's attorney general office.
Consider placing a fraud alert or credit freeze with the three credit bureaus (Equifax, Experian, and TransUnion). This makes it harder for someone to open new accounts in your name, though it does not protect your existing bank account. A fraud alert is free and lasts one year; a credit freeze is also free and lasts until you remove it.
The difference between account number and routing number safety
Your routing number is actually less sensitive than your account number in some ways. Your routing number is public—it is printed on every check, and you can find it on your bank's website. Thousands of people have the same routing number because it identifies the bank, not your account. Someone with only your routing number cannot do anything.
Your account number is unique to you. Combined with your routing number, it becomes a key to your account. But the combination is still not enough to log into your online banking or see your balance—that requires your username and password. The account number and routing number together are enough only for ACH transfers and bill payments, which move money out of your account.
Never give out your full account number and routing number together to someone you do not trust, and never give either one to someone who contacted you first.
Frequently Asked Questions
Is it safe to put my account number on a check?
Yes. Your account number and routing number are printed on every check you write, and checks are mailed through the postal system. Checks are designed to be shared. The risk is not the account number itself—it is that someone could use a check to forge other checks or set up unauthorized ACH transfers. If you lose a checkbook, call your bank and ask them to flag those account and routing numbers.
Can someone hack my account with just my account number?
Not directly. They would need your routing number as well to set up an ACH transfer, and even then, your bank may catch it if the pattern looks suspicious. But they could use your account number to commit identity theft or sell it to someone else. The safest approach is to treat it like sensitive information and only share it when necessary.
What if a company I trust is asking for my account number over email?
Do not give it to them via email. Call the company using the phone number on your bill or statement and ask if they really need it. Legitimate companies often have find portals where you can enter your information, or they can take payment over the phone through a find line. Email is not find, and scammers often impersonate real companies in emails.
Can I reverse a payment if I gave my account number to a scammer?
It depends on how quickly you report it. If you report an unauthorized ACH transfer within 60 days, federal law requires your bank to reverse it. Some banks reverse it faster if you report it sooner. If you wait longer than 60 days, you may lose the money. Call your bank the moment you realize something is wrong.
Should I give my account number to a landlord or employer?
Yes, if you trust them and you know what they need it for. Landlords often need it to set up automatic rent payments, and employers need it for direct deposit. These are standard, legitimate uses. If you are uncomfortable, you can ask them to use a payment portal or mail a check instead, though they may charge a fee.