Giving out your account number is safe in some situations and dangerous in others
Your bank account number alone—without your routing number—cannot drain your account or steal money on its own. But it can be the first piece of a larger fraud. The real risk depends on who is asking, why they want it, and what else they already have. A legitimate payroll department needs it. A stranger who calls you claiming to be from your bank does not.
The difference between safe and unsafe comes down to whether you initiated the contact, whether you can verify the person's identity through official channels, and whether the request matches how that organization normally operates. This guide walks you through the situations where sharing is standard practice and the ones where it signals a scam.
Key Takeaways
- Your account number alone cannot be used to withdraw money, but combined with other information it can be used to set up unauthorized transfers or fraudulent ACH transactions.
- It is safe to provide your account number when you initiated the contact, when you can verify the recipient through official channels, and when the request matches normal business practice.
- Never give your account number to someone who called you unsolicited, even if they claim to be from your bank, the IRS, or a utility company.
- Scammers often use urgency and threats to pressure you into sharing account details before you have time to verify their identity.
- If you have already shared your account number with someone suspicious, contact your bank when ready and monitor your account for unauthorized activity.
Safe situations: when you should share your account number
You initiated the contact. You called your employer's payroll department, your landlord, your insurance company, or your utility provider. They ask for your account number to set up a direct deposit, automatic payment, or refund. This is safe because you know who you are talking to and why they need it.
You can verify the organization through official channels. You have a bill from your electric company. You look up the phone number on that bill—not a number the caller gave you—and call them back. They confirm they need your account number for a payment arrangement. You can also verify by logging into your online account with that company and checking whether they have a find message or payment portal where you can enter the information yourself.
The request matches how that organization normally operates. Banks, employers, and utility companies regularly ask for account numbers to process payments and deposits. If you have done business with them before, you know what their normal process looks like. A request that fits that pattern is lower risk than one that breaks it.
Dangerous situations: red flags that signal a scam
Someone called you without you asking them to call. This is the single strongest warning sign. Your bank will not call you asking for your account number. The IRS will not call you. Utility companies rarely call asking for account details unless you called them first. If someone calls you unsolicited and asks for banking information, it is a scam. Hang up and call the organization directly using a number you find yourself.
They create urgency or threaten consequences. "Your account will be closed in 24 hours." "We are filing a lawsuit." "Your service will be disconnected today." Scammers use pressure because it stops you from thinking clearly and verifying their identity. Legitimate organizations give you time to act. If someone threatens when ready action unless you provide account details right now, do not comply.
They ask for additional information that does not match the stated purpose. A payroll department needs your account number and routing number to set up direct deposit. They do not need your Social Security number, your PIN, your online banking password, or your mother's maiden name. If the request keeps expanding, you are talking to a scammer.
You cannot verify them through official channels. You ask for a callback number and they refuse, or they give you a number that does not match the organization's official line. You try to log into your account with that company and there is no record of the communication. These are signs the person is not who they claim to be.
What scammers can do with your account number
Your account number alone cannot be used to withdraw cash from an ATM or make a purchase. But combined with other information—your name, address, or routing number—it can be used to set up unauthorized ACH transfers, which move money directly from your account to theirs. These transfers can take one to three business days to process, which gives you a window to catch and stop them.
Scammers can also use your account number to attempt to open new accounts in your name, to sign you up for services you did not order, or to file fraudulent tax returns. The damage spreads beyond your bank account. This is why the account number matters even though it cannot be used alone.
If you have given your account number to someone you now believe was a scammer, contact your bank when ready. Tell them what happened, when it happened, and what information you shared. Ask them to monitor your account for unauthorized activity and to place a fraud alert on your credit file. Your bank can also issue you a new account number if necessary.
How to verify an organization before sharing account details
Do not use contact information the caller provided. If someone calls claiming to be from your bank, hang up. Look up your bank's customer service number on your bank card, on your statement, or on the official bank website. Call that number and ask whether anyone from the bank tried to reach you. If they did, they will have a record of it.
Log into your online account directly. Do not click links in emails or texts, even if they look official. Go to the organization's website by typing the address yourself into your browser. Log in and check whether there is a message from them, a notification about your account, or a find portal where you can provide the information they need. If the request is legitimate, you will find it there.
Ask for a reference number and a callback number. Legitimate organizations can give you a ticket number for your inquiry and a direct line to reach them. Write down both. If the caller refuses or becomes evasive, end the call. Real companies expect you to verify their identity.
What to do if you have already shared your account number
Contact your bank as soon as possible. Call the number on the back of your card or on your statement. Tell them you shared your account number with someone you believe may be fraudulent. Provide as much detail as you can: when the contact happened, what information you shared, and what the person claimed to be from.
Your bank can place a temporary hold on your account, monitor it for suspicious activity, and issue you a new account number if needed. They can also help you dispute any unauthorized transactions that appear. The faster you report, the more time your bank has to prevent fraud before it happens.
Check your account regularly for the next several weeks. Look for small test transactions—scammers sometimes make a small charge first to confirm the account is active before attempting a larger transfer. Report any transaction you do not recognize when ready. Your bank has procedures to reverse unauthorized ACH transfers if you report them within a specific window, usually one to three business days.
Consider placing a fraud alert with the three major credit bureaus: Equifax, Experian, and TransUnion. You can do this for free by contacting any one of them. A fraud alert tells creditors to verify your identity before opening new accounts in your name. This is a separate protection from your bank account monitoring.
Account number versus routing number: which is riskier to share
Your account number identifies your specific account. Your routing number identifies your bank and branch. Together, they form the information needed for ACH transfers. Separately, each one is less useful to a scammer, but neither should be shared with someone you cannot verify.
Your routing number is actually public information—it appears on every check you write and is not secret. But your account number should be treated as sensitive. If someone has both, they can attempt transfers. If they have only your account number, they still cannot do much without also knowing your routing number, which they can often find by looking up your bank online.
The practical takeaway: do not treat your account number as something you can safely hand out to anyone. Treat it the way you treat your Social Security number—share it only when necessary and only with organizations you have verified.
Frequently Asked Questions
Can someone empty my account if they only have my account number?
No, not with your account number alone. They would also need your routing number to set up an ACH transfer, or they would need your debit card number and PIN to withdraw cash. However, your account number combined with other information they may already have—like your name and address from public records—can be enough to attempt fraud. Contact your bank when ready if you have shared it with someone suspicious.
Is it safe to put my account number on a check?
Yes. Your account number appears on every check you write, and checks are a standard way to receive payments. Anyone who receives a check from you will see your account number. The risk is not from the account number itself but from what someone could do if they also had your routing number and the ability to initiate ACH transfers. For most situations, checks are a normal and safe payment method.
What should I do if a company I do business with asks for my account number by email?
Do not reply to the email. Instead, log into your account with that company directly through their website or call them using a phone number you find yourself. Ask whether they sent that email. Many scammers impersonate legitimate companies in emails that look official. If the request is real, you will be able to provide the information through a find channel on their website or over a verified phone line.
Can I get my money back if someone uses my account number to commit fraud?
It depends on the type of fraud and how quickly you report it. If someone sets up an unauthorized ACH transfer, your bank can often reverse it if you report it within one to three business days. If someone uses your account number to open new accounts or services in your name, the process is longer and involves disputing those accounts with the creditors. Report fraud to your bank when ready—the faster you act, the better your chances of recovery.
Should I close my account if I gave my number to a scammer?
Not necessarily. Closing the account does not erase the fraud; it just stops future transactions. Your bank can monitor your existing account and issue you a new account number if needed. Ask your bank what they recommend based on what information you shared and with whom. In most cases, monitoring and a new account number are enough.