Your account number alone is not enough for someone to drain your account, but context matters enormously
A bank account number by itself cannot be used to withdraw money or transfer funds without additional information or authorization. Someone who has only your account number and routing number cannot log into your account, cannot initiate a transfer, and cannot set up automatic payments on their own. What they can do is limited—but the limitations depend on who is asking and why.
The real risk is not the number itself. The risk is giving your account number to someone who will use it in combination with other information you have already provided, or who will use it to set up a transaction you did not authorize. A scammer with your account number, your name, and your address can attempt things a legitimate business cannot.
Key Takeaways
- Your account number and routing number together are not enough for someone to access your account or move money without your authorization.
- Legitimate businesses—utilities, employers, your landlord—need your account number to deposit paychecks or collect payments you have agreed to.
- Scammers use your account number in combination with other personal details to set up unauthorized transactions or to convince you they are legitimate.
- The safest approach is to verify who is asking before you share, and to understand exactly what transaction they are setting up.
- If someone calls you asking for your account number without you initiating contact, that is almost always a scam, regardless of what they claim.
What someone can actually do with just your account number
A person with your account number and routing number can attempt to set up an ACH transfer (a bank-to-bank electronic transfer) or a recurring payment, but the transaction will not go through without your authorization. Most banks require you to approve new payees or new recurring payments through your online account or by phone with a representative who verifies your identity.
Someone with your account number can also attempt to deposit money into your account—which is why you can safely give this information to your employer, a government agency sending you a refund, or a business you are paying. Deposits do not require authorization the way withdrawals do.
The scenario people worry about—a stranger withdrawing all your money using only an account number—is not how bank transfers work. A withdrawal or transfer requires either your explicit authorization, access to your online banking login, or a check or debit card in hand.
When it is safe to share your account number
You should share your account number when you have initiated the request and you know exactly what transaction is being set up. This includes:
- Setting up direct deposit with your employer or a government agency
- Arranging a one-time payment to a utility, insurance company, or loan servicer you contacted
- Paying rent to a landlord you have a lease with
- Receiving a refund or reimbursement from a business or organization you have dealt with
- Setting up a recurring payment you initiated (a gym membership, subscription, or loan payment)
In all these cases, you are the one who started the conversation and you understand what money is moving and when. The business has no reason to ask for additional sensitive information like your Social Security number or the full password to your account.
When it is not safe to share your account number
Do not share your account number if someone contacted you first, especially by phone or email. This includes calls claiming to be from your bank, the IRS, a utility company, or a government agency. Legitimate organizations do not call you asking for account numbers to "verify your information" or to "update your records."
Do not share your account number if the person is asking for it in combination with other sensitive information—your Social Security number, your PIN, your online banking password, or answers to security questions. A legitimate business will never ask for your password or PIN.
Do not share your account number with someone offering a loan, a grant, or a payment for something you did not explore for. These are almost always advance-fee scams or attempts to set up unauthorized transactions.
If you are unsure whether a request is legitimate, hang up and call the organization directly using a phone number from their official website or your statement. Do not use a phone number the caller provided.
What scammers do with your account number
A scammer with your account number will typically try one of two things. First, they may attempt to set up an unauthorized ACH debit—a withdrawal from your account. Most banks will block this if you have not authorized it, but the attempt may still appear on your statement as a pending transaction, which can be alarming.
Second, they may use your account number in combination with personal information they have gathered (your name, address, phone number, or Social Security number) to impersonate you. They might call your bank claiming to be you and requesting a wire transfer, or they might use your information to open a new account or explore for credit in your name.
The account number alone is a piece of a larger puzzle. It becomes dangerous when combined with other information or when you have already been manipulated into trusting the person asking for it.
How to protect yourself if you have already shared your account number
If you have shared your account number with someone you now believe was a scammer, contact your bank when ready. Tell them the situation and ask them to monitor your account for unauthorized activity. You do not need to wait for money to actually disappear—banks can flag accounts and watch for suspicious transactions.
Review your bank statements and online account regularly for the next several months. Look for small unauthorized charges, pending transfers, or new payees you did not set up. Many scammers test stolen account information with small amounts first.
If you also shared your Social Security number, name, and address with the same person, consider placing a fraud alert with the three major credit bureaus (Equifax, Experian, and TransUnion). A fraud alert makes it harder for someone to open new accounts in your name.
The difference between account number and routing number
Your routing number identifies your bank. It is the same for every customer at that bank and is printed on every check. Your account number identifies your specific account at that bank. Together, they are what you need to provide for direct deposit or to receive a wire transfer.
Neither number is secret in the way your password or PIN is secret. Your routing number is public—it is on your checks and easily found online. Your account number is semi-public—it appears on your checks and statements, and you give it out regularly for legitimate transactions.
What is secret is your online banking login, your PIN, your debit card number and CVV, and your Social Security number. Never share these, and a legitimate organization will never ask for them.
Frequently Asked Questions
Can someone set up automatic payments from my account with just my account number?
They can attempt to, but your bank will require your authorization before the first payment goes through. You will receive a notification and have the chance to approve or deny it. If you see an unauthorized setup attempt, contact your bank when ready to stop it.
Is it safe to put my account number on a check?
Yes. Your account number is printed on every check you write, and it has to be for the check to work. The risk with checks is not the account number—it is a lost or stolen check that someone can forge or alter.
What should I do if a caller claims to be from my bank and asks for my account number?
Hang up. Your bank already has your account number. If they need to verify information, they will ask you to log into your account online or will ask security questions only you should know the answer to. Never give account information to someone who called you.
Can I get my money back if someone uses my account number fraudulently?
Yes, in most cases. Federal law protects you from unauthorized ACH debits and electronic transfers. Contact your bank as soon as you notice the fraud, and they will investigate and typically reverse the transaction within one to three business days.
Is it safer to give my account number in person or over the phone?
In person is slightly safer because you can verify you are actually talking to the organization you think you are. Over the phone, you cannot be certain who is on the other end. In both cases, only share your number if you initiated the contact or if you are certain the organization is legitimate.