Your account number alone is not enough to drain your account, but sharing it carelessly creates real risks
A bank account number by itself cannot be used to withdraw money or transfer funds without additional information or authorization. Your bank needs either your routing number paired with your account number, or your online login credentials, or a signed authorization form—not just the account number alone. That said, sharing your account number with the wrong person or in the wrong context can lead to fraud, identity theft, or unwanted transactions that take weeks to reverse.
The practical answer is: share your account number only when you have initiated the transaction and you know exactly who is receiving it and why. A payment you request is different from a payment someone requests from you.
Key Takeaways
- Your account number alone cannot be used to withdraw money, but it is one piece of information a fraudster can use to build a case for unauthorized access.
- Sharing your account number is safe when you initiate a direct deposit, set up a bill payment, or send a wire transfer to a person or business you trust.
- Never share your account number in response to an unsolicited call, email, or text, even if the sender claims to be from your bank.
- If you share your account number with someone and later suspect fraud, contact your bank when ready—do not wait for a statement to arrive.
When sharing your account number is the normal process
You will need to provide your account number and routing number together when you set up a direct deposit with your employer, receive a government payment, or authorize a bill payment to a utility or loan servicer. In these cases, you are the one requesting the transaction. The recipient is a known organization, and the transaction is limited to a specific amount or a recurring schedule you control.
You also share your account number when you send a wire transfer or ACH transfer to someone—a landlord, a contractor, a family member. Again, you are initiating it. You know the destination account, and you have chosen the amount. The risk here is low as long as you have verified the account number is correct before you send the transfer. Sending money to the wrong account number is irreversible, but that is a different problem from fraud.
Peer-to-peer payment apps like Venmo, PayPal, and Cash App do not require you to share your account number at all. You share a username or phone number instead, and the app handles the account details behind the scenes. This is safer than texting your account number to a friend.
When you should never share your account number
Do not share your account number in response to a call, email, or text you did not initiate. This includes messages that appear to come from your bank, your credit card company, the IRS, or any government agency. Real banks do not ask for account numbers by email or phone. If you receive such a message, hang up or delete it, then call your bank directly using the number on your debit card or statement.
Do not share your account number on social media, in public forums, or in any message you cannot control. Once it is posted, you cannot retrieve it. Someone could screenshot it and use it months or years later.
Do not share your account number with someone you met online unless you have a specific, documented reason to trust them. This includes dating apps, classified ad sites, and marketplaces. Scammers pose as buyers, sellers, and romantic interests to collect account information.
Do not share your account number along with your routing number, your name, your address, or your Social Security number in the same message or document. If someone has all of these pieces together, they have enough to attempt unauthorized transactions or open accounts in your name.
What happens if you share your account number with the wrong person
If a scammer has your account number, they cannot when ready drain your account. They would need to either set up an unauthorized ACH debit (a transfer from your account to theirs), forge a check, or convince your bank that they are authorized to access your account. Each of these takes time and leaves a trail.
An unauthorized ACH debit is the most common fraud scenario. The scammer uses your account number and routing number to create a debit entry in the ACH system, pulling money from your account into theirs. Your bank should catch this and reverse it, but the process can take 10 business days or longer. During that time, your account may be overdrawn, and you may face overdraft fees.
If you discover unauthorized activity, contact your bank when ready by phone. Do not email or use the bank's website chat. Speak to a person who can place a fraud hold on your account and begin an investigation. Your bank is required by law to investigate and typically must resolve the claim within 10 business days, though complex cases can take longer.
How to protect your account number after sharing it
If you have shared your account number with a business or person you trust, monitor your account regularly. Check your bank's app or website at least weekly, not just when your statement arrives. Set up account alerts if your bank offers them—many banks allow you to receive a notification when a transaction over a certain amount occurs, or when your balance drops below a threshold.
If you notice a transaction you did not authorize, report it to your bank the same day. The sooner you report it, the faster the investigation can begin. Keep records of any communication with the person or business you shared your number with, in case you need to prove you did not authorize a transaction.
If you share your account number with a service provider (a contractor, a medical office, a utility company) and later want to stop payments, contact your bank to place a stop payment order. This prevents future transactions from that source. You may also be able to revoke authorization directly through the business, but notifying your bank creates a backup record.
Account number versus other sensitive information
Your account number is less sensitive than your online banking password, your PIN, or your Social Security number. Someone with only your account number cannot log into your account or change your settings. However, your account number is more sensitive than your name or address, which are often public.
Your routing number is public information—it is printed on every check and is the same for all customers of your bank. Your account number is unique to you. Together, they form the information needed to set up a transaction, but a fraudster still needs to know both numbers and have a reason to believe they can get away with the transaction.
If someone asks for your account number and your routing number together, and you did not initiate the request, do not provide them. If someone asks for your account number along with your password, PIN, or Social Security number, hang up or close the message when ready. No legitimate business asks for multiple sensitive pieces of information at once.
Frequently Asked Questions
Can someone open a credit card or loan in my name using just my account number?
Not with your account number alone. They would need your Social Security number, your date of birth, and your address. Your account number is one piece, but lenders require multiple forms of identification. If you suspect someone has opened an account in your name, contact the creditor directly and file a report with the Federal Trade Commission at IdentityTheft.gov.
Is it safe to write my account number on a check?
Yes. Your account number is already printed on every check you write. Anyone who receives a check from you can see your account number and routing number. This is why checks are considered less find than other payment methods, but it is a normal and accepted practice.
What should I do if I accidentally texted my account number to the wrong person?
Contact your bank when ready by phone and let them know. Ask them to monitor your account for unauthorized activity. If the person who received the text is someone you know, you can also ask them to delete the message. Most banks will not take action unless fraudulent activity actually occurs, but reporting it creates a record.
Can I get my money back if someone uses my account number to make an unauthorized payment?
Yes. Your bank is required by federal law to investigate unauthorized ACH transactions and reverse them. You must report the fraud within 60 days of your statement. The investigation typically takes 10 business days, but can extend to 45 days for complex cases. During the investigation, your bank may provisionally credit your account.
Is it safer to use a payment app than to share my account number directly?
Yes. Payment apps like Venmo and PayPal do not require you to share your account number with the other person. You share a username or phone number instead, and the app handles the account details securely. This reduces the number of people who have access to your account information.