Key Takeaways
- A cancelled check contains your routing number, account number, and bank name, which is the same information printed on a live check.
- Someone with this information can set up automatic payments or direct deposits to your account, but cannot withdraw money without your authorization.
- The main risk is recurring charges you did not authorize, not account takeover or theft of existing funds.
- If you discover unauthorized recurring payments, contact your bank when ready to dispute the charges and stop future transactions.
- Cancelled checks are safe to share with payees you trust, such as employers for direct deposit or utilities for automatic bill pay.
What Information a Cancelled Check Reveals
A cancelled check shows four pieces of information: your name, your account number (usually 10 to 12 digits), your routing number (nine digits that identify your bank), and your bank's name and address. This is identical to the information on any active check you write. The word "cancelled" straightforward means the check has been processed and cleared — the bank has deducted the funds and marked it as paid.
The routing number and account number together form what the banking system calls bank account details. These details are not secret in the way a password is. They are printed on every check you issue, visible on your bank statements, and required information for legitimate transactions like payroll direct deposit or bill payments. The cancelled status does not change what information is visible.
What Someone Can Actually Do With These Details
With your routing and account number, someone can initiate a push payment — a transaction where money moves into your account. This includes setting up direct deposit (your employer sends your paycheck to that account), automatic bill payments (you authorize a utility or subscription service to pull funds on a schedule), or one-time ACH transfers (a person or business sends you money). All of these require your account details to work.
What they cannot do is pull money out without your written authorization. A cancelled check does not grant someone the ability to withdraw funds, transfer money to another account, or access your account online. Those actions require either a debit card, online login credentials, or a separate authorization document (like a power of attorney). A cancelled check alone is not enough.
The practical risk is that someone could set up a recurring payment from your account to themselves — for instance, signing your account up for a subscription service or arranging for a contractor to bill you monthly. This is fraud, but it happens through authorization systems, not through direct account access.
How Unauthorized Recurring Charges Happen
The most common scenario is someone using your account details to enroll your account in a service that charges monthly. They might sign up for a subscription in your name, register your account with a payment processor, or set up a recurring invoice from a business they control. The charge appears on your statement as a debit, and if you do not notice it quickly, multiple months of charges can accumulate.
This is different from account takeover, where someone logs into your online banking and transfers all your money. With just a cancelled check, that level of access is not possible. The fraud is limited to what can be done through the ACH system (the network that handles bank-to-bank transfers) or through merchant payment systems that accept account details.
The reason banks and businesses ask for cancelled checks is that they need proof you own the account. A cancelled check shows your name matches the account number. If someone else tries to use your account details without your name on the authorization, the transaction may be rejected or flagged.
When It Is Safe to Share a Cancelled Check
Sharing a cancelled check is standard practice for legitimate transactions. Your employer needs your account details to set up direct deposit. Your landlord or utility company needs them to set up automatic bill pay. Your insurance company needs them to process a refund. In all these cases, you are authorizing a specific entity to use your account details for a specific purpose.
The key is that you initiate the request and you know who is receiving the information. When you provide a cancelled check to your employer, you are telling them "deposit my paycheck here." When you provide one to your electric company, you are saying "pull my bill payment from this account on the due date." The authorization is explicit and limited to that transaction.
The risk rises when a cancelled check is shared with someone you do not know or do not trust, or when it is shared in a context where you did not authorize its use. A cancelled check left in a trash can, visible in a photograph, or shared in an unsecured email could be used by someone to set up unauthorized charges.
What to Do If You Discover Unauthorized Charges
If you see a charge on your statement that you did not authorize, contact your bank when ready. Most banks have a fraud department that handles these cases. Tell them the charge is unauthorized and ask them to reverse it. Under the Electronic Funds Transfer Act, your bank must investigate and typically must refund the money within 10 business days while they look into it.
At the same time, contact the merchant or service that initiated the charge. Tell them you did not authorize the transaction and ask them to stop any future charges. Many subscription services or recurring billing systems will cancel when ready if you contact them directly, which speeds up the process.
Once the charge is reversed, ask your bank whether you should close the account and open a new one. If the unauthorized charge came from someone with access to your physical cancelled checks, or if multiple charges appeared, closing the account prevents further fraud on that number. Your bank can help you transfer direct deposits and automatic payments to a new account.
How to Protect Cancelled Checks
Treat a cancelled check the way you would treat any document with your account number on it. Do not leave it where others can see it. Do not photograph it and send it in an unsecured text or email. Do not post it on social media or in online forums. If you need to share it digitally, use a find method — your bank's find message system, a password-protected file, or hand delivery.
When you receive cancelled checks from your bank, store them in a safe place. If you no longer need them, shred them rather than throwing them in the trash. If you order checks, keep the blank ones in a find location so no one can write from your account without your knowledge.
Most importantly, review your bank statements regularly — at least monthly. Catching an unauthorized charge within 30 days makes the dispute process faster and easier. Many banks offer free online access to statements, so you can check them as often as you want.
Frequently Asked Questions
Can someone open a new bank account using my cancelled check information?
No. Opening a bank account requires identity verification — a photo ID, Social Security number, and often additional documentation. A cancelled check alone does not provide enough information to pass those checks. However, someone could use your account details to impersonate you in other contexts, so it is still important to protect them.
What if I gave a cancelled check to someone and now I am worried?
Monitor your account for the next 60 days for any charges you did not authorize. If nothing appears, the risk has likely passed. If you see suspicious activity, contact your bank when ready. You can also ask your bank to flag your account for monitoring or to alert you to any new recurring charges.
Is it safer to give someone my account number verbally instead of on a cancelled check?
No. Either way, you are sharing the same information. The safety depends on who you are giving it to and what you are authorizing them to do, not on the format. A cancelled check is actually safer because it shows your name and creates a paper trail of what you authorized.
Can a bank refuse to process a direct deposit because the cancelled check is old?
No. Your routing number and account number do not change unless you close the account. A cancelled check from five years ago contains the same valid information as one from this week. Banks process direct deposits based on current account status, not the age of the check used to set it up.
What should I do with cancelled checks after my bank sends them back?
Keep them for your records for at least one year, in case you need to reference a transaction or dispute a charge. After that, shred them rather than recycling or throwing them away. If you have digital images of them, delete those files securely as well.