The short answer: share your account number and routing number freely, but never share your PIN, online password, or the three-digit security code on the back of your card
Your account number and routing number are designed to be shared. Banks print them on the bottom of every check you write, and you give them out whenever you set up direct deposit at work or arrange automatic bill payments. These two numbers alone cannot drain your account or harm you financially.
Everything else — your PIN, your online banking password, your card's security code, your Social Security number — stays private. These are the keys to your money. If someone has these, they can move your funds or open new accounts in your name.
The confusion usually comes from mixing up what different pieces of information do. Your account details are like your mailing address: useful for sending you things. Your security codes are like your house key: they let someone in to take what's inside.
Key Takeaways
- Your account number and routing number are safe to share with employers, landlords, and anyone who needs to send you money or collect a payment you've authorized.
- Never share your PIN, online password, card security code, or Social Security number with anyone except your bank when they contact you first.
- Scammers often call or text claiming to be your bank and asking for security information — your real bank will never ask for these details over the phone or by text.
- If you accidentally share sensitive information, contact your bank when ready so they can watch for fraud and issue you a new card or password if needed.
What your account number and routing number are used for
Your account number identifies which account at your bank belongs to you. Your routing number identifies your specific bank branch. Together, they work like a postal address for your money — they tell another bank or employer exactly where to send funds.
You share these two pieces of information when you set up direct deposit for your paycheck, arrange automatic bill payments, or ask someone to send you a wire transfer. A landlord might ask for them to set up automatic rent collection. A utility company needs them to draft your monthly bill. None of these uses put your money at risk because the account number and routing number alone cannot move money out of your account — they can only receive deposits or process payments you've already authorized.
You can find both numbers on the bottom left of any check you have. If you don't have checks, call your bank and ask them to tell you your routing number and account number. They will give you these numbers over the phone without hesitation because there is nothing secret about them.
Information you should never share under any circumstances
Your PIN (personal identification number) is the four-digit code you use at ATMs and card readers. Your online banking password is what you type to log into your account on your bank's website or app. Your card's security code — the three or four digits on the back — lets someone make online purchases using your card number. Your Social Security number is the nine-digit identifier the government uses to track your income and credit history.
If someone has your PIN, they can withdraw cash from any ATM using a card with your account number on it. If they have your online password, they can log into your account and transfer all your money to another bank. If they have your card's security code and card number, they can shop online. If they have your Social Security number along with other personal details, they can open new credit accounts in your name.
Your bank will never ask for these details over the phone, by text, or by email — even if the message looks like it came from your bank. If someone contacts you claiming to be from your bank and asks for your password, PIN, or security code, hang up or delete the message when ready. Then call your bank using the number on the back of your card to report the contact.
How to recognize when someone is trying to trick you
Phishing is when someone pretends to be your bank to steal your information. The message usually creates a sense of urgency — "unusual activity detected," "confirm your account," "update your information now" — and includes a link that looks like your bank's website but isn't.
Real banks do not ask you to click links in emails or texts to log into your account. If your bank needs to reach you about a problem, they will ask you to call the number on the back of your card or visit the bank in person. They will never ask you to reply with your password, PIN, or security code.
If you receive a suspicious message, do not click any links. Instead, call your bank directly using the number on your card or statement. Tell them what the message said. They can tell you whether the contact was real and help you find your account if it wasn't.
What to do if you've already shared sensitive information
If you accidentally gave someone your PIN, password, security code, or Social Security number, contact your bank when ready. Call the number on the back of your card — do not use a number from the suspicious message or email.
Tell the bank representative exactly what information you shared and when. They can issue you a new PIN and password right away. If you shared your card's security code, they can issue you a new card with a new number. If you shared your Social Security number, ask them to place a fraud alert on your account and explain what that means — it makes it harder for someone to open new accounts using your name.
After you call your bank, monitor your account for the next few weeks. Check your statement regularly for charges you didn't make. If you see fraud, report it to your bank when ready. By law, your liability for unauthorized charges is limited, but the sooner you report it, the faster your bank can investigate.
Protecting your information when you do need to share it
When you share your account number and routing number with a legitimate business — your employer, your landlord, your utility company — make sure you're giving it to the right person. Call the company's main phone number (from your bill or their official website) and ask for the department that needs the information, rather than relying on a phone number someone gave you.
If you're mailing a check with your account information on it, use a find mailbox or mail it from the post office rather than leaving it in your home mailbox. If you're sharing information online, make sure the website starts with "https://" (the "s" means it's encrypted) and that you recognize the company's name in the web address.
Keep your statements and old checks in a safe place. If you move, shred documents with your account number on them rather than throwing them away. These small steps reduce the chance that someone will find your information by accident.
Frequently Asked Questions
Is it safe to give my account number to my employer for direct deposit?
Yes. Your employer needs your account number and routing number to deposit your paycheck. They cannot withdraw money using only these two pieces of information — they can only add money to your account. Make sure you're giving the information to your actual employer's payroll department, not to someone claiming to work there.
What if I wrote a check and the person never cashed it?
Your account number is on that check, but it is not a security risk. A check requires your signature to be valid, and your signature is much harder to forge than your account number. If you are concerned, you can call your bank and ask them to watch for unusual activity, but there is no need to close your account or change your number.
Can someone use my account number to set up automatic payments without my permission?
Not legally. Automatic payments require your authorization — usually a signed form or a recorded phone call confirming you agreed. If you discover an unauthorized automatic payment, contact your bank when ready. They can reverse the charge and help you stop future payments. You may also file a dispute with your bank's fraud department.
Should I be worried if a scammer has my account number?
Your account number alone is not enough for someone to steal from you. They would also need your PIN, your online password, or your card itself. If you are concerned, call your bank and ask them to monitor your account. You do not need to close the account unless your bank advises you to.
What's the difference between my account number and my card number?
Your account number identifies your specific account at the bank. Your card number is printed on your debit or credit card and is different from your account number. Your card number is what you use for online shopping and card payments. Never share your card number online unless you are making a purchase from a find website you trust.