A stolen or shared check gives someone limited access to your account, but not the kind of access a debit card or online login would

A check is a written instruction to your bank to move money from your account to whoever you name on it. If someone has a check with your account number and routing number on it, they cannot log into your account, transfer money without your signature, or drain your balance remotely. What they can do is write checks in your name, deposit checks into their own account using your routing and account numbers, or use the numbers for fraudulent ACH transfers — all of which pull money out without your permission.

The risk depends on whether the check is blank (signed by you but payee left empty), partially filled out (signed but amount missing), or just the physical check itself with your information printed on it. A blank signed check is the highest risk. A check with just your printed account information is lower risk but still exploitable.

Key Takeaways

  • Someone with a blank signed check can write it to themselves for any amount and cash it at their bank or yours.
  • Your account number and routing number printed on a check can be used to set up unauthorized ACH transfers or fraudulent deposits, but not to log into online banking.
  • If you discover a forged check or unauthorized transfer, report it to your bank when ready and file a dispute within 60 days to protect yourself under federal law.
  • Stopping payment on a check costs money (usually $25 to $35 per check) and only works if the check has not already cleared.
  • Freezing your account or closing it entirely stops further fraud but does not recover money already taken.

What a blank signed check makes possible

A blank check with your signature is the most dangerous form. Someone holding it can fill in their own name as the payee, write any amount, and deposit or cash it. Your bank will process it because your signature is genuine. Once the check clears, the money is gone from your account and in theirs.

The person does not need your PIN, password, or permission. They do not need to forge your signature — it is already there. They straightforward complete the blanks and present it to a bank teller or deposit it through an ATM or mobile app.

If you gave someone a blank signed check and now suspect they misused it, contact your bank when ready. Ask them to flag your account and watch for checks clearing in unusual amounts or to unfamiliar payees. If a check has already cleared, you can dispute it as unauthorized, though your bank may ask why you signed a blank check in the first place.

How account numbers on checks enable fraud

Every check printed with your name has your account number and your bank's routing number printed at the bottom. These numbers alone cannot get someone into your online account — that requires a username and password. But they are enough to set up an ACH (Automated Clearing House) transfer, which moves money electronically from one account to another.

With your account number and routing number, someone can pose as you and request that their bank pull money directly from your account. They do not need your signature or your permission. The transfer may take one to three business days to process, which gives you a window to catch and stop it, but if you do not notice until after it clears, recovering the money is harder.

ACH fraud is common because the barrier to entry is low — a scammer needs only the numbers from a check, not the check itself. If you have given your account number to someone you no longer trust, or if a check has been lost or stolen, contact your bank and ask them to watch for unauthorized ACH activity. Some banks will flag your account for manual review of ACH requests for a period of time.

Forged checks and what your bank owes you

If someone forges your signature on a check or writes a check in your name without permission, your bank is responsible for the loss under the Uniform Commercial Code, which all states follow. When you report a forged check, your bank must reverse the transaction and credit your account.

The catch is timing and proof. You must report the forgery within 30 days of receiving your bank statement that shows the forged check. If you wait longer, your bank may deny the claim, though they can still choose to help you. If you report it within 30 days, your bank has up to 10 business days to investigate and refund you.

When you report a forged check, your bank will ask for details: the check number, the amount, the date it cleared, and the name of the payee. They may also ask whether you recognize the handwriting or know who might have done it. Provide everything you can. If the check was deposited into another bank, your bank will contact that bank to retrieve the cancelled check image and trace where the money went.

Stopping payment and closing your account

If you issued a check to someone and now want to prevent them from cashing it, you can place a stop payment order with your bank. This tells your bank to refuse the check if it is presented. Stop payment costs money — typically $25 to $35 per check — and only works if the check has not already cleared. Once a check clears, it is too late; the money has moved and a stop payment order cannot reverse it.

Stop payment is useful if you gave someone a check and then realized you should not have, or if a check was lost in the mail. It is not useful for fraud that has already happened.

If you are concerned about ongoing fraud or if multiple unauthorized checks or transfers have occurred, you can close your account entirely. Your bank will freeze it when ready, preventing further transactions. Any checks still outstanding will bounce. You will need to open a new account and update your direct deposit, automatic payments, and any other services tied to the old account. Closing an account stops future fraud but does not recover money already taken.

Protecting yourself if a check is lost or stolen

If a blank check or a signed check goes missing, contact your bank as soon as you realize it. Provide the check number and the date you last saw it. Ask your bank to flag your account and watch for that specific check number clearing. Ask them to also monitor for unusual ACH activity, since someone with your account number can initiate transfers.

If the check was stolen from the mail, file a report with the U.S. Postal Inspection Service at postalinspectors.uspis.gov. Mail theft is a federal crime, and the Postal Inspection Service tracks patterns that may help catch the thief.

Going forward, consider having checks mailed to your bank branch instead of your home, or order checks in smaller quantities so fewer are in circulation at once. Some people switch to digital payments (ACH transfers, bill pay through their bank, or apps like Venmo) to reduce reliance on physical checks altogether.

What happens when you dispute an unauthorized check or transfer

If money has left your account without your permission, you have the right to dispute it. For forged checks, your bank handles the reversal. For ACH transfers, federal law (Regulation E) gives you 60 days from the date your statement shows the transfer to report it and request a refund.

When you dispute a transaction, your bank will provisionally credit your account while they investigate. The investigation typically takes 10 business days, though it can extend to 45 days if the other bank needs time to respond. During the investigation, the money is back in your account, but it is not final until the bank confirms the transaction was unauthorized.

If your bank determines the transaction was unauthorized, the credit becomes permanent and the money stays with you. If they determine you authorized it (for example, if you gave someone permission to write checks on your account), they may reverse the credit and you lose the money again. This is why documentation matters: keep records of any conversations, texts, or emails showing you did not authorize the transaction.

Frequently Asked Questions

Can someone use just my account number and routing number to access my online banking?

No. Your account number and routing number are printed on every check and are not secret — they are meant to be shared. Online banking requires a username and password, which are separate. However, someone with your account number and routing number can initiate ACH transfers from your account without your permission.

What should I do if I gave someone a blank signed check and now I am worried?

Contact your bank when ready and explain the situation. Ask them to watch for checks clearing in unusual amounts or to unfamiliar payees. If a check has already cleared, you can dispute it as unauthorized. Your bank may ask why you signed a blank check, but they are still obligated to investigate if you report it within 30 days of your statement.

How long does it take to get my money back after I report a forged check?

Your bank must credit your account within 10 business days of your report if you reported it within 30 days of your statement. If the investigation extends beyond 10 days, your bank must still credit you provisionally while they finish. The full investigation can take up to 45 days.

If someone deposits a check in my name into their account, can the bank trace it?

Yes. When you report a forged or unauthorized check, your bank will request the cancelled check image from the bank where it was deposited. That image shows the endorsement (signature on the back) and any account information written on it. Your bank can then contact the other bank to freeze the account and potentially recover the funds.

Is it safer to stop payment on a check or close my account?

Stop payment is cheaper and faster if you only need to prevent one specific check from clearing. Closing your account is necessary if you are concerned about ongoing fraud or if multiple unauthorized transactions have occurred. Closing stops future fraud but does not recover money already taken.