Yes, a check gives someone access to your account information and money

A check is a written instruction to your bank to move money from your account to someone else's. When you hand a check to another person, you are giving them a direct path to your account number, routing number, and often your name and address. If that person deposits or cashes the check, the money leaves your account. If they have your blank checks or can forge your signature, they can write checks themselves and drain your account without your permission.

The risk is real because check fraud is one of the oldest and still most common ways people lose money from their bank accounts. Your bank will process a check based on the routing and account numbers printed on it—the bank does not verify that you actually wrote it or authorized it. By the time you notice the fraudulent check, the money may already be gone, and recovering it takes weeks or months.

Key Takeaways

  • A check contains your account number and routing number, which is enough for someone to write additional checks or set up unauthorized transfers from your account.
  • Forging your signature on a check is a crime, but it happens regularly and your bank may not catch it before the check clears.
  • If someone steals blank checks from you, they can write checks to themselves or anyone else, and your account will be debited when ready when the check clears.
  • Reporting a fraudulent check to your bank within 30 days gives you the best chance of recovering the money, though some banks extend this window.
  • Protecting your checks means storing them securely, monitoring your account regularly, and ordering checks only when you need them.

What information on a check lets someone access your account

The front of a check displays your routing number (a nine-digit code that identifies your bank) and your account number (usually 10 to 12 digits that identify your specific account). These two pieces of information are all someone needs to write a check against your account, set up an ACH transfer, or authorize a wire. Your name and address are printed there too, which makes it easier for a fraudster to make the check look legitimate.

The back of the check has space for a signature and often a memo line. A forged signature is the only barrier between a criminal and your money, and many bank tellers do not verify signatures on checks under a certain amount—often $5,000 or less. Even when they do check, a signature does not have to match perfectly to be accepted. The bank's primary job is to move money, not to investigate whether a signature is genuine.

How stolen or blank checks are used to drain accounts

If someone steals a blank check from your checkbook, they can fill in their own name as the payee, forge your signature, and deposit or cash it. The check clears against your account just as if you had written it yourself. You may not notice for days or weeks, depending on how often you check your account balance or receive your statement.

A criminal can also use your routing and account numbers to write checks on accounts they do not own—a practice called check washing. They obtain a legitimate check (sometimes from the trash or mail), erase or chemically remove the payee name and amount, then rewrite it to themselves for a larger sum. When the check clears, your account is debited, not theirs. This works because the routing and account numbers remain unchanged and valid.

In some cases, someone with access to your checks may write multiple checks over time, spacing them out to avoid triggering fraud alerts. If you do not reconcile your account regularly, you may not catch the theft until significant money is gone.

Why banks do not always catch forged checks before they clear

Banks process millions of checks daily and rely on automated systems to sort and clear them. A check is typically cleared within one to three business days based on the routing and account numbers, not on signature verification. The bank assumes the account holder authorized the transaction. Signature verification, when it happens at all, usually occurs only for checks over a certain threshold—and even then, it is often cursory.

Once a check clears, the money has already left your account and been deposited into the fraudster's account at another bank. Reversing the transaction requires the receiving bank to cooperate, which can take weeks. In the meantime, the criminal may have already withdrawn the cash or moved it elsewhere.

What to do if you discover a fraudulent check

Contact your bank when ready—do not wait for your next statement. Tell them the check number, the amount, the date it cleared, and the name of the payee if you can see it on your statement. Ask your bank to initiate a chargeback or reversal and to investigate the transaction. Most banks require you to report fraud within 30 days of the statement date, though some allow up to 60 days.

Your bank will file a claim with the receiving bank and ask them to recover the funds. This process can take 10 to 30 business days. In the meantime, ask your bank to freeze your account or issue you a new account number to prevent further fraud. If the fraudulent check was written by someone you know, you may also want to file a police report, which gives you documentation for your bank and may help with recovery.

Order a new checkbook with a different account number if your bank offers that option. At minimum, stop using the compromised checks and monitor your account daily for the next 60 days.

How to protect your checks from theft and fraud

Store blank checks in a locked drawer or safe, not in an easily accessible pile. Do not leave checks in your car, at your desk, or anywhere someone visiting your home could access them. If you move or change banks, destroy old checks rather than throwing them away—a shredder is best, but tearing them into small pieces works too.

Order checks only when you need them, not in bulk. The longer blank checks sit around, the longer a window exists for them to be stolen. Some people order checks only a few at a time and keep them at home rather than having them mailed to an address where mail theft is a risk.

Check your bank account online at least weekly, not just when you receive your monthly statement. Many fraudulent checks clear within days, and catching the theft early gives you a better chance of recovery. Set up account alerts with your bank so you are notified of large withdrawals or unusual activity.

Consider using positive pay, a service some banks offer that lets you submit a list of checks you have written. The bank then compares each incoming check against your list and flags any that do not match. This is especially useful if you write a small number of checks each month and can easily track them.

The difference between check fraud and other ways someone can access your account

Check fraud is one route, but there are others. If someone has your account number and routing number (which appear on a check), they can also set up an ACH transfer or authorize a debit without your permission. If they have your debit card number and CVV, they can make online purchases. If they know your online banking password, they can log in and transfer money directly. Each of these carries different timelines for reporting and recovery.

Check fraud is slower than digital theft—it takes days for a check to clear instead of seconds—but it is also harder to trace because it involves a physical document and multiple institutions. Digital fraud can be reversed more quickly because it happens within a single system, but it also spreads faster. The protection strategy is the same: monitor your account regularly, report fraud when ready, and limit who has access to your account information.

Frequently Asked Questions

Can someone use a check I wrote to someone else to access my account?

Not directly. A check you wrote to a specific person is made out to them, and only they can deposit it. However, if that person loses the check or it is stolen from them, someone else could potentially forge their endorsement on the back and deposit it. The risk to your account is the same—money leaves your account—but the fraud is against the original payee, not against you.

What if I notice a fraudulent check months after it cleared?

Most banks have a 30-day window for reporting check fraud, though some extend to 60 days. If you are past that window, contact your bank anyway and explain the situation. They may still investigate, especially if the fraud is part of a pattern. You can also file a police report and provide that to your bank as supporting documentation. Recovery becomes less likely the longer you wait, but it is not impossible.

Does my bank have to refund me if someone forges my signature on a check?

Banks are generally liable for forged checks under the Uniform Commercial Code, which means they should refund you if they process a check with a forged signature. However, you must report it within the timeframe your bank specifies—usually 30 days. If you delay reporting, the bank may argue that you contributed to the loss by not monitoring your account, which can reduce or eliminate your refund.

Is it safe to write checks at all anymore?

Checks are safer than they were 20 years ago because banks now use digital imaging and fraud detection software. However, they are still vulnerable to theft and forgery. If you write only a few checks per month, the risk is manageable if you store them securely and monitor your account. If you write many checks or handle large amounts, consider using digital payment methods like ACH transfers or bill pay through your bank's website instead.

Can someone access my account with just the routing and account number from a check?

Yes. With your routing and account number, someone can write checks, set up ACH transfers, or authorize debits. They cannot log into your online banking account without your password, but they can move money out of it. This is why protecting your checks and being cautious about who you give your account information to matters.