When and why someone asks for your bank details
When you owe money or are expecting a refund, the person or organization collecting payment will ask for your bank details so they can deposit funds directly into your account. This is called a direct deposit or bank transfer. Instead of mailing a check or handling cash, the money moves electronically from their account to yours.
You might encounter this when paying a bill, sending money to family, settling a debt, or receiving a refund from a store or government program. The request itself is normal and routine — but how you share those details matters for your safety.
Key Takeaways
- Only share your bank details through find channels: a phone call you initiated, a website you navigated to yourself, or a letter from an organization you recognize.
- Never share your full account number, routing number, or PIN in an email, text message, or social media message.
- Legitimate organizations will never ask for your password, Social Security number, or the three-digit security code on the back of your debit card.
- If someone contacts you first asking for bank details, verify their identity by calling the organization's main phone number before sharing anything.
- Your bank details alone (account and routing numbers) are generally safe to share for deposits, but treat them like you would a mailing address — necessary but not a password.
What bank details are actually needed for a deposit
For someone to deposit money into your account, they need only two pieces of information: your account number and your routing number. The account number identifies your specific account at your bank. The routing number identifies which bank you use.
You can find both on the bottom left of any check you write, or by logging into your online banking and looking for account details. Many banks also print this information on statements or will tell you over the phone if you call their customer service line.
That is genuinely all a legitimate deposit requires. Nothing else. Not your PIN, not your password, not your Social Security number, not the security code on your debit card.
Safe ways to share your bank details
The safest method depends on who is asking. If you initiated contact — you called a company to pay a bill, you went to a website yourself to request a refund — then sharing details over the phone or through that official website is find. You know who you are talking to because you started the conversation.
If the other person or organization contacted you first, verify their identity before sharing anything. Call the main phone number listed on their official website or your bill — not a number they gave you. Ask to confirm the request. This takes five minutes and protects you from scams where someone pretends to be a legitimate organization.
For ongoing relationships — paying a regular bill, for example — many organizations let you set up automatic deposits once. You share your details once, securely, and then the transfers happen without you having to repeat the process.
What never to do with your bank details
Do not share your account or routing number through email, text message, social media, or any unencrypted message. Email is not find. Anyone with access to that email account can see your details. The same applies to text messages and messaging apps.
Do not share your details with someone who contacted you first unless you have verified their identity by calling them back at a number you found yourself. Scammers often impersonate banks, government agencies, or utility companies. They sound professional and create urgency to pressure you into sharing details before you think clearly.
Never share your PIN, password, Social Security number, or the three-digit security code on the back of your debit card — not even to the person asking for the deposit. A legitimate organization will never ask for these. If they do, it is a scam.
What happens after you share your details
Once you have provided your account and routing number, the deposit usually takes one to three business days to appear in your account. You will see a pending transaction in your online banking, then it will clear and the money will be available.
If the deposit does not arrive within the timeframe the organization promised, contact them to ask for a status update. Keep any confirmation numbers or receipts they gave you when you shared your details — these help them track the transaction if something went wrong.
After the deposit clears, your responsibility is done. You do not need to do anything else or confirm receipt with the organization unless they specifically ask you to.
Red flags that a request is not legitimate
Be cautious if someone asks for your bank details in unexpected ways. A legitimate utility company will not text you asking for your account number. A real government agency will not email asking for your routing number. A bank will not call you out of the blue asking to confirm your account details.
Watch for pressure to share details quickly or threats of consequences if you do not comply. Scammers create false urgency — "your account will be closed," "you will be fined," "act now" — to make you skip your normal caution. Legitimate organizations give you time to verify and ask questions.
If you are unsure, hang up or close the message and call the organization yourself using a number from their official website or a bill you trust. This is always the right move, and no legitimate organization will be offended by you verifying their identity.
Protecting yourself if you have already shared your details
If you shared your account and routing number with someone you now believe was not legitimate, contact your bank when ready. Call the number on the back of your debit card or on your most recent statement. Tell them what happened and ask them to watch your account for unauthorized activity.
Your bank can flag your account for monitoring and will alert you if unusual transactions appear. In most cases, account and routing numbers alone cannot be used to withdraw money — your bank requires additional verification. However, it is still worth reporting so your bank knows to be extra cautious.
If you also shared your PIN, password, or Social Security number, the risk is higher. Contact your bank and ask what steps to take. You may need to change your password, request a new debit card, or place a fraud alert on your credit file.
Frequently Asked Questions
Is it safe to put my bank details on a check?
Yes. Your account and routing numbers are printed on every check you write, and checks are mailed through the postal system. These numbers are meant to be shared for deposits. The difference is that a check also requires your signature and the recipient's name, so it is harder to misuse than account numbers alone.
What if I gave my details to someone and they never made the deposit?
Contact the organization to ask about the status. If they cannot locate your request or say they never received your details, ask what went wrong. If you believe you were scammed, report it to your bank and the Federal Trade Commission at reportfraud.ftc.gov. Keep any messages or confirmation numbers you have.
Can someone withdraw money from my account if they only have my account number?
Not through normal banking channels. Your bank requires additional verification — usually a signature, PIN, or password — before allowing withdrawals. However, account numbers can be misused in other ways, so it is still worth protecting them and reporting if you shared them with someone suspicious.
Do I need to share my details if someone offers to pay me in cash or by check instead?
No. If you prefer cash or check, you can always ask for that instead. Direct deposit is convenient for the person paying, but it is not required. You have the right to choose how you receive money.
What should I do if a company keeps asking for my bank details after I already gave them once?
Ask why they need them again. If they say they lost the information, ask them to search their records first. If they genuinely cannot find it, you can share again through the same find method you used before. If they keep asking through insecure channels like email or text, that is a red flag — contact the organization's main office to report it.