You can share your account number for deposits, but not for withdrawals or payments you didn't authorize
Your bank account number alone—without your routing number—cannot be used to withdraw money or make purchases. Someone who has only your account number can deposit money into your account, which is why you give it out for direct deposit paychecks, tax refunds, and insurance payouts. The real risk comes when someone has both your account number and routing number together, or when they have access to your debit card, online banking password, or other identifying information.
The distinction matters because banks use your account number and routing number as a pair to identify your specific account. A deposit requires only that pairing to know where the money goes. A withdrawal or payment requires additional verification—a signature, a PIN, a password, or a card—that proves you authorized it.
Key Takeaways
- Sharing your account number for direct deposits (payroll, tax refunds, insurance refunds) is safe because deposits cannot pull money out.
- Never share your account number along with your routing number, PIN, password, or debit card information to someone you do not know or trust.
- If you share your account number with a business and later suspect fraud, contact your bank immediately and file a dispute within 60 days of the unauthorized transaction.
- Your bank is required to refund unauthorized withdrawals if you report them quickly, but delays in reporting can reduce your protection.
- For tax refunds and government payments, the IRS and state agencies use your account and routing numbers only to deposit money, never to withdraw it.
Safe reasons to share your account and routing numbers
You should share both numbers when setting up direct deposit for your paycheck, tax refund, or insurance refund. Employers, the IRS, state tax agencies, and insurance companies need both pieces of information to deposit money into the correct account. In these cases, the organization is depositing money into your account, not taking it out, so there is no risk of unauthorized withdrawal.
You also share these numbers when you authorize a one-time ACH transfer—a bank-to-bank electronic transfer you initiate yourself. If you are sending money to a friend, paying a bill, or transferring funds between your own accounts at different banks, you provide your account and routing numbers as part of that transfer. The key is that you are the one authorizing the transfer, not the other way around.
Government payments work the same way. When you provide your account and routing numbers to receive a tax refund, stimulus payment, unemployment benefit, or Social Security deposit, those agencies can only deposit money. They cannot withdraw it. The same applies to insurance refunds—whether from a health insurer, auto insurer, or homeowner's policy—which are always deposits into your account.
Situations where you should not share your account number
Do not share your account number with someone who calls you claiming to be from your bank, the IRS, or a government agency. Real banks and government offices do not call asking for account numbers. If someone calls and asks for this information, hang up and call the organization directly using the phone number on your statement or official website.
Do not share your account number with a business you do not recognize or trust, especially if they are asking for it over the phone or in an unsolicited email. Scammers sometimes pose as utility companies, subscription services, or debt collectors to collect account information for fraudulent withdrawals.
Never share your account number along with your PIN, password, or any other security credential. Even if sharing the account number alone is safe, adding a password or PIN creates the risk that someone could access your online banking or make unauthorized transactions. Keep those separate and never write them down together.
What happens if someone uses your account number fraudulently
If you discover an unauthorized withdrawal from your account, contact your bank immediately by phone. Do not wait. Your bank is required by federal law to investigate unauthorized transactions and refund your money if the withdrawal was not your doing, but your protection depends on how quickly you report it.
If you report the fraud within 2 business days of discovering it, your liability is capped at $50. If you wait longer than 2 business days but report it within 60 days, your liability can be up to $500. If you wait more than 60 days, you may lose all protection and be responsible for the full amount. This is why speed matters—call your bank the same day you notice the problem.
Your bank will place a temporary hold on your account while they investigate, usually lasting 10 business days. During that time, they contact the other bank involved and request the transaction records. If they confirm the withdrawal was unauthorized, they refund your money and close the investigation. If they cannot confirm it was unauthorized, they may ask you for additional evidence—receipts, emails, or other documentation showing you did not authorize the transaction.
How to protect your account number from misuse
When you share your account number for a legitimate purpose—direct deposit, a refund, a transfer you initiated—do it through official channels. Use your employer's payroll system, the IRS website, your bank's website, or the official app of the organization requesting the information. Avoid sharing account numbers through email, text message, or phone calls unless you initiated the contact.
Monitor your bank statements regularly, at least weekly. Most banks let you check your account online or through an app, so you can spot unauthorized transactions quickly. Set up account alerts if your bank offers them—many will notify you by text or email when a withdrawal exceeds a certain amount or when your balance drops below a threshold.
Use a separate account for online shopping or subscriptions if you can. Some people keep a small checking account linked only to their debit card for online purchases, keeping their main account separate. This limits the damage if that card number is compromised, since only the smaller account is at risk.
Account numbers and tax refunds specifically
When you file your tax return and provide your account and routing numbers for a direct deposit refund, the IRS can only deposit money into that account. The IRS cannot withdraw money, cannot charge fees, and cannot reverse the deposit without your written authorization. If you provide the wrong account number by mistake, the IRS will deposit the refund into that wrong account, and you will need to contact that bank to recover it—but the IRS itself cannot pull the money back.
If you are concerned about providing your account number on a tax return, you can request a paper check instead. The IRS will mail it to your address on file, which takes longer but avoids sharing your banking information. You can change your refund method on an amended return if you change your mind after filing.
What to do if you shared your account number with a scammer
If you shared your account number with someone you now believe was a scammer, contact your bank immediately. Tell them the situation and ask them to monitor your account for unauthorized activity. Your bank may place a temporary hold or flag your account for review, which can slow down legitimate transactions, but it protects you from fraud.
If the scammer also obtained your routing number, PIN, password, or other security information, change your online banking password right away and contact your bank to request a new debit card. If you use the same password for other accounts, change those too.
File a report with the Federal Trade Commission at reportfraud.ftc.gov if you believe you have been a victim of identity theft or fraud. The FTC does not investigate individual cases, but the report creates a record that can help if fraudulent accounts are opened in your name later. You can also file a report with your state's attorney general office.
Frequently Asked Questions
Can someone withdraw money with just my account number?
No. A withdrawal requires your account number, routing number, and additional verification such as a signature, PIN, password, or debit card. Account number alone is not enough to take money out. However, if someone has your account number along with other information—like your online banking password—they could potentially withdraw money, which is why you should keep that information separate and secure.
Is it safe to put my account number on a check?
Yes. Your account number and routing number are printed on every check you write, and they are meant to be shared. Anyone who receives a check from you will see both numbers. The risk is not the numbers themselves but what someone does with them—for example, using them to set up unauthorized recurring payments or ACH withdrawals without your permission.
What if I gave my account number to a subscription service and they keep charging me?
Contact your bank and dispute the charge as unauthorized if you did not consent to the subscription or if the company continued charging after you canceled. Your bank can reverse the charges and issue a refund. You should also contact the subscription service directly and request cancellation in writing so you have a record of it.
Do I need to share my account number to receive a tax refund?
No. You can choose to receive your tax refund by direct deposit or by paper check. Direct deposit is faster (usually 1 to 2 weeks versus 3 to 4 weeks for a check), but if you are uncomfortable sharing your account number, a paper check is a valid option. You select the method when you file your return.
Can the IRS or a government agency call and ask for my account number?
No. The IRS, Social Security Administration, and other government agencies do not call asking for account numbers, Social Security numbers, or other personal information. If someone calls claiming to be from a government agency and asks for this information, it is a scam. Hang up and call the agency directly using the number on an official document or their website.