Share your account and routing number only with people and organizations you trust completely, and only when you initiated the contact
Your bank account number and routing number are not secret in the way a password is. Your routing number is printed on every check you write and is public information — banks publish it so other banks can find them. Your account number appears on statements and checks you hand to people. But that does not mean you should give both out freely.
The real risk is not that someone will steal the numbers themselves. The risk is what they can do with them: set up automatic withdrawals from your account, create fraudulent checks in your name, or use them to impersonate you to your bank. You need to know who you are giving them to and why they need them.
Key Takeaways
- Your routing number is public and appears on every check; your account number is semi-private and should only go to people you trust.
- Legitimate organizations that need both numbers include your employer (for direct deposit), your bank, and organizations you are paying money to.
- Never give out both numbers to someone who contacted you first, even if they claim to be from your bank or the government.
- If you gave your numbers to someone you now distrust, contact your bank immediately and ask them to watch for unauthorized transactions.
- Your bank will never ask for your account number by email, text, or phone call — they already have it.
Who actually needs both your account and routing number
Your employer needs both numbers to set up direct deposit of your paycheck. Your bank already has both. Any organization you are paying money to — a utility company, insurance company, or loan servicer — may ask for both so they can withdraw payments automatically from your account.
The IRS may ask for your account and routing number if you are receiving a tax refund by direct deposit, but you provide this information through your tax return, not through a phone call or email. State tax agencies work the same way. If you are waiting for a refund and someone calls asking for these numbers, hang up and call the agency directly using the number on their official website.
Legitimate businesses you initiate contact with — a mortgage lender, a credit card company, a medical provider setting up a payment plan — may ask for both numbers. The key word is "initiate." You called them, or you went to their website and filled out a form you found yourself.
Red flags that mean you should not share
Do not give out your account and routing number to anyone who contacted you first, regardless of what they claim. This includes phone calls, emails, text messages, and social media messages. Your bank will never call you asking for your account number. The IRS will never email you asking for banking details. Government agencies do not contact people by text to ask for financial information.
Be suspicious of anyone who creates urgency: "We need this right now" or "Your account will be closed if we don't verify this today." Legitimate organizations give you time to think. Be suspicious of anyone who asks for your account number along with your Social Security number, date of birth, or password — no legitimate organization needs all of these at once.
If someone claims to be from your bank and asks for your account number, tell them you will call your bank back using the number on your debit card or bank statement. Then hang up and make that call. If the person was legitimate, your bank will have a record of trying to reach you. If they were not, you have protected yourself.
What to do if you already shared your numbers
If you gave your account and routing number to someone you now believe was fraudulent, contact your bank immediately. Call the number on the back of your debit card or on your most recent statement. Tell them what happened and ask them to watch your account for unauthorized transactions.
Your bank can flag your account for suspicious activity and may issue you a new account number. They can also reverse unauthorized transactions if they catch them quickly. The sooner you report the problem, the more protection you have.
You can also file a report with the Federal Trade Commission at ReportFraud.ftc.gov. This creates a record of the fraud and helps the government track scams. If the person who contacted you claimed to be from a specific government agency, you can also report them directly to that agency — the IRS has a fraud hotline, for example.
Sharing your numbers for legitimate refunds and payments
When you file your taxes and want your refund by direct deposit, you will enter your account and routing number on your tax return. This is safe because you are submitting the information directly to the IRS through their official filing system or through tax software. The IRS does not ask for this information any other way.
If you are receiving a state tax refund, insurance refund, or other government payment by direct deposit, you will usually provide your banking information through an official government website or form. Read the web address carefully — it should start with "https://" and should be the official government domain, not a lookalike.
For business refunds, insurance refunds, and other private payments, you can usually choose to receive money by check instead of direct deposit if you are uncomfortable sharing your numbers. This takes longer — checks take five to ten business days to arrive — but it is an option if you are uncertain about the organization.
How to protect your account number going forward
Keep your bank statements and canceled checks in a safe place. Do not leave them in your mailbox or car. Shred them before throwing them away, because your account number appears on both.
When you write a check, only give it to someone you trust. A check contains both your account number and routing number. Do not photograph your checks or email images of them.
Use your bank's official app or website to check your account regularly. Set up alerts if your bank offers them — many banks can notify you by text or email when a large transaction occurs. This helps you catch fraud quickly.
If you receive a call, email, or text claiming to be from your bank or a government agency, do not respond to the message. Instead, look up the official phone number yourself and call that number. This is the only way to know you are actually reaching the organization you think you are.
Frequently Asked Questions
Can someone drain my account if they have my account and routing number?
They cannot drain it immediately, but they can set up unauthorized automatic withdrawals or create fraudulent checks. Your bank is responsible for stopping most of this, but you need to report it quickly. Call your bank as soon as you realize your numbers were compromised.
Is my routing number really public?
Yes. It appears on every check you write and is published by the Federal Reserve. Scammers do not need to steal it — they can look it up. Your account number is what they actually want, because that is what identifies your specific account.
What if my employer asks for my account number by email?
Call your employer's payroll department using the main phone number from your employee handbook or the company website. Confirm that they actually need this information and that the email was legitimate. Many payroll systems have secure portals where you can enter this information instead of emailing it.
Do I have to give my account number to set up a payment plan?
Most organizations that set up payment plans ask for your account number so they can withdraw payments automatically. You can usually ask to pay by check or credit card instead, though this may cost more or take longer. Ask what your options are before you decide.
What if I gave my numbers to someone who said they were from the IRS?
The IRS does not call people asking for account numbers. Contact your bank immediately and tell them what happened. Then file a report at ReportFraud.ftc.gov and call the Treasury Inspector General for Tax Administration at 1-800-366-4484 to report the scam.