The most common ways your account number gets exposed
Your checking account number can be obtained by someone without your permission through a few straightforward routes. The most common is intercepting a check — a physical check shows your account number in plain text at the bottom, and anyone who handles it (mail carrier, store employee, person at your bank) can write it down. A second route is phishing emails or texts that trick you into entering your account number on a fake website or into a form that looks official. A third is data breaches at companies where you've given your account number — retailers, utilities, subscription services, or even your bank itself.
Less common but still possible: someone you know personally (a roommate, family member, ex-partner) can simply look at a statement or check. Scammers can also call your bank impersonating you and request your account number be changed or linked to a new service. And if you've written your account number on a bill payment form or given it over the phone to someone you thought was legitimate, that person now has it.
Key Takeaways
- Your account number appears on every check you write and can be read by anyone who handles the physical check.
- Phishing emails, texts, and fake websites designed to look like your bank are a primary method scammers use to collect account numbers.
- Data breaches at retailers, utilities, and other companies where you've provided your account number can expose it to criminals.
- Having your account number alone does not let someone withdraw money without also having your routing number and access to your online banking, but it does enable ACH fraud and bill payment fraud.
What a scammer can actually do with just your account number
Having only your account number — without your routing number, PIN, or online banking password — limits what a scammer can do, but does not stop them entirely. The most common fraud is ACH (Automated Clearing House) fraud, where the scammer sets up an unauthorized transfer or recurring payment from your account using your account number and a routing number they find or guess. This can drain your account over days or weeks if you do not notice.
A scammer can also use your account number to set up a bill payment in your name to a company you do business with — your utility, phone provider, or credit card company — and then change the payment address so the bill goes to them instead. They receive your bill, see your account details, and may be able to reset your password or access your account. Some scammers use account numbers to open fraudulent accounts at other banks or to apply for loans in your name, though they usually need additional information (Social Security number, address, date of birth) to succeed.
What a scammer cannot do with only your account number: log into your online banking, withdraw cash from an ATM, or use a debit card. They need your PIN, password, or card itself for those actions.
How to reduce the risk of your account number being stolen
Stop using checks if you can. If you must write checks, do not leave them in an unsecured mailbox for pickup — take them directly to the post office or hand them to the recipient. Do not write your account number on bills you mail; most companies can look it up by your account name or customer ID. Shred any statements, bills, or documents that show your account number before throwing them away.
When you give your account number over the phone, verify first that you called the number — do not use a number from an email, text, or website. Look up the official number on your bank's website or the back of your debit card. Never enter your account number into a link sent via email or text, even if it looks like it came from your bank. If you receive an unexpected email or text asking for account details, contact your bank directly using a number you know is real.
Check your bank and credit card statements weekly for unauthorized charges or transfers. Set up account alerts through your bank's app or website so you are notified of large transfers, new payees, or login attempts. Use a strong, unique password for your online banking and enable two-factor authentication if your bank offers it.
What to do if you think your account number has been compromised
Contact your bank immediately — call the number on the back of your debit card or on your most recent statement, not a number from an email or text. Tell them you believe your account number has been exposed and ask them to monitor your account for fraud. Most banks will flag your account and watch for suspicious activity.
Ask your bank whether they recommend closing your current account and opening a new one. Some banks do this automatically; others wait to see if fraud actually occurs. If you close the account, your bank will issue a new account number and debit card. Any automatic payments (paycheck deposits, bill payments, subscriptions) tied to the old account will need to be updated with the new number.
Review your recent statements and credit reports for unauthorized charges or accounts opened in your name. You can request a free credit report from each of the three bureaus (Equifax, Experian, TransUnion) at annualcreditreport.com. If you see fraud, file a report with your bank and consider filing a report with the Federal Trade Commission at reportfraud.ftc.gov.
The difference between account number theft and identity theft
Account number theft is narrower than identity theft. Someone with only your account number can commit ACH fraud or bill payment fraud, but they cannot open new credit cards, take out loans, or file taxes in your name — those require your Social Security number, address, and date of birth. However, account number theft can be a stepping stone to identity theft if the scammer uses the fraud to gather more of your personal information.
If you discover that someone has used your account number to open new accounts or apply for credit in your name, that is identity theft, not just account number theft. Contact the Federal Trade Commission and consider placing a fraud alert or credit freeze on your credit file to prevent further damage.
Why your bank asks for your account number in certain situations
Your bank needs your account number to process legitimate transactions: direct deposits from your employer, wire transfers you initiate, bill payments you set up, and loan applications. When your bank asks for your account number, you are usually already in a secure channel — logged into your online banking, on a call to a number you verified, or in person at a branch. The key is that you initiated the contact, not the other way around.
Be cautious if someone contacts you first asking for your account number, even if they claim to be from your bank. Legitimate banks do not ask for account numbers via unsolicited email, text, or phone call. If you are unsure, hang up, look up the bank's official number, and call them back to ask whether they need information from you.
Frequently Asked Questions
Can someone withdraw money from my account with just my account number?
Not directly. They cannot use an ATM or debit card without the card itself or your PIN. However, they can set up unauthorized ACH transfers or bill payments using your account number and routing number, which can drain your account over time. Contact your bank immediately if you suspect this is happening.
Is my account number visible to other people when I pay with a debit card?
No. When you swipe or insert a debit card, the merchant sees only the last four digits of your card number, not your full account number. Your full account number appears on checks and statements, but not on card transactions.
What should I do if I accidentally gave my account number to someone I do not trust?
Call your bank right away and tell them the account number may be compromised. Ask them to monitor your account for fraud and discuss whether closing the account and opening a new one makes sense. Watch your statements closely for the next 30 to 60 days for any unauthorized activity.
Do I need to give my account number to set up direct deposit at a new job?
Yes. Your employer needs your account number and routing number to deposit your paycheck. Provide this information directly to your employer's payroll department, not through an email link or unsecured form. If your employer asks you to enter this information online, verify that the website is secure (look for "https://" and a lock icon) and that you are on your employer's official domain.
Can someone use my account number to open a bank account in my name?
Unlikely with only your account number, but possible if they also have your Social Security number, address, and date of birth. If you suspect someone has opened an account in your name, contact the bank where the account was opened and file a report with the Federal Trade Commission.