Giving out your account number is safe in some situations and dangerous in others — it depends entirely on who is asking and why
Your bank account number by itself cannot drain your account. A thief needs your routing number, account number, and your name to set up an unauthorized transfer or payment. But that does not mean you should hand it out freely. The real risk is that once someone has those three pieces of information, they can pull money out of your account without your permission through the Automated Clearing House (ACH) system — the network that processes direct deposits, bill payments, and transfers between banks.
The safest rule: give your account and routing number only to people and organizations you initiated contact with, or who you have a direct relationship with and trust. If someone calls you asking for it, or emails you out of the blue requesting it, do not give it to them.
Key Takeaways
- Your account number alone is not enough to drain your account — a thief also needs your routing number and name to pull money through the ACH system.
- It is safe to provide your account and routing number to your employer, your bank, the IRS, and established businesses you do regular transactions with.
- Never give your account number to someone who called you unsolicited, emailed you asking for it, or claims to represent a government agency but contacted you first.
- If unauthorized transfers appear on your account, report them to your bank within 60 days to limit your liability to $50 under federal law.
- Scammers often pose as the IRS, your utility company, or your bank — legitimate organizations will never ask for your account number by phone or email without you contacting them first.
Who you can safely give your account number to
Your employer needs your account and routing number to set up direct deposit. This is safe because you initiated the relationship and your employer has no incentive to steal from you. The same applies to your own bank — they already have this information, but if they ask you to confirm it over the phone, you can provide it.
The IRS can receive your account number when you file your tax return or set up a payment plan. You control when and how you send this information, and the IRS uses it only to deposit refunds or collect taxes you owe. Established utility companies, insurance companies, and subscription services you have chosen to do business with can also receive your account number when you set up automatic payments or request a refund.
Landlords and property management companies may ask for your account number to collect rent through automatic transfer. This is generally safe if you have a lease with them and you are the one requesting the arrangement. In all these cases, you are the one who started the transaction or confirmed an existing relationship.
Red flags that mean you should refuse
Do not give your account number to anyone who contacts you first by phone, email, or text claiming to be from your bank, the IRS, Social Security, or any government agency. Legitimate organizations do not ask for account numbers this way. If you are unsure, hang up, look up the official phone number for that organization, and call them back yourself.
Be suspicious of anyone offering you money — a refund, a rebate, a grant, a prize, or a payment — and asking for your account number upfront. Scammers use these offers to get the information they need to pull money out of your account. The same applies to job offers that ask for your banking details before you have been hired or signed paperwork.
Avoid giving your account number to people you met online, even if they seem trustworthy. This includes dating app matches, people in online forums, or sellers on marketplace sites. If someone you do not know well asks for your account number, the answer is no.
What scammers can do with your account number
With your account number, routing number, and name, a scammer can set up unauthorized ACH transfers to pull money directly from your account. They can also create fake checks using your account number, or set up bill payments in your name. These transactions can take days to reverse, and your account can be emptied before you notice.
The good news is that federal law limits your liability. If you report unauthorized transfers within 60 days of the statement date, your maximum loss is $50. If you wait longer than 60 days, you could be responsible for the full amount. Report the fraud to your bank immediately — do not wait for your next statement.
How to report unauthorized transfers
Call your bank's fraud line as soon as you notice a transfer you did not authorize. The phone number is on the back of your debit card or on your bank's website. Have your account number and a list of the unauthorized transactions ready. Your bank will freeze your account, cancel your debit card, and start an investigation.
Follow up with a written dispute letter sent to your bank by certified mail. Include your account number, the date of each unauthorized transfer, the amount, and a statement that you did not authorize it. Keep a copy for your records. Your bank must investigate and respond within 10 business days, though the investigation itself can take up to 45 days.
If the unauthorized transfers came from a specific company or person, file a complaint with the Federal Trade Commission at ReportFraud.ftc.gov. You can also file a police report, though police rarely pursue these cases. The FTC complaint creates a record that may help other victims.
Protecting your account number going forward
Do not write your account number on checks, bills, or documents you mail. Do not store it in your email or text messages. If you need to share it with someone, do so only over a phone call you initiated or through your bank's secure online portal.
Use a password manager to store your banking passwords separately from your account number. Enable two-factor authentication on your bank account if your bank offers it. This adds a second step — usually a code sent to your phone — that makes it harder for someone to access your account even if they have your password.
Monitor your bank statements regularly, at least once a week. Set up account alerts through your bank's app so you are notified of large transfers or withdrawals. The faster you catch fraud, the faster you can report it and limit your loss.
Frequently Asked Questions
Can someone steal money with just my account number?
Not without your routing number and name as well. All three pieces together allow someone to set up an ACH transfer. Your account number alone cannot be used to drain your account, but you should still treat it as sensitive information and not share it unnecessarily.
Is it safe to put my account number on a check?
Your account number is already printed on every check you write, so anyone who receives a check from you has it. However, do not write your account number on bills, invoices, or other documents you mail unless the organization specifically asks for it. Mailed documents can be intercepted.
What if I gave my account number to someone I met online?
Monitor your account closely for the next 30 days. Set up account alerts and check your statement weekly. If you see unauthorized transfers, report them to your bank immediately. You are not liable for fraudulent ACH transfers reported within 60 days, so act quickly if something appears.
Do I have to give my account number to get a tax refund?
No. You can receive a tax refund by check mailed to your address instead. However, direct deposit is faster — the IRS deposits refunds within 21 days, while checks take longer. If you choose direct deposit, you control when and how you provide your account number by entering it on your tax return yourself.
What should I do if my bank asks for my account number over the phone?
Hang up and call your bank back using the number on your debit card or their official website. Legitimate banks do not ask you to confirm your full account number over the phone. If they need to verify your identity, they will ask for the last four digits or other information only you would know.