What a person can actually do with your account number alone
A bank account number by itself — without your routing number, name, or signature — is not enough to drain your account or make unauthorized withdrawals. Banks require multiple pieces of information to move money out: your full name, routing number, the account number, and usually your permission in writing or through a verified channel. A person with only the account number cannot log into your online banking, cannot call your bank and withdraw funds, and cannot use it at an ATM.
What they can do is limited but worth understanding. They can deposit money into your account if they have the routing number as well. They can set up a direct deposit or ACH transfer to your account if they have both numbers. They can also use the account number as one piece of information in a larger fraud attempt — combining it with other details they find or steal to build a more complete picture of your identity.
The real risk is not the account number in isolation. The risk is what happens when someone has your account number and your routing number and knows your name, because that combination is enough to initiate an ACH transfer out of your account without your permission. That is why both numbers together are treated as sensitive information, even though either one alone is relatively low-risk.
Key Takeaways
- An account number alone cannot be used to withdraw money, log into your account, or access funds without additional information and authorization.
- Someone with your account number and routing number together can attempt to set up unauthorized ACH transfers or direct deposits if they also have your name.
- Your account number appears on checks, invoices, and payment confirmations, so it is often already known to people you do business with regularly.
- If you suspect unauthorized activity on your account, contact your bank immediately — federal law limits your liability for unauthorized transfers if you report within 60 days.
Why your account number is printed on your checks
Your bank account number is printed at the bottom of every check you write, along with your routing number. This is by design. Anyone who receives a check from you — a landlord, an employer, a utility company, a store — will see both numbers. Your bank expects this and has built their security around the assumption that the account number is not secret.
The same numbers appear on bank statements, wire transfer receipts, and payment confirmations you receive. If you set up automatic bill pay through your bank's website, you enter your account number into each company's system. Your payroll department has your account number. Your insurance company has it. The security model does not treat the account number as confidential in the way it treats your PIN or your online banking password.
This is why receiving a call or email asking for your account number is not automatically suspicious — many legitimate businesses need it. What should trigger caution is being asked for your account number and your PIN, or your account number plus your online password, or your account number plus your Social Security number. Those combinations are what fraudsters actually want.
How someone could use your account number in a fraud scheme
The most common fraud involving account numbers is the ACH debit scam. Someone who has your account number, routing number, and name can attempt to pull money out of your account using the ACH (Automated Clearing House) system. They do this by creating a fake authorization or by impersonating a business you already do work with. Your bank may not catch this immediately because ACH transfers look like legitimate transactions.
Another route is check fraud. If someone has your account number and routing number, they can print counterfeit checks in your name and use them to pay for things or cash them out. This takes more effort than an ACH transfer, but it is still possible. The checks will clear against your account, and you will not know until your bank statement arrives or you check your balance.
A third scenario is identity theft building. Your account number is one data point. Combined with your name (which is on your checks), your address (which is on your statements), and your Social Security number (which a fraudster might obtain separately), it becomes part of a larger profile that can be used to open new accounts, apply for credit, or commit other fraud. The account number alone does not do this, but it is a piece of the puzzle.
What to do if you think someone has misused your account number
If you see a transaction you did not authorize, contact your bank immediately — do not wait for a statement to arrive. Call the number on the back of your debit card or the number listed on your bank's official website. Do not use a phone number from an email or text message, because that could be a fraudster pretending to be your bank.
Tell the bank the specific transaction, the date it posted, and the amount. Your bank will investigate and can reverse unauthorized ACH transfers and debit transactions. Federal law (Regulation E) limits your liability: if you report within 60 days of the transaction appearing on your statement, you are not responsible for the loss. If you wait longer, your liability can increase.
After reporting, ask your bank whether you should place a fraud alert or freeze on your credit. A fraud alert tells credit bureaus to contact you before opening new accounts in your name. A credit freeze prevents new accounts from being opened without your explicit permission. Either one can slow down identity theft if a fraudster is trying to use your information for more than just account access.
When you should and should not share your account number
You should share your account number when setting up direct deposit with your employer, when paying bills through your bank's bill pay system, when receiving a wire transfer, or when a business you already work with asks for it as part of a normal transaction. In these cases, you are initiating the contact or responding to a request from a known business.
You should not share your account number in response to an unsolicited email, text, or phone call — even if the message appears to come from your bank. Real banks do not ask for account numbers via email or unsolicited calls. You should not share it on public social media, in online forums, or with people you do not know. You should not share it if someone calls claiming to be from your bank and asks for it along with your PIN, password, or Social Security number.
If you are unsure whether a request is legitimate, hang up and call your bank directly using the number on your card or statement. Do not use contact information from the email or call that prompted the request. A few minutes of verification can prevent hours of fraud investigation later.
The difference between account number risk and routing number risk
Your routing number identifies your bank and your branch. Your account number identifies your specific account at that bank. Together, they are enough to initiate transfers. Separately, they are much less useful to a fraudster. A routing number without an account number tells someone which bank you use, but nothing more. An account number without a routing number is incomplete — a fraudster would need to look up your routing number or guess it, which is possible but adds a step.
This is why the two numbers are often treated as a pair in security discussions. You might see advice to "protect your account number and routing number" as if they are equally sensitive. They are equally sensitive together, but the account number alone is lower-risk because it is already widely known. Your routing number is slightly more sensitive because fewer people have it, but it is also not secret — it is published by the Federal Reserve and can be found online if someone knows your bank's name and location.
Frequently Asked Questions
Can someone open a new bank account using just my account number?
No. Opening a new account requires a Social Security number, government ID, address verification, and other identity documents. An account number alone cannot be used to open an account in your name. However, if a fraudster has your account number plus other personal information, they might use it as part of a larger identity theft scheme.
What if I gave my account number to someone I met online?
Monitor your account for unauthorized transactions. If nothing appears within a few weeks, the risk is likely low. If you see suspicious activity, contact your bank immediately. You can also place a fraud alert with the credit bureaus as a precaution, which costs nothing and alerts lenders to verify your identity before opening new accounts.
Is it safe to put my account number on a check?
Yes. Your account number is already printed on every check you write, and this is the normal, expected way checks work. Anyone who receives a check will see both your account number and routing number. This is not a security risk because checks are designed to be seen by many people.
Can someone use my account number to get a loan in my name?
Not with the account number alone. Lenders require a Social Security number, credit history check, income verification, and government ID. An account number is not enough to open a credit account. However, if a fraudster has your account number and your Social Security number, they have two of the pieces needed for identity theft.
What should I do if a company asks for my account number over the phone?
If you called the company, it is generally safe to provide it. If the company called you unsolicited, ask them to send a written request or verify the request through their official website. Legitimate companies understand this caution. If they pressure you or ask for additional information like your PIN or password, hang up and call the company back using a number from their official website.