The short answer: depositing a check alone cannot give someone access to your account
A check deposit by itself does not expose your bank account to hacking. The person depositing the check—whether it's you, a bank teller, or someone else—cannot gain login credentials, passwords, or account numbers from the deposit process. However, the check itself contains sensitive information printed on it, and how that information is handled matters.
The real risk is not the deposit itself, but what someone could do with the routing number, account number, and your name that appear on every check. If a check lands in the wrong hands before or after deposit, that person has the pieces needed to attempt unauthorized transactions—but not through hacking. They would attempt to use those numbers for ACH transfers, bill payments, or fraudulent checks written in your name.
Key Takeaways
- A check deposit cannot give someone remote access to your account or steal your login password.
- Your routing number and account number printed on the check can be used to attempt unauthorized ACH transfers or payments if the check is intercepted or mishandled.
- Mobile check deposits and mailed checks carry different risks depending on who handles them and how.
- If you suspect someone has your account numbers, contact your bank immediately to place a fraud alert and monitor for unauthorized transactions.
- Stopping payment on a check and requesting a new account number are your strongest defenses if a check goes missing.
What information on a check can be misused
Every check you write or receive displays your routing number (the nine-digit code identifying your bank), your account number, and your name. Someone who obtains these numbers can attempt to pull money from your account without ever logging in or hacking anything. They would do this by setting up unauthorized ACH transfers, creating fraudulent checks, or initiating bill payments in your name.
The deposit process itself does not expose these numbers to anyone new. But if a check is lost in the mail, stolen from your mailbox, or mishandled by a business you sent it to, the person who finds it has everything printed on the front. This is why the risk is not the deposit—it's the journey the check takes before or after deposit.
Mobile deposit versus mailed checks: where the real risk sits
When you deposit a check using your bank's mobile app, you photograph the front and back and submit it electronically. The bank receives the image, not the physical check. Someone cannot intercept a digital image the way they can intercept a piece of paper. The only person who sees the full check details is you and the bank's system.
Mailed checks carry more exposure. If you mail a check to a business or if someone mails you a check, it passes through postal carriers, mail sorting facilities, and potentially sits in mailboxes. At any point, someone could remove it and use the account numbers printed on it. This is why checks sent through the mail are a known vector for fraud—not because the deposit itself is unsafe, but because the check itself is vulnerable during transit.
If you receive a check and deposit it immediately using mobile deposit, you reduce the window of time the physical check is at risk. If you receive a check and leave it in your mailbox or on a desk for days, the risk window widens.
How someone could misuse your account numbers if they obtain them
If a check goes missing or is stolen, the person holding it has your routing and account numbers. They cannot log into your account—they do not have your password or username. Instead, they could attempt to:
- Set up an ACH transfer to pull money from your account to theirs (this requires your bank to process the request, which is why banks verify the request and can reverse it).
- Write a fraudulent check in your name using the routing and account numbers.
- Contact a business and authorize a bill payment from your account without your permission.
- Sell your account numbers to someone else who attempts one of these methods.
None of these are hacking. They are fraud, and they work only if the receiving bank or business does not verify the request. Most banks now screen ACH transfers for signs of fraud, and many will reverse unauthorized transfers within a set window. Bill payments can be disputed if you did not authorize them.
What to do if a check goes missing or you suspect misuse
If a check you wrote is lost or stolen before the recipient deposits it, contact your bank and ask them to stop payment on that check. Provide the check number, amount, and date. The bank will flag the check so that if someone tries to deposit it, the transaction will be rejected. There is usually a fee for this service, typically $25 to $35.
If a check you received is lost or stolen, or if you suspect someone has obtained your account numbers, call your bank immediately. Ask them to monitor your account for unauthorized transactions and place a fraud alert on your account. Do not wait to see if something happens—act as soon as you suspect exposure.
If unauthorized transactions have already occurred, your bank can reverse them under the Electronic Funds Transfer Act (for ACH transfers) or the Uniform Commercial Code (for checks). The process typically takes 10 business days, though your bank may provisionally credit your account while they investigate.
Protecting yourself when checks are involved
Use mobile deposit whenever possible. Photograph the check and deposit it immediately, then destroy the physical check by shredding it. Do not leave checks sitting in mailboxes, on desks, or in cars.
If you must mail a check, use your bank's outgoing mail or a secure mailbox at the post office rather than your home mailbox. If you are expecting a check in the mail, track the delivery or ask the sender to use a digital payment method instead.
If you are concerned about a specific check, request a new account number from your bank. This is a legitimate service, though it may take a few business days and could affect automatic bill payments you have set up. Your old account number will stop working for new transactions, but existing checks and ACH authorizations tied to it will not automatically update.
The difference between fraud and hacking
Hacking means someone gains unauthorized access to your account using your login credentials or by exploiting a security flaw in the bank's system. Fraud means someone uses your account information (like the numbers on a check) to initiate a transaction without your permission. A check deposit does not create a hacking risk because no one gains access to your account. It can create a fraud risk if the check itself is intercepted and misused.
Your bank's security systems are designed to catch and reverse fraud. If someone attempts an unauthorized ACH transfer using your account numbers, the bank's fraud detection may flag it. If it gets through, you can dispute it and the bank will investigate. This is different from a hacked account, where someone could change your password, lock you out, and drain your balance before you notice.
Frequently Asked Questions
Can a bank employee steal my account information when I deposit a check?
A bank employee has access to your account information as part of their job, but they are bound by privacy laws and bank policies. Stealing account information or using it for fraud is a federal crime. If you suspect an employee has misused your information, report it to the bank's fraud department and to the FBI's Internet Crime Complaint Center.
Is it safe to take a photo of a check for mobile deposit?
Yes. The photo is encrypted and sent to your bank's secure server. Once the bank processes the deposit, delete the photo from your phone. The main risk is if your phone is stolen or compromised—which is a phone security issue, not a check deposit issue.
What if I deposited a check and then realized it was fraudulent?
Contact your bank immediately. If the check bounces, the bank will reverse the deposit and deduct the funds from your account. If you spent the money before the check bounced, you will owe the bank the amount. This is why it is important to verify checks from unfamiliar sources before spending the funds.
Can someone use my account numbers to open a new account in my name?
No. Opening a new account requires identity verification, a Social Security number, and other personal information beyond what is printed on a check. Account numbers alone cannot be used to open a new account. However, account numbers combined with other stolen information (like your Social Security number or address) could be part of a larger identity theft scheme.
Should I be worried about checks I wrote years ago?
Checks are only valid for a limited time—typically six months from the date written. After that, a bank can refuse to cash or deposit them. If a check is older than six months, the account numbers on it are still exposed, but the check itself cannot be deposited. If you are concerned about old checks, you can request a new account number from your bank.