Yes, someone can use a check to access your bank account, but the method depends on what information they have

A check itself is not a password or login credential—someone cannot use a stolen check to log into your online banking. But a check contains enough information to commit fraud: your name, account number, routing number, and bank name are all printed on it. With those details, a person can attempt to withdraw money, set up automatic payments, or open accounts in your name. The damage happens not through hacking your password, but through using the check data to impersonate you or redirect your money.

The real risk is that checks move slowly. A check you write today may not clear for days, and during that window, if someone intercepts it or steals the information, they have time to act before you notice. Worse, if someone deposits a fraudulent check into an account they control, the money may be gone before your bank catches the problem.

Key Takeaways

  • A stolen or intercepted check gives a criminal your account number, routing number, and name—enough to attempt unauthorized withdrawals or payments.
  • Checks take days to clear, creating a window where fraud can occur before you notice money is missing.
  • Report a lost or stolen check to your bank immediately; most banks will flag the check number and watch for it.
  • If someone deposits a fraudulent check into their own account, contact your bank and the receiving bank within two business days to stop the transfer.
  • Your bank's fraud liability limits vary, but federal law caps your personal liability at $50 if you report unauthorized activity within 60 days.

What information on a check can be misused

Every check displays your routing number (the nine-digit code identifying your bank) and account number (usually nine to twelve digits identifying your specific account). A criminal with these two pieces of data can attempt an ACH debit—an electronic withdrawal from your account—without ever touching the physical check. They can also use this information to set up automatic bill payments, redirect your direct deposit, or open new accounts.

The check also shows your name and bank name, which makes the fraud appear more legitimate when the criminal uses it. If someone photocopies your check or writes down the numbers, they have everything needed to pose as you in a phone call to your bank or to a creditor.

The signature line is less useful to a criminal because most modern transactions do not require a signature match. But if someone does forge your signature on a check and deposits it into their account, your bank may not catch it immediately.

How stolen checks are typically used

The most common scenario is check washing: a criminal steals a check you have written or one in transit, erases or chemically removes the payee name and amount, and rewrites it to themselves for a larger sum. They then deposit it into an account they control. The check clears through the banking system before anyone realizes the amount does not match your records.

Another method is using the routing and account numbers to initiate an ACH debit directly from your account. The criminal contacts a merchant or utility company, provides your account information, and authorizes a payment. Your bank processes it because the request appears to come from your account. You do not see the charge until your statement arrives days later.

A third approach is check fraud through deposit: the criminal deposits a counterfeit check (one they printed using your account information) into their own account at a different bank. The receiving bank credits their account immediately, and they withdraw the money before the check bounces back to your bank days later. By then, the criminal is gone and your bank is left to reverse the transaction.

Steps to take if a check is lost or stolen

Contact your bank immediately—do not wait for your statement. Provide the check number, the date you wrote it, the intended payee, and the amount. Your bank will place a stop payment on that check, which means the bank will reject it if someone tries to cash or deposit it. Stop payments usually cost $25 to $35 and remain in effect for six months to a year, depending on your bank.

If the check was stolen from the mail, also file a report with the U.S. Postal Inspection Service at postalinspectors.uspis.gov. Provide the date the check was mailed and the address it was sent to. The Postal Inspection Service investigates mail theft and can coordinate with local law enforcement.

Ask your bank to monitor your account for suspicious activity over the next 30 days. Some banks will flag any attempt to use the stopped check number or any unusual withdrawals. Keep records of your conversation with the bank, including the date, time, and name of the person you spoke with.

What to do if money has already been taken

Report the unauthorized transaction to your bank within two business days of discovering it. Federal law (Regulation E) limits your liability to $50 if you report within 60 days, but reporting sooner protects you better. Your bank will open a dispute and begin an investigation.

If the fraudulent check was deposited into another bank, your bank will send a chargeback to that bank within a set timeframe (usually 10 business days). The receiving bank must then investigate and either return the funds or dispute the chargeback. This process can take 10 to 30 days.

While the investigation is ongoing, your bank may credit the disputed amount back to your account temporarily, but you may lose it again if the investigation finds in the other bank's favor. Keep all documentation: your bank statements, the fraudulent check if you have it, emails, and records of your calls to the bank.

If the receiving bank cannot recover the funds, contact your local police department and file a report. Provide the police report number to your bank; some banks use it to strengthen their chargeback claim. You can also file a complaint with the Consumer Financial Protection Bureau (CFPB) at consumerfinance.gov if your bank does not resolve the dispute fairly.

How to reduce the risk of check fraud

Use checks sparingly and only for payments you trust. Avoid writing checks to unfamiliar vendors or leaving blank checks in the mail. If you must mail a check, drop it in a USPS mailbox rather than leaving it in your home mailbox; mail theft from residential boxes is common.

Consider using a locked mailbox or having mail held at the post office if you will be away. For recurring bills, switch to online bill pay through your bank's website or to automatic ACH payments directly from your account. These methods do not expose your account information to the mail system.

Review your bank statements weekly, not monthly. The faster you spot an unauthorized transaction, the faster you can report it and the stronger your fraud claim. Set up account alerts through your bank's app so you receive a notification for any withdrawal over a certain amount.

Shred checks you do not use and old bank statements. Do not throw them in the trash whole. If you close an account, ask your bank to cancel all outstanding checks and confirm that no new checks can be ordered on that account.

Your liability and bank responsibility

Under federal law, your liability for unauthorized transactions is capped at $50 if you report the fraud within 60 days of your statement date. However, if you wait longer than 60 days, your liability can be much higher—potentially the full amount stolen. Some banks offer zero-liability policies that waive even the $50, but this is a courtesy, not a legal requirement.

Your bank is required to investigate any claim of unauthorized activity and must complete the investigation within 10 business days (or 45 days in some cases). If the bank finds that the transaction was indeed unauthorized, they must return the funds to your account. If they find that you authorized it or that you were negligent (for example, you left blank checks lying around), they may deny your claim.

Banks are also required to have fraud detection systems in place. If your bank fails to catch obvious signs of fraud—such as a check for an amount wildly different from your usual checks—you may have grounds to dispute their finding and escalate to the CFPB.

Frequently Asked Questions

Can someone use just my account number and routing number from a check to drain my account?

Yes. With those two numbers, someone can initiate an ACH debit from your account or set up automatic payments. They do not need your signature or PIN. Contact your bank immediately if you believe your account numbers have been compromised. Your bank can monitor for unauthorized ACH activity and may be able to reverse recent transactions.

How long does it take for a fraudulent check to clear?

A check typically clears within one to three business days if deposited at the same bank, or three to five business days if deposited at a different bank. However, the receiving bank may credit the depositor's account immediately while the check is still in transit. If the check bounces, the reversal can take another five to ten business days.

What is the difference between a stop payment and fraud reporting?

A stop payment prevents a specific check you wrote from being cashed; you request it before the check is presented. Fraud reporting is what you do after someone has already used your account information without permission. Both protect you, but they address different scenarios.

If my bank finds I was negligent, do I still have to pay for the fraud?

It depends on the bank and the circumstances. If you left blank checks unsecured or ignored obvious signs of fraud, the bank may argue you were negligent and deny your claim. However, you can dispute this decision with the CFPB. Banks must prove negligence; simply losing a check is not considered negligence on your part.

Should I close my account if a check was stolen?

Not necessarily. A stop payment and account monitoring are usually sufficient. Closing the account may actually complicate things if the investigation is still ongoing. However, if you discover that multiple checks have been stolen or if your account has been compromised in other ways, closing and opening a new account with a new account number may be the safest option.