Never send your full bank details through email — use a phone call or secure message instead
Email is not encrypted by default, which means your bank account number, routing number, and other details can be read by anyone who intercepts the message. If you need to give someone your bank details — to set up a direct deposit, receive a wire transfer, or authorize a payment — a phone call is safer. If email is your only option, use your bank's secure message portal instead of regular email, or ask the recipient if they have an encrypted channel.
The risk is real. Criminals monitor email traffic, and if they capture your account number and routing number, they can attempt unauthorized withdrawals or transfers. Your bank may reverse fraudulent transactions, but the process takes time and leaves you without access to that money while the dispute is being resolved.
Key Takeaways
- Phone calls are the safest way to share bank details because the information stays between you and the person you are calling.
- If you must use email, ask your bank whether it has a secure message system that encrypts messages between you and the recipient.
- Never include your full account number, routing number, and PIN or password in the same message, even if you are using a secure channel.
- If you receive an unexpected email asking for your bank details, contact your bank directly using the phone number on your statement before responding.
When a phone call is the right choice
A phone call works best when you are setting up a new payment arrangement, authorizing a wire transfer, or giving details to someone you already know. Call the person directly using a phone number you know is correct — do not use a number from an email or text message, because those could be spoofed.
If you are calling a business or government agency, use the main phone number from their official website or your account statement. Read back the details after you give them to confirm they wrote them down correctly. Ask the person to repeat your account number and routing number so you can verify it matches what you said.
Using your bank's secure message system
Most banks offer a secure message portal inside their online banking platform. Log into your account, look for a "Messages" or "Secure Mail" section, and send the message from there. The message is encrypted, and only the person you send it to can read it. This is safer than regular email because the bank's system protects the data in transit and at rest.
Not all recipients have access to your bank's secure portal — only people with accounts at that same bank can usually receive messages this way. If you need to send details to someone outside your bank, ask them whether their bank has a secure message system you can use instead. If neither of you has access to a secure portal, a phone call remains your best option.
What information is safe to include in an email
If you have no choice but to use regular email, never send your complete banking information in a single message. Split the details across multiple messages or omit sensitive pieces. For example, you might send your account number in one email and your routing number in a separate email sent hours later.
Never include your PIN, online banking password, or security codes in any email, secure or not. Your bank will never ask for these by email. If someone requests your password or security code, it is a scam — hang up or delete the message and contact your bank directly using the number on your statement.
Recognizing phishing emails that ask for bank details
Scammers send fake emails that look like they come from your bank, a government agency, or a business you use. They ask you to "verify" your account by clicking a link and entering your bank details. These are phishing emails, and the link leads to a fake website designed to steal your information.
Your real bank will never ask for your account number, routing number, or password by email. If you receive an email asking for these details, do not click any links. Instead, call your bank using the phone number on your statement or your debit card. Tell them about the email, and they can confirm whether it came from them. Report the email to your bank's fraud department and delete it.
What to do if you already sent your details by email
If you sent your bank details through regular email and now you are worried, contact your bank immediately. Tell them what information you sent, when you sent it, and to whom. Your bank can monitor your account for suspicious activity and may place a temporary hold on transfers or withdrawals while they investigate.
You can also place a fraud alert on your credit report by contacting one of the three major credit bureaus — Equifax, Experian, or TransUnion. A fraud alert tells lenders to verify your identity before opening new accounts in your name. This does not prevent fraud, but it makes it harder for someone to open accounts without your knowledge. The alert lasts one year and is free.
Frequently Asked Questions
Is it safe to email my account number if I do not include my routing number?
No. Your account number alone is enough for someone to attempt unauthorized transfers or withdrawals. Even partial information is risky. A phone call or secure message is always safer than email, regardless of which details you include or leave out.
What if the person says they need my details by email for their records?
Ask them to call you instead, or offer to send the details through your bank's secure message system. If they refuse both options and insist on email, that is a red flag. Legitimate businesses have secure ways to receive sensitive information — if they do not, reconsider whether you want to do business with them.
Can I send my bank details through text message instead of email?
Text messages are also not encrypted, so they carry the same risk as email. A phone call is still your safest option. If you must use a written method, ask whether the recipient's bank or your bank has a secure messaging system you can use.
What should I do if I get an email from my bank asking me to verify my account?
Do not click any links in the email. Call your bank directly using the number on your statement or debit card. Your real bank will never ask you to verify your account by email. If the email came from your bank's official address, forward it to your bank's fraud department and ask them to investigate.
Does my bank's secure message system protect my information from the recipient?
No. Secure messaging encrypts the information while it travels to the recipient, but once they receive it, they can see it. Only send your details to people you trust. If you are unsure whether someone should have your account number, do not send it.