What a checking account number alone cannot do
A scammer or someone with bad intentions cannot withdraw money, transfer funds, or open new accounts using only your checking account number. They cannot log into your online banking. They cannot change your password or contact information. A checking account number by itself is not enough to move money out of your account or impersonate you to your bank.
This is the most important thing to know: your account number is not a password. It is not a secret. Banks treat it more like a phone number — something you might write on a check or give to an employer for direct deposit. The number alone does not grant access to your money.
Key Takeaways
- Your checking account number alone cannot be used to withdraw money, transfer funds, or access your account online.
- Someone needs both your account number and routing number, plus your online banking password or authorization, to move money from your account.
- ACH transfers and checks written against your account do require your account number, so you should not give it to people you do not trust.
- If someone has your account number and routing number together, monitor your account for unauthorized ACH transfers and contact your bank immediately if you see suspicious activity.
- Your bank can reverse unauthorized ACH transfers and checks within a certain window, but the sooner you report it, the better your protection.
What someone can do with your account number and routing number together
When someone has both numbers, the risk increases. With your account number and routing number, a person can attempt to set up an ACH transfer — an electronic transfer between bank accounts. They can also write a check against your account if they have access to blank checks or can create one. Neither of these requires your password or your permission, which is why you should be cautious about who you give these numbers to.
ACH transfers are the more common threat. A scammer with both numbers can try to pull money out of your account by initiating a transfer to their own bank account. Your bank's system may or may not catch it as fraudulent before it goes through. Some banks have filters that flag transfers to new recipients or large amounts; others do not. The transfer can take one to three business days to complete, which gives you a window to catch it and stop it.
Checks are slower and require more work on the scammer's part, but they are still a real risk. Someone would need to either obtain blank checks from your account or forge one. If they do, the check clears through the banking system using your account number and routing number.
Why your bank asks for your account number
Your bank, your employer, and other legitimate organizations ask for your account number because they need it to send money to you or take money out with your permission. When you set up direct deposit, you give your employer your account number and routing number so they can deposit your paycheck. When you pay a bill online, you authorize a company to pull money from your account using these numbers.
The key word is authorization. You are telling the organization it is okay to use your account number for that specific purpose. Without your authorization, an ACH transfer is unauthorized, and your bank is required to investigate and reverse it if you report it.
What to do if you gave your account number to someone you now distrust
Start by checking your account. Log into your online banking and look at your recent transactions — both deposits and withdrawals — for the last 30 to 60 days. Look for ACH transfers you do not recognize, checks you did not write, or small test transfers (scammers sometimes pull out $1 or $2 first to see if the account is active).
If you see something suspicious, contact your bank immediately. Call the number on the back of your debit card or on your bank statement — not a number you find online, which could be fake. Tell them you want to report an unauthorized transaction. Your bank will freeze the account if needed, investigate the transfer, and reverse it. Federal law requires banks to reverse unauthorized ACH transfers within a specific timeframe, usually 10 business days if you report it quickly.
Do not wait to see if more transfers happen. Report it as soon as you spot one unauthorized transaction. Your bank can also flag your account to require additional verification for new ACH transfers going forward, or they can block ACH transfers entirely if you ask.
When you should and should not share your account number
Share your account number with your employer for direct deposit. Share it with your bank when they ask you to confirm your identity. Share it with a company you are paying a bill to, if you have initiated the payment and trust the company. Share it with family members you trust completely.
Do not share your account number with someone who calls you claiming to be from your bank, even if they sound official. Your bank already has your account number — they do not need you to give it to them. Do not share it in response to an email or text message, no matter who it claims to be from. Do not post it on social media or in public forums. Do not give it to someone you just met or someone pressuring you to move quickly.
If someone asks for your account number and you are not sure whether to trust them, hang up or close the message and call your bank directly using the number on your card. Ask the bank whether that person or organization should have your account number. Your bank can tell you in seconds whether the request is legitimate.
How to protect your account number going forward
Treat your account number the way you treat your home address — it is not secret, but you do not hand it out randomly. Keep your bank statements in a safe place. Do not leave them in your mailbox or trash where someone can find them. Shred old statements before throwing them away.
When you write checks, do not leave them where someone can pick them up and see your account number. If you order checks online, use your bank's official website or a service your bank recommends, not a third-party vendor you found through a search engine.
Monitor your account regularly — at least once a week if you can. Most banks let you set up alerts for large transfers or withdrawals. Turn these on. If your bank offers it, set up two-factor authentication for online banking so that even if someone gets your password, they cannot log in without a code sent to your phone.
What to do if someone forges a check with your account number
If you discover a check you did not write has been cashed against your account, report it to your bank immediately. Bring the canceled check if you can get it, or describe it in detail — the amount, the date, who it was written to. Your bank will investigate and reverse the charge. You may also want to file a report with your local police department, though they often do not pursue individual check fraud cases.
After the bank reverses the charge, ask them to flag your account and notify you of any checks presented for payment. Some banks can also issue you a new account number if the fraud is extensive, though this is rare and usually only done if your account has been compromised multiple times.
Frequently Asked Questions
Can someone open a new bank account using my account number?
No. Opening a new account requires a government ID, a Social Security number, and a signature. Your account number alone cannot be used to open an account in someone else's name. However, if someone has your Social Security number and other personal information along with your account number, they could attempt identity theft, which is a much larger problem.
What if I gave my account number to a website I am not sure about?
Monitor your account for unauthorized ACH transfers for the next 30 to 60 days. If you see anything suspicious, report it to your bank immediately. If nothing appears after two months, the risk has passed. Going forward, only enter your account number on websites you recognize and trust, and make sure the website is secure (the URL should start with "https" and show a lock icon).
Can someone use my account number to file taxes or claim benefits in my name?
No. Filing taxes or claiming government benefits requires your Social Security number, personal identification, and usually a signature or digital verification. Your account number is not part of that process. However, if someone has your Social Security number and other personal details, they could attempt tax fraud or benefits fraud, which are serious crimes.
Do I need to close my account if someone has my account number?
Not necessarily. Closing your account is a last resort. Start by monitoring it closely and setting up alerts with your bank. If you see unauthorized activity, report it and let your bank reverse it. If the fraud continues or you feel unsafe, then ask your bank about closing the account and opening a new one. Your bank can transfer your direct deposit and automatic payments to the new account.
How long does my bank have to reverse an unauthorized transfer?
Federal law requires banks to reverse unauthorized ACH transfers within 10 business days if you report it. However, banks often reverse them much faster — sometimes within one or two business days. The sooner you report it, the sooner your bank can act. For checks, the timeline is longer because checks move through a separate clearing system, but your bank can still reverse a forged check if you report it within a reasonable time.