A routing number alone is not enough to access your checking account
No, a company cannot withdraw money from your account using only your routing number. A routing number identifies which bank holds your account, but it does not give anyone permission to move your money. To actually take funds, someone needs both your routing number and your account number, plus authorization from you — either a signed check, a written authorization form, or explicit permission through your bank's online system.
The routing number is public information. Banks print it on every check, publish it on their websites, and it appears in routing number directories anyone can search. Sharing it alone carries minimal risk because it cannot be used to drain your account or make unauthorized charges.
What matters is what happens when a company gets both pieces of your account information together, and what permission you have actually given them.
Key Takeaways
- A routing number by itself cannot be used to withdraw money or access your account — a company needs your account number as well.
- Even with both numbers, a company cannot take money without your authorization, which usually comes through a signed check, an ACH authorization form, or a written instruction to your bank.
- Sharing your routing number with legitimate businesses (employers, lenders, utilities) is standard practice and necessary for direct deposit and bill payments.
- If you see unauthorized withdrawals from your account, contact your bank immediately — the routing number is not the security problem; the account number and authorization are.
What a routing number actually reveals
Your routing number tells a company which Federal Reserve district your bank belongs to and which specific bank branch processes your account. It is the same for every customer at your bank in your region. You can find your own routing number on the bottom left of any check you write, or by searching your bank's name on the Federal Reserve's routing number database.
Because the routing number is not secret, companies routinely ask for it. Your employer needs it to set up direct deposit. Your utility company asks for it to draft your monthly bill. A mortgage lender requests it to verify your bank account exists. None of these requests are red flags — they are normal business.
The routing number is useful to a company only when paired with your account number. Together, these two pieces of information form what is called a bank account identifier. But even that is not enough to move money without your say-so.
How authorization actually works
To withdraw money from your account, a company must have your explicit authorization. There are three main ways this happens:
- A signed check: When you write a check, you are authorizing the recipient to deposit it. Your signature is the permission. The bank uses your routing number and account number (both printed on the check) to pull the funds.
- An ACH authorization form: ACH stands for Automated Clearing House. If you sign a form authorizing a company to draft your account on a recurring or one-time basis — for a gym membership, insurance premium, or loan payment — that signature is your permission. The company submits the request through the ACH network using your routing and account numbers.
- Online banking instruction: If you log into your bank's website and authorize a bill payment or transfer to a third party, you are giving permission through your bank's system, not through the company itself.
Without one of these forms of authorization, a company cannot legally withdraw money. If someone tries to do so anyway, your bank is required to reverse the transaction and investigate.
When sharing your account information is safe
You should provide your routing and account numbers to:
- Your employer, for direct deposit of your paycheck
- Your bank or credit union, for any internal transfers or services
- Government agencies processing tax refunds, stimulus payments, or benefits
- Utility companies, insurance companies, and subscription services you have authorized to bill you
- Mortgage lenders, auto lenders, and other creditors during the loan process
- Payroll processors and accounting firms if you are self-employed
In all these cases, you are providing the information because you have already decided to do business with them. The routing number is just the mechanism that makes the transaction work.
Red flags that signal real trouble
The problem is not the routing number itself — it is when someone asks for your account number without a clear reason, or when they ask for authorization you did not intend to give. Watch for:
- A company asking for your account number over the phone when you called them (legitimate companies ask you to verify the last four digits of an account you already have with them, not to provide a new account number)
- A request to authorize a withdrawal that is not tied to a specific service or product you are purchasing
- A form asking you to sign a blank authorization, or one where the amount or frequency is left open
- Pressure to provide account information to "verify" your identity or "confirm" your account (banks verify through other means)
If you see unauthorized withdrawals on your statement, the problem is not that someone has your routing number — it is that they obtained your account number and forged your authorization, or your bank failed to verify the authorization before processing the withdrawal.
What to do if you spot unauthorized activity
Contact your bank immediately if you see a withdrawal you did not authorize. Most banks have a fraud department that operates 24/7. You can call the number on the back of your debit card or log into your online banking to report it.
Your bank is required by federal law to investigate unauthorized ACH withdrawals within a specific timeframe and reverse them if they find the withdrawal was not authorized. Provide the bank with the date of the withdrawal, the amount, and the name of the company that initiated it. The bank will trace the transaction back through the ACH network to find out who submitted it.
If the withdrawal came through a check, the process is different — contact your bank to report the forged check, and they will work with the receiving bank to recover the funds.
Protecting your account number (the number that actually matters)
While your routing number is safe to share, your account number is more sensitive. Do not volunteer it to strangers, and do not write it on envelopes or postcards. When you must provide it:
- Use a secure website (look for the padlock icon in your browser)
- Provide it only to companies you initiated contact with, not to companies that called or emailed you
- Never provide it in response to an unsolicited email or text message claiming to be from your bank
- Shred documents that contain your account number before throwing them away
If you are concerned about a company having your account number, you can contact your bank and ask them to monitor your account for unusual activity, or you can close the account and open a new one (though this is rarely necessary).
Frequently Asked Questions
Can someone use my routing number to set up a fake account in my name?
No. A routing number identifies your bank, not you personally. Someone would need much more information — your Social Security number, date of birth, address, and other identity details — to open an account in your name. A routing number alone cannot be used for identity theft.
Is it safe to put my routing number on a check?
Yes. Your routing number is already printed on every check you write, and it is visible to anyone who handles the check. This is standard and expected. The check itself is your authorization to withdraw the funds.
What if a company asks for my account number but I have not authorized them to withdraw money?
Do not provide it. If they need it for a legitimate reason — like setting up direct deposit or a bill payment you have decided to use — they will explain why. If you are unsure, hang up and call the company back using the phone number on your statement or their official website, not a number they provided.
Can my bank see who has my routing number?
No. Your bank has no way to track who knows your routing number, because it is public information. What your bank can see is every transaction on your account and who initiated it. If you spot a transaction you did not authorize, your bank can investigate who submitted it.
Do I need to worry if I gave my routing number to a website I am not sure about?
The routing number alone is not a security risk. If you are concerned about the website itself — whether it is legitimate, whether it stores information securely — that is a separate issue. But the routing number cannot be used to drain your account without your account number and authorization as well.