Do not send your bank account number by email, even to people or organizations you trust
Email is not encrypted by default, which means your message and everything in it—including your account number, routing number, and name—travels across the internet in plain text. Anyone with access to email servers along the way, or someone who gains access to your email account later, can read it. Once your account number is in an email, you cannot take it back or delete it from someone else's inbox.
This is different from giving your account number over the phone to your bank directly, or entering it on your bank's own website. Those are secure channels designed to protect financial information. Email is not.
Key Takeaways
- Email sends your account number in plain text that can be intercepted or read by anyone with access to email servers or accounts.
- Legitimate banks, government agencies, and businesses will never ask you to email your account number—they have secure methods instead.
- If you need to share your account number for a refund or payment, use your bank's secure message system, a phone call to a verified number, or an encrypted portal.
- If someone asks you to email financial information, verify their identity by calling the organization directly using a number from their official website or statement.
When someone asks you to email your account number, verify who is asking
Scammers often pose as banks, the IRS, insurance companies, or other organizations that legitimately need account numbers. They send emails that look official and ask you to reply with your information. A real organization will never ask you to email sensitive financial data.
If you receive a request to email your account number, do not reply to that email. Instead, look up the organization's phone number on an official document you already have—a bank statement, insurance card, or tax return—and call them directly. Ask whether they sent the email. If they did not, you have found a scam. If they did, ask them for a secure way to share your account number.
This step takes five minutes and prevents most account takeover fraud.
Secure methods to share your account number for refunds or payments
Your bank's secure message system is the safest option if you need to send your account number to your own bank. Log into your online banking account and look for "Messages," "Secure Mail," or "Contact Us." Send your message through that portal, not through regular email. Your bank can see the message only when you are logged in as yourself.
A phone call to a verified number works for refunds from the IRS, state tax agencies, insurance companies, and businesses. Call the organization using a number from their official website or from a bill or statement you received in the mail. Do not use a number from an email or text message. When you call, you can give your account number verbally to a real person, and the call is recorded on their end for security.
An encrypted online portal or secure form is what most large organizations now use. When you log into your account on their website, you may see a form to update payment information or request a refund. That form is encrypted, meaning the data is scrambled before it leaves your computer. If an organization offers this option, use it instead of email.
In-person at a bank branch is an option if you need to provide account information to a local business or organization. Bring a blank check or a bank statement showing your account number, and hand it to them directly. This creates a paper trail and avoids email entirely.
What to do if you already emailed your account number
If you sent your account number by email to someone you trust—your bank, your employer's payroll department, or a known business—contact them by phone and let them know. Ask them to confirm they received it and to delete the email. Most legitimate organizations have procedures for this and will not be alarmed.
If you sent it to someone you are not sure about, or if you suspect the email address was fake, contact your bank immediately. Call the number on the back of your debit or credit card. Tell them you sent your account number by email and ask them to monitor your account for unauthorized activity. Many banks can flag your account for extra scrutiny at no cost to you.
You do not need to close your account or take drastic action unless you see fraudulent charges. Monitoring is usually enough. If charges do appear, your bank can reverse them under fraud protection rules.
Red flags that an email asking for your account number is a scam
Legitimate organizations rarely need to ask for your account number by email because they already have it or can look it up another way. Watch for these warning signs: the email uses generic greetings like "Dear Customer" instead of your name; it creates urgency ("respond within 24 hours"); it asks you to click a link and enter information on a website that looks similar to the real one but has a slightly different web address; or it threatens to close your account or freeze your refund if you do not respond.
Another red flag is an email claiming to be from the IRS, Social Security Administration, or a government agency asking for your account number. These agencies do not contact people by email about refunds or payments. If you receive such an email, it is a scam.
If you are unsure whether an email is real, do not click any links in it. Instead, go directly to the organization's official website by typing the address into your browser, or call the phone number on an official document.
Why banks and government agencies have moved away from email
Over the past ten years, data breaches have exposed millions of account numbers that were stored in email systems. Banks and government agencies learned that email is not a safe place to keep financial information. Now they use encrypted portals, secure messaging systems within online accounts, and phone verification instead.
If an organization you have done business with for years suddenly asks you to email your account number, that is unusual. It may mean their email was compromised or that someone is impersonating them. Call them to check.
Frequently Asked Questions
Is it okay to email my account number if I use a password-protected email account?
No. A password protects your email inbox from someone guessing your login, but it does not encrypt the message itself as it travels to the recipient. The message is still readable by email servers and anyone with access to those servers. Password protection and encryption are different things.
What if a refund company or tax service asks me to email my account number?
Do not do it. Legitimate tax services and refund companies use secure portals or phone verification. If a company insists on email, call the IRS or your state tax agency directly to report it—it may be a scam. You can also report it to the Federal Trade Commission at reportfraud.ftc.gov.
Can I send my account number if I blank out some of the digits?
Partially hiding your account number does not make email secure. Someone can still see the full number if they intercept the email or access your account. Use a secure method instead.
Is it safer to email my account number to a Gmail or Outlook account instead of a business email?
No. The safety of email does not depend on which email provider you use. Gmail, Outlook, Yahoo, and business email systems all send messages in plain text by default. None of them are secure channels for financial information.
What should I do if my bank's website does not have a secure message system?
Call your bank directly using the number on the back of your card or on your statement. Giving your account number over the phone to a verified bank representative is secure. If your bank does not offer a secure portal or phone line, consider switching to a bank that does.