What a bank account number alone lets someone do
A bank account number by itself is not enough to drain your account or make purchases. Banks require additional information — usually your routing number, your name as it appears on the account, and often a signature or PIN — before they will move money out. A scammer with only your account number cannot log into your online banking, cannot use a debit card, and cannot authorize a wire transfer on their own.
What they can do is set up an automatic debit from your account if they also have your routing number and your permission (even if that permission was obtained through fraud). They can also use your account number to attempt ACH transfers — bank-to-bank electronic transfers — though most banks will reject these if the name on the receiving account does not match the name on your account. The real risk is not what they can do with the number alone, but what they can do once they have it combined with other pieces of information.
Key Takeaways
- Your account number alone cannot be used to log in, make purchases, or withdraw cash, because banks require additional verification.
- Someone with your account number and routing number can attempt ACH transfers or set up automatic debits, though most will fail if names do not match.
- The danger grows when your account number is combined with your name, address, or Social Security number — then someone can open new accounts or take out loans in your name.
- If you suspect unauthorized activity, contact your bank immediately and ask them to flag your account for fraud monitoring.
- You do not need to keep your account number secret in the same way you keep your password secret — it is printed on every check you write.
Why your account number is printed on every check you write
Banks print your account number on the bottom of every check because it is meant to be shared. When you pay a bill by check, you are handing someone your account number. When you set up direct deposit at work, you give your employer your account number and routing number. These are not secrets in the way your password or PIN are secrets.
This is why scammers need more than just your account number. They need your name, your address, or your Social Security number to do real damage. With only the account number, they are limited to attempts that your bank's fraud filters are already designed to catch — like trying to pull money from an account where the name does not match, or trying to set up a debit without authorization.
What happens when someone has your account number and routing number
If a scammer has both your account number and your routing number, they can attempt an ACH transfer — an electronic transfer from your bank to theirs. Most banks will reject this transfer if the name on the receiving account does not match the name on your account. Some banks are stricter than others, so the risk varies depending on your bank's fraud detection system.
They can also attempt to set up automatic recurring debits — like a fake utility bill or subscription — if they also have your permission or can forge it. Again, your bank should catch this if the company name does not match a legitimate business you do work with. The key word is "should" — fraud filters are not perfect, which is why monitoring your account matters.
Neither of these attacks works if your bank has your account flagged for fraud monitoring or if you have set up transaction alerts. If you suspect someone has your account number, contact your bank and ask them to watch for unusual activity.
The real risk: account number combined with personal information
Your account number becomes dangerous when it is combined with your name, address, date of birth, or Social Security number. With that combination, someone can open a new bank account in your name, take out a loan, or apply for credit cards. This is identity theft, not just account fraud, and it is much harder to undo.
This is why data breaches are so serious — they do not just expose your account number, they expose your account number plus your name, address, and sometimes Social Security number all at once. A single piece of information is manageable. All of it together is a toolkit for fraud.
If you have been part of a data breach, you can place a fraud alert or credit freeze with the three credit bureaus (Equifax, Experian, and TransUnion). This makes it harder for someone to open new accounts in your name, even if they have all your information.
How to respond if you think your account number has been compromised
Call your bank immediately — not the number on the back of your card, but the number on your statement or the bank's official website. Tell them you suspect your account number may have been compromised and ask them to monitor your account for unusual activity. Most banks can flag your account for enhanced fraud monitoring at no cost to you.
Ask your bank whether they recommend closing your account and opening a new one. Some banks will do this for free if fraud is suspected. If you close the account, make sure to update your direct deposit, automatic bill payments, and any other services that use that account number.
Check your account statements for the past 30 to 60 days for any transactions you do not recognize. If you find unauthorized activity, report it to your bank in writing (email or secure message through your online banking portal) so there is a record. Federal law limits your liability for unauthorized electronic transfers to $50 if you report them within 60 days, and many banks offer stronger protections than that.
When you should and should not share your account number
You should share your account number when you are setting up direct deposit, paying bills by check, or receiving a wire transfer from someone you trust. You should also share it when a business you initiated contact with asks for it — like your employer, your insurance company, or a utility you are signing up for.
You should not share your account number in response to an unsolicited email, text, or phone call, even if the sender claims to be from your bank. Your bank will never ask for your account number via email or text. If someone calls claiming to be from your bank and asks for your account number, hang up and call your bank directly using the number on your statement.
You should also be cautious about sharing your account number on public websites or in public forums. While the number alone is not enough to cause damage, it is one piece of a larger puzzle.
How banks protect accounts from unauthorized access
Banks use several layers of protection to prevent unauthorized transfers. ACH transfers require matching names on both accounts. Wire transfers require additional verification, usually a phone call or in-person confirmation. Debit card transactions require a PIN or signature. Online banking requires a password and often a second factor like a code sent to your phone.
These protections exist because banks know that account numbers circulate. They are designed to stop fraud even when someone has your account number. This is also why your bank's fraud department can usually reverse unauthorized transfers within a few days if you report them quickly.
Different banks have different levels of protection, which is why it matters to choose a bank with strong fraud monitoring and to set up transaction alerts on your account. Many banks let you set alerts for any transaction over a certain amount, or for any transaction at all.
Frequently Asked Questions
Can someone use my account number to open a new bank account in my name?
Not with just your account number — they would also need your name, address, date of birth, and usually your Social Security number. If you suspect this has happened, place a fraud alert with the credit bureaus and check your credit report for accounts you do not recognize.
What if someone has my account number and routing number but not my name?
They can attempt an ACH transfer, but most banks will reject it because the name on the receiving account will not match. The risk is low unless they also obtain your name through another source.
Do I need to close my account if someone has my account number?
Not necessarily. Call your bank first and ask them to monitor your account for fraud. Many banks can catch unauthorized activity without you having to close the account. Close it only if your bank recommends it or if you see unauthorized transactions that keep happening.
Is my account number the same as my debit card number?
No. Your account number is printed on the bottom of your checks and is used for bank-to-bank transfers. Your debit card number is different and is printed on the front of your card. Someone with your account number cannot use your debit card.
What should I do if I see a transaction I did not make?
Contact your bank immediately by phone or through your secure online banking portal. Report the transaction as unauthorized and ask your bank to reverse it. Federal law limits your liability to $50 if you report within 60 days, though many banks offer better protection.