The short answer: not much without more information
A thief cannot drain your account with only your account number. They need your routing number and account number together to set up an unauthorized transfer, and even then most banks will reverse the charge if you report it quickly. The real risk is not a single number floating around—it is what someone can do once they have both numbers plus your name, and what happens if they use that combination to create fake checks or set up automatic withdrawals.
Your account number alone is printed on every check you write and sits on statements you may have thrown away. It is not a secret. Banks know this, which is why they built in layers of protection that require more than one piece of information to actually move money.
Key Takeaways
- A thief needs both your routing number and account number to attempt a transfer, not just one.
- Banks can reverse unauthorized ACH transfers (electronic transfers between accounts) within one to two business days if you report them.
- The bigger risk is someone using your account number plus your name to write fake checks or set up recurring bill payments without permission.
- Report any unauthorized transaction to your bank immediately—waiting more than 60 days can cost you the full amount.
- Freezing your credit does not protect your bank account, but monitoring your statements weekly does.
What a thief can do with both your routing and account numbers
If someone has your routing number and account number, they can attempt an ACH transfer (Automated Clearing House transfer)—the same system used for direct deposit and bill pay. They would need to set up the transfer through their own bank or a third-party service, and your bank would process it as a debit from your account.
This is where the protection kicks in. You have up to 60 days to report an unauthorized ACH transfer to your bank. Most banks will reverse it within one to two business days if you report it within the first 10 days. After 10 days, the window closes faster, but you still have recourse. The key is checking your statement regularly—weekly is better than monthly—so you catch unauthorized activity before the 60-day window closes.
Wire transfers are different and harder to reverse, but a thief cannot initiate a wire transfer with only your account and routing numbers. They would need to log into your online banking, which requires your username and password, or call your bank and pass security questions. Account number alone does not get them there.
Fake checks and unauthorized bill payments are the real threat
The more common risk is someone using your account number (which is printed on checks) to write checks in your name or to set up automatic bill payments without your permission. This happens because check processing is slower and less monitored than electronic transfers. A fake check can take days to clear, and by then the money is gone.
Unauthorized bill payments are set up through billers' websites—utilities, credit card companies, loan servicers. If a thief has your account number and knows your name and address (both easy to find), they can sometimes set up a payment without needing your password. The payment goes through, and you discover it when you check your statement.
Both of these are reversible, but only if you catch them. A bank can reverse a fraudulent check or bill payment if you report it within 30 to 60 days, depending on the type of transaction. After that, you may have to pursue the thief through small claims court or accept the loss.
How to protect yourself if your account number is compromised
Start by checking your bank statement every week, not once a month. Log into your online banking or call your bank—do not wait for the paper statement. Look for any transaction you do not recognize, no matter how small. Thieves sometimes test with a small charge first to see if it will go through.
If you find an unauthorized transaction, call your bank immediately. Do not email or use the online chat—call the number on the back of your debit card or on your statement. Tell them the transaction is unauthorized and ask them to reverse it. Write down the date, time, and name of the person you spoke to. Your bank will open a dispute and typically reverse the charge within one to two business days.
Consider setting up account alerts through your bank's app or website. Most banks let you set a threshold—for example, alert me if any transaction over $50 goes through. This gives you a heads-up the same day, not weeks later when you check your statement.
If you are worried about checks, you can request that your bank not issue new checks or put a flag on your account that requires a phone call to verify any check-writing activity. Some banks offer this for free; others charge a small fee.
What does not protect your bank account
Freezing your credit does nothing for your bank account. A credit freeze stops someone from opening new credit cards or loans in your name, but it does not prevent them from draining your checking account. The two are separate systems.
Shredding old statements helps, but it is not the main risk. Your account number is on every check you write and every statement you receive. The real protection is monitoring, not secrecy.
Changing your account number is an option, but most banks charge a fee ($25 to $50) and it is inconvenient if you have direct deposit or automatic bill payments set up. It is worth doing only if you know your account number has been compromised and used fraudulently, not as a preventive measure.
What to do if someone has already used your account number
Call your bank immediately. Have your statement in front of you and be ready to list every unauthorized transaction. Your bank will ask you to confirm which transactions are yours and which are not. Do not guess—only report the ones you are certain about.
Your bank will freeze your account or issue you a new debit card (or both) to stop further unauthorized activity. They will open a dispute for each fraudulent transaction. You will receive a temporary credit while they investigate, usually within one to two business days.
The investigation typically takes 10 business days. During that time, your bank will contact the other bank (if the thief used a different bank) or the merchant (if it was a bill payment) to recover the money. If they recover it, the temporary credit becomes permanent. If they do not, you keep the credit anyway—the loss falls on the other bank or the merchant, not on you.
Keep a record of every communication with your bank. Write down dates, times, names, and what was said. If the bank denies your dispute later, you will have documentation to back up your claim.
Frequently Asked Questions
Can someone open a bank account in my name with just my account number?
No. Opening a new account requires a government ID, Social Security number, and usually an in-person visit or video verification. Your account number alone is not enough. However, if someone has your name, address, and Social Security number, they can attempt to open an account, which is a different type of fraud.
What if I gave my account number to someone and now I am worried?
Monitor your statement closely for the next 60 days. Check weekly for any unauthorized transactions. If nothing appears, you are likely fine. If something does appear, report it to your bank immediately. You are protected by federal law (Regulation E) for unauthorized electronic transfers.
Is my account number the same as my debit card number?
No. Your debit card number is different from your account number. Your account number is printed on checks and statements. Your debit card number is the 16-digit number on the front of your card. A thief with your debit card number can make purchases, but they cannot drain your bank account directly—they would need your PIN for that.
How long do I have to report fraud before I lose the money?
You have up to 60 days from the date the unauthorized transaction appears on your statement. If you report it within 10 days, your bank will usually reverse it within one to two business days. After 60 days, you lose the right to dispute it and may have to pursue the thief through other means.
Should I close my account if my number has been compromised?
Not necessarily. Closing the account stops future fraud, but it does not undo past fraud. If you have direct deposit or automatic bill payments set up, closing the account creates more work. Instead, monitor closely and ask your bank to flag your account or issue a new debit card. Close the account only if fraud continues after you have reported it.