Someone cannot withdraw money or make charges using only your account number
A bank account number by itself is not enough to move money out of your account. Banks require additional information — usually a routing number, your name, and proof you authorized the transaction — before they process any payment. Someone who has only your account number cannot log into your account, cannot initiate a transfer, and cannot authorize a withdrawal.
That said, your account number is sensitive information. It appears on every check you write, on deposit slips, and on statements. Treat it the way you treat other identifying details: do not post it publicly, do not text it to people you do not know, and do not include it in emails to unverified addresses. The risk is not that someone steals money directly, but that they use it as one piece of a larger fraud scheme.
Key Takeaways
- Your account number alone cannot be used to withdraw money, make online transfers, or charge your account without additional verification.
- Banks require a routing number, your name, and authorization proof before processing any payment from your account.
- Your account number is still sensitive because it can be combined with other information to commit fraud or open unauthorized accounts.
- ACH transfers and wire transfers do require an account number, but they also require explicit authorization and often take one to three business days to process.
- If you see unauthorized activity on your account, contact your bank immediately — federal law limits your liability if you report it within 60 days.
What fraudsters can actually do with your account number
Someone with your account number and routing number can set up an ACH transfer — an electronic bank-to-bank transfer. However, they cannot do this without your authorization. ACH transfers require a signed form or documented consent, either on paper or through your bank's online portal. If someone initiates an ACH transfer without your permission, it is unauthorized and your bank can reverse it.
A fraudster might also use your account number to attempt a direct debit — a recurring charge from your account. Again, this requires your authorization. If a company tries to set up a direct debit without your consent, you can dispute it with your bank and have it stopped. Your bank is required to investigate if you report it within 60 days.
The more realistic risk is that someone uses your account number as part of a larger identity theft scheme. They might combine it with your name, address, and Social Security number to open a fraudulent account in your name, apply for credit, or file a false tax return. The account number is one piece of the puzzle, not the whole picture.
How banks verify authorization before moving money
When you set up a transfer or authorize a payment, your bank follows a chain of verification. For online transfers, you log in with your username and password — something only you should know. For ACH transfers initiated by a third party (like a utility company), you sign a form or provide written consent. For wire transfers, you typically call the bank or visit in person and provide photo ID.
If someone tries to move money from your account without going through these steps, the transaction will be rejected. Your bank's system is designed to catch unauthorized activity. If a fraudster somehow bypasses these controls — through phishing, malware, or social engineering — your bank is liable for the loss under federal law, provided you report it within 60 days.
Some banks also use additional security layers: two-factor authentication, transaction alerts, spending limits, and fraud detection software. The more security your bank uses, the harder it is for someone to move money without your knowledge.
What to do if you see unauthorized charges or transfers
Contact your bank immediately if you notice any transaction you did not authorize. Do not wait. Call the number on the back of your debit card or the number listed on your bank statement — not a number you find online, which might be fraudulent. Tell the bank representative that you want to report unauthorized activity and dispute the charge.
Your bank will freeze the disputed transaction and open an investigation. This usually takes 10 business days, though complex cases can take up to 45 days. During the investigation, your bank will contact the merchant or the other bank involved and ask for proof of authorization. If they cannot find it, the money goes back into your account.
Federal law (Regulation E) protects you if you report unauthorized activity within 60 days of the statement date. If you wait longer, your liability increases and your bank may not be able to recover the money. Keep records of every communication with your bank — the date, time, name of the representative, and what was discussed.
Protecting your account number from misuse
Your account number appears on checks, deposit slips, and bank statements. Anyone who handles these documents can see it. This is normal and unavoidable — you have to give your account number to your employer for direct deposit, to your landlord for rent payments, and to utility companies for automatic billing.
What you should avoid: posting your account number on social media, texting it to unknown numbers, or including it in emails to unverified addresses. Do not give your account number to someone who calls you claiming to be from your bank — legitimate banks never ask for this information over the phone. If you are unsure whether a caller is real, hang up and call your bank directly using the number on your card.
If you lose a checkbook or suspect your account number has been compromised, contact your bank and ask them to monitor your account for suspicious activity. Some banks will issue you a new account number, though this is rare and usually only done if fraud has already occurred.
The difference between account number and routing number
Your account number identifies your specific account at your bank. Your routing number identifies the bank itself. Together, they form the information needed for ACH transfers and direct deposits. However, neither one alone is enough to move money.
Your routing number is public information — it appears on checks and is published online by the Federal Reserve. Your account number is more sensitive because it is unique to you. But again, someone needs both numbers plus authorization to move money. If you have given your routing number and account number to a legitimate company (like your employer or a utility), that is normal and safe.
When your account number is shared with legitimate businesses
You will need to share your account number with your employer for direct deposit, with your landlord or mortgage lender for rent or mortgage payments, with utility companies for automatic billing, and with your bank for transfers between your own accounts. These are all safe transactions because you are authorizing them.
Before you share your account number with any business, make sure you are dealing with a legitimate company. Verify the website URL, call the company using a phone number from their official website, and never share your account number in response to an unsolicited email or phone call. Scammers often impersonate utility companies, government agencies, and banks to trick people into sharing account information.
Frequently Asked Questions
Can someone use my account number to open a new bank account in my name?
No, not with just your account number. To open a new account, a fraudster would need your name, address, date of birth, and Social Security number. Your account number alone is not enough. However, if someone has all of this information, they can commit identity theft. Monitor your credit report and watch for accounts you did not open.
What if someone has my account number and routing number?
They still cannot move money without authorization. ACH transfers and direct debits require your signed consent or documented permission. If someone tries to set up either without your approval, report it to your bank immediately. Your bank can stop the transaction and reverse any charges.
Is it safe to write my account number on a check?
Yes. Your account number appears on every check you write, and this is normal. Anyone who receives a check from you can see your account number. This is why you should only write checks to people and businesses you trust. Do not mail blank checks or checks with large amounts to unknown recipients.
How long does it take to reverse an unauthorized transfer?
Your bank will typically investigate within 10 business days and resolve the dispute within 45 days. During this time, the money may be returned to your account temporarily. If the investigation finds the transfer was unauthorized, the money stays in your account. If it finds you authorized it, the money goes back to the other party.
What should I do if I accidentally shared my account number with a scammer?
Contact your bank immediately and tell them you may have shared your account number with an unauthorized person. Ask them to monitor your account for suspicious activity and consider changing your online banking password. Watch your statements closely for the next 60 days. If you see unauthorized charges, report them right away.