The short answer: it depends on who is asking and why
Giving out your bank account number is safe when you are sending money to someone you trust or receiving a legitimate payment from a known source — your employer, a government agency, a business you do regular work for. It is not safe when a stranger calls you, texts you, or emails you asking for it, even if they claim to represent your bank, the IRS, or a refund program. The difference comes down to whether you initiated the contact or they did.
Your account number alone cannot drain your account. A thief needs your account number and your routing number and permission to withdraw money — usually in the form of an ACH (automated clearing house) authorization. But once someone has all three pieces and your permission, they can pull money out repeatedly until you stop them. That is why the rule is simple: you give your number out, never receive it when someone else asks.
Key Takeaways
- Your account number by itself does not let someone take money from your account; they also need your routing number and authorization to withdraw funds.
- It is safe to provide your account and routing numbers when you start the contact — paying a bill, setting up direct deposit, or sending a wire transfer you initiated.
- Never give out your account number if someone contacts you first, even if they claim to be from your bank, the IRS, or a government program.
- If you have already given your account number to someone suspicious, contact your bank immediately and ask them to watch for unauthorized withdrawals.
- Refund programs, tax agencies, and legitimate businesses will never call or text asking for your account number; they will ask you to log into a secure portal or mail a form.
When it is safe to give out your account number
You can safely share your account number when you are the one who started the conversation. This includes setting up direct deposit with your employer, paying a bill online through your bank's website, sending a wire transfer, or authorizing a regular payment to a utility or subscription service. In these cases, you control the transaction and can see exactly what is being charged.
Government agencies and refund programs also need your account number to send you money — tax refunds, stimulus payments, unemployment benefits, insurance refunds. But they do not ask for it over the phone or by email. Instead, they ask you to enter it on a secure website (one that starts with https:// and shows a lock icon) or to mail a signed form. If you are waiting for a refund and the agency needs your account number, you will see a prompt on their official website when you log in, not a message asking you to call back.
Legitimate businesses you work with regularly — a contractor, a client who pays you, a lender — can also receive your account number safely. The key is that you know who they are, you have worked with them before, and you are the one who decided to share it.
When it is never safe to give out your account number
Do not give your account number to anyone who contacts you first. This includes phone calls, text messages, emails, or social media messages. Even if the person claims to be from your bank, the IRS, a refund program, or any government agency, the answer is no. Real organizations do not ask for account numbers this way.
Scammers use urgency and authority to pressure you into sharing. They might say your account has been compromised, a refund is waiting, you owe taxes, or your benefits are about to stop. They might use a spoofed phone number that looks like it is coming from a real bank or agency. None of this changes the rule: if they called you, texted you, or emailed you without you asking them to contact you, do not give them anything.
This also applies to refund tracking websites, apps, or services that claim to speed up your refund or help you find money owed to you. If a website is asking for your account number before you have logged in with your own credentials, it is not legitimate. Real government portals require you to verify your identity first — usually with a password, security questions, or a code sent to your phone.
What happens if you have already shared your account number
If you gave your account number to someone you now suspect is a scammer, contact your bank immediately. Call the number on the back of your debit card or the number on your bank statement — not a number the person gave you. Tell them you may have shared your account number with someone unauthorized and ask them to monitor your account for suspicious activity.
Your bank can flag your account, watch for unauthorized ACH withdrawals, and stop payments if they spot fraud. They can also issue you a new account number and debit card if needed. The sooner you call, the sooner they can start watching.
If money has already been taken, file a dispute with your bank right away. Most banks cover unauthorized ACH withdrawals if you report them within a certain window — usually 60 days. Keep records of all your communications with the scammer and with your bank. If the fraud involves a refund program or government payment, also file a report with the Federal Trade Commission at reportfraud.ftc.gov.
How scammers use your account number
A scammer with your account number and routing number can set up an ACH withdrawal from your account. ACH is the system banks use to move money between accounts — it is how direct deposit works, how you pay bills online, and how refunds are sent. Once someone has authorization to pull money via ACH, they can take money repeatedly until you stop them.
They might pose as a refund program and say they need your account number to send you money, then turn around and pull money out instead. They might claim to be verifying your account and ask for your number, then use it to set up unauthorized payments. Some scammers will even send you a small deposit first to make the account look legitimate, then pull out a much larger amount.
The good news is that ACH fraud is reversible. Your bank can reverse unauthorized withdrawals, and you are protected by federal law. But it takes time to investigate and recover the money, so prevention — not giving your number out in the first place — is much easier than cleanup.
Red flags that someone should not have your account number
Be suspicious if someone is asking for your account number and any of these are true: they called you without you asking them to; they are pressuring you to decide quickly; they claim there is a problem with your account that needs immediate fixing; they say they cannot help you unless you give them the number right now; they are asking you to keep it secret from your bank; they are offering you money you did not expect; they are asking you to verify information you already gave them.
Also be suspicious if the website or app asking for your account number does not have a secure login of your own. Real government portals and banks require you to create an account, set a password, and prove who you are before you can enter sensitive information. If you can enter your account number without logging in first, it is not a legitimate site.
How to check if a refund program or agency is real
If someone claims to represent a refund program or government agency, verify them yourself before sharing anything. Do not use contact information they gave you. Instead, go to the official website directly — type the URL into your browser yourself, do not click a link they sent you — and look for a phone number or secure message portal there.
For tax refunds, go to irs.gov and use the "Where's My Refund?" tool. For stimulus payments, go to irs.gov/coronavirus and look for the payment tracker. For unemployment benefits, go to your state's labor department website. For insurance refunds, contact your insurance company directly using the number on your policy. For other government programs, search "[program name] official website" and call the number listed there.
When you call or log in yourself, you can ask them whether they need your account number and how they will use it. They will tell you whether to enter it on a secure portal, mail a form, or provide it over the phone during a call you initiated. This way, you know you are talking to the real organization.
Frequently Asked Questions
Can someone steal money with just my account number?
Not without your routing number and authorization to withdraw funds. Your account number alone is not enough. But if someone has all three pieces, they can set up ACH withdrawals. That is why you should never give your account number to someone who contacts you first.
Is it safe to give my account number to my employer for direct deposit?
Yes. You are initiating the setup, you control the transaction, and direct deposit is a standard, secure way to receive paychecks. Your employer needs both your account and routing number to set this up, and it is safe to provide both.
What if a refund program says they need my account number to send me money?
Legitimate refund programs will ask you to enter your account number on their secure website after you log in, not over the phone or email. If someone is calling or emailing asking for it, it is a scam. Go to the official website yourself and check whether they actually need it.
Should I give my account number to a website that says it will find unclaimed money for me?
No. Legitimate unclaimed money databases (like your state's treasurer office) do not ask for your account number upfront. They ask you to search for your name, then contact you if money is found. Any site asking for your account number before you have verified your identity is not legitimate.
What should I do if I gave my account number to someone over the phone?
Call your bank immediately using the number on your debit card or bank statement. Tell them you may have shared your account number with someone unauthorized. Ask them to monitor your account and watch for suspicious withdrawals. They can also issue you a new account number if needed.