When You Can Share Your Bank Account Details—and When You Shouldn't

Sharing your bank account details is safe only when you initiate the transfer and control the transaction

You can share your account and routing number to receive deposits—direct deposit from an employer, tax refunds, or payments from someone who owes you money. The person on the receiving end cannot withdraw funds or make charges without your explicit permission and signature. However, sharing your full account details with someone you do not trust, or in response to a request you did not make, is how most account fraud and unauthorized withdrawals happen. The rule is simple: you control when money leaves your account, not the other person.

Your account number and routing number are not secret in the way your password or PIN is. They appear on every check you write and are meant to be shared for deposits. The real protection comes from the fact that taking money out requires authorization—either your signature on a form, your written consent, or access to your login credentials that you should never give away.

Key Takeaways

• Your account and routing number alone cannot be used to withdraw money—the person needs your permission, your signature, or access to your online login.
• Sharing details to receive deposits (payroll, refunds, payments owed to you) is safe because you are not giving anyone the power to take money out.
• Never share your account details in response to an unsolicited call, email, or text, even if the sender claims to be from your bank or the IRS.
• If someone asks for your account details to "verify" your identity or "confirm" your account, they are attempting fraud—your bank already knows your account number.
• If unauthorized money leaves your account, report it to your bank within 60 days to recover the funds under federal fraud protection rules.

What someone can and cannot do with just your account number

Knowing your account and routing number does not give someone the power to drain your account. To move money out, they need one of three things: your written authorization (a signed check or ACH authorization form), access to your online banking login, or a court order. A scammer who has only your account number cannot set up a transfer or withdrawal on their own.

This is why direct deposit is safe. Your employer deposits your paycheck using your account and routing number, and they cannot take money back out. The same applies when you give your details to a utility company to set up automatic bill pay—they can only debit the amount you authorized on the schedule you chose. If they try to take more, or take money when you did not authorize it, that is fraud, and your bank will reverse it.

The danger comes when you sign something. A blank check with your signature gives the person who holds it the power to fill in any amount and deposit it into their own account. An ACH authorization form—a document that says "I authorize [person/company] to debit my account for [amount] on [date]"—is equally powerful. Once you sign it, you have given them legal permission to pull money out. Read before you sign, and never sign a blank form.

When sharing your details is safe

Share your account and routing number when you are the one asking for the money to come in. This includes:

• Direct deposit from your employer or a government agency (tax refund, Social Security, unemployment benefits).
• Reimbursement from someone who owes you money—a friend paying back a loan, a business reimbursing you for an expense, an insurance company sending a claim payment.
• Automatic bill pay you set up yourself with a utility, credit card company, or loan servicer, where you control the amount and the date.
• A wire transfer or ACH transfer you initiate through your own bank to move money to another account you own or to a trusted recipient.

In all these cases, you are controlling the transaction. You decided the money should move, you chose the amount, and you chose the timing. The other person is following your instructions, not acting on their own. Before you share, confirm you are using the official website or phone number of the organization—not a link from an email or a number from a text message.

Red flags: when someone is trying to commit fraud

Do not share your account details if someone contacts you first and asks for them. This includes calls, emails, texts, or social media messages. Legitimate banks, the IRS, and government agencies do not ask for your account number over the phone or email. If someone claims to be from your bank and needs to "verify" your account, hang up and call your bank directly using the number on your statement or their official website. Your bank already has your account number—they are not trying to confirm it.

Common fraud scenarios include:

• A caller claiming to be from your bank, saying there is suspicious activity and asking you to "verify" your account details.
• An email or text claiming you won a prize, a tax refund, or a government benefit, and asking for your account number to deposit the money.
• Someone offering to pay you for something (a job, a sale, a loan) and asking for your account details upfront, before any work or goods are delivered.
• A request to share your login credentials or one-time password (OTP) so someone can "help" you access your account or "speed up" a deposit.

If you are unsure whether a request is real, contact your bank using the phone number on your card or statement. Do not use a phone number from the email or text that contacted you.

What to do if money leaves your account without your permission

If you see a withdrawal or transfer you did not authorize, contact your bank immediately. Federal law (Regulation E) protects you if you report the fraud within 60 days of the statement date when the unauthorized transaction appeared. Your bank must investigate and return the money while they look into it, though the timeline varies—most banks credit your account within 10 business days for obvious fraud, and up to 45 days if the investigation is complex.

When you call, have your statement ready and be specific: the date of the transaction, the amount, and whether you recognize the recipient or the company name. If the fraud came through an ACH debit (a withdrawal from your account), you can also file a dispute with your bank's ACH department, which has separate timelines and recovery rules. If the money went out as a wire transfer or check, recovery is harder and slower—wire transfers especially are difficult to reverse because they move to another bank immediately.

After your bank reverses the fraud, ask them to flag your account for monitoring and consider placing a fraud alert with the credit bureaus (Equifax, Experian, TransUnion). A fraud alert tells creditors to verify your identity before opening new accounts in your name. You can place a fraud alert for free by contacting any one of the three bureaus, and they will notify the others.

Protecting yourself when you do share your details

If you are sharing your account number for a legitimate reason—setting up direct deposit, paying a bill, or receiving a refund—take these steps to stay safe:

• Only share with organizations you contacted first, not ones that contacted you.
• Use official websites or phone numbers from your statement, not links from emails or texts.
• Never share your full login credentials, password, or one-time codes. Your bank will never ask for these.
• Keep a record of what you authorized: write down the company name, the date you authorized it, the amount, and the frequency (one-time or recurring).
• Review your bank statement every month and report anything you do not recognize within 60 days.

If you are setting up automatic bill pay or a recurring ACH debit, start with a small test transaction if possible. This confirms the account details are correct and that the company is legitimate before you authorize a full payment. Many companies will send you a confirmation email or letter showing what you authorized—keep these records in case you need to dispute a charge later.

Frequently Asked Questions

Can someone use my account number to open a credit card or loan in my name?

Not with just your account number. To open credit in your name, they need your Social Security number, date of birth, and address—and usually a hard inquiry on your credit report, which you can see. However, if a scammer has your account number and other personal information, they may try to use it as proof of identity. Monitor your credit report through AnnualCreditReport.com and place a fraud alert with the credit bureaus if you suspect identity theft.

Is it safe to give my account details to a friend or family member?

Your account and routing number alone are safe to share. However, never give your login credentials, debit card number, or PIN to anyone, even family. If you want someone to help you pay a bill or manage money, set up a limited power of attorney through your bank, which gives them specific authority without full access to your account.

What if I gave my details to someone and now I am worried?

Monitor your account closely for the next 60 days. Check your statement weekly and set up account alerts through your bank's app so you are notified of every transaction. If you see anything unauthorized, report it immediately. You are protected by federal law as long as you report within 60 days of the statement date.

Do I need to close my account if someone has my account number?

Not necessarily. Your account number alone is not enough to steal money. However, if you are concerned, you can ask your bank to issue a new account number and close the old one. This is free and takes a few days. Closing is worth doing if the person who has your number is someone you no longer trust or if you suspect they may try to commit fraud.

Can a company charge my account without a signed authorization?

No. To debit your account, a company needs a signed ACH authorization form or a signed check from you. If they charge you without authorization, report it to your bank as an unauthorized ACH debit. Your bank will reverse it and investigate. If it happens repeatedly, you can file a complaint with the Consumer Financial Protection Bureau (CFPB).