The short answer: only with people and organizations you trust completely, and only when you control what they can do with the account.
Sharing your bank account details—your account number, routing number, or online login—creates real risk. Someone with this information can withdraw money, set up automatic payments you didn't authorize, or use it to commit fraud in your name. The safest rule is: don't share unless you have a specific reason and you know exactly what access the other person will have.
The difference between safe and unsafe sharing comes down to control. When you authorize a single payment or set up a trusted payee through your bank's system, you stay in control. When you hand over your login credentials or full account number to someone, you lose control. That gap is where problems start.
Key Takeaways
- Your bank account number and routing number are safe to share for legitimate payments like direct deposit or bill pay, but your online login credentials should never be shared with anyone.
- Authorized users and power of attorney holders can access your account, but only add people you trust completely and understand the legal difference between the two.
- If someone asks for your login information, account number, or card details over email, text, or phone, assume it's a fraud attempt unless you initiated the contact.
- If you've already shared account details with someone you no longer trust, contact your bank immediately to freeze the account, change your password, and review recent transactions.
What's actually safe to share and what isn't
Your account number and routing number are designed to be shared. Employers need them for direct deposit. Creditors need them to set up automatic bill payments. Your landlord may need them to collect rent. These numbers alone cannot be used to log into your account or make unauthorized transfers—your bank requires additional verification.
Your online login credentials—username, password, security questions, or one-time codes—should never be shared with anyone, including bank employees, family members, or customer service representatives. Your bank will never ask you to provide your password. If someone asks for it, they are attempting fraud.
Your debit card number, expiration date, and CVV are safe to share only with merchants you trust for a specific purchase. Don't share these details via email or text. Use them only on secure websites (look for the padlock icon) or in person.
Your full account details—including your name, address, and account number together—can be used to open new accounts or take out loans in your name. Share these only with your employer, your bank, or organizations you've initiated contact with.
Authorized users versus power of attorney: what each person can do
If you want to give someone ongoing access to your account without sharing your login, you have two legal options, and they work very differently.
An authorized user is someone you add to your account through your bank. They receive their own debit card and can make withdrawals, deposits, and transfers. They can see your full account history. They have nearly the same access you do. Use this only for people you trust completely—typically a spouse, adult child, or caregiver. You can remove an authorized user at any time by contacting your bank.
A power of attorney is a legal document that gives someone the right to act on your behalf for financial decisions. It's more formal than adding an authorized user and can be limited in scope—for example, you can grant power of attorney only for paying bills, or only while you're incapacitated. You'll need to sign the document in front of a notary. A power of attorney can be revoked, but the process is more involved than removing an authorized user.
Both options require you to trust the person completely. Neither should be used as a shortcut to avoid sharing your password. If you're considering either, talk to your bank about which option fits your situation.
How to recognize when someone is asking for account details fraudulently
Scammers use urgency, authority, and confusion to trick you into sharing account information. Here are the most common tactics:
The impersonation: Someone claims to be from your bank, the IRS, or a utility company and says there's a problem with your account. They ask you to "verify" your account number, routing number, or login details. Real organizations will never ask you to verify information by providing it over the phone or email. If you're unsure, hang up and call your bank directly using the number on your statement.
The emergency: A family member or friend claims they need money urgently and asks you to send it to their account, or they ask for your account number so they can "deposit money" for you. Legitimate transfers don't require you to share your login or full account details.
The job offer or prize: Someone says you've won money or been hired, and they need your account number for "direct deposit" or to "process your winnings." Legitimate employers and contests don't ask for account details before you've completed an application or claimed a prize in person.
The tech support call: Someone claims your computer has a virus or your account has been hacked and offers to fix it remotely. They ask you to share your screen or provide your login information. Hang up immediately. Your bank will not call you unsolicited to fix technical problems.
What to do if you've already shared your account details with someone you don't trust
If you've given your login credentials, full account number, or card details to someone and now realize it was a mistake, act quickly. The faster you move, the more you can protect.
First, contact your bank immediately—by phone, using the number on your statement, not a number the person gave you. Tell them you may have shared account information and ask them to review your account for unauthorized activity. Ask them to change your password and security questions on the spot while you're on the phone.
Second, review your recent transactions carefully. Look for withdrawals, transfers, or automatic payments you didn't authorize. If you find any, report them to your bank right away. Your bank has procedures for disputing unauthorized transactions, and you're typically protected from liability if you report them within a certain timeframe (usually 60 days).
Third, consider freezing your account temporarily if you're concerned about ongoing fraud. Your bank can place a hold on the account so no new transfers or withdrawals can be made without your direct approval. This is a temporary measure while you sort out what happened.
Fourth, monitor your credit for the next several months. Check your credit report through AnnualCreditReport.com (the only free, official source). If someone used your information to open new accounts or take out loans, you'll see it there. You can also place a fraud alert with the three credit bureaus—Equifax, Experian, and TransUnion—which makes it harder for someone to open accounts in your name.
Safe ways to send money to someone else
If you need to send money to someone and you're worried about sharing your account details, use a payment method that doesn't require it.
Peer-to-peer payment apps like Venmo, PayPal, Square Cash, or Zelle let you send money using only the recipient's phone number or email address. You don't share your account number or login. The recipient receives the money in their own account. These apps are generally safe for small, personal transfers between people you know.
Wire transfers through your bank are secure if you initiate them yourself. You provide the recipient's account number and routing number to your bank, and your bank handles the transfer. You don't share your own login or password. Wire transfers are slower than apps but safer for larger amounts.
Checks are still a valid option if you want to avoid sharing account details entirely. The recipient gets your routing number and account number from the check, but they can't access your account or make withdrawals—they can only deposit the check.
Money orders or cashier's checks from your bank are anonymous from the recipient's perspective. You don't share any account information at all. These cost a small fee but are useful if you don't want the recipient to know your banking details.
What happens if someone uses your account details without permission
If someone makes unauthorized transactions using your account information, you have legal protections, but the timeline matters.
Under federal law, if you report unauthorized transactions within two business days of discovering them, your liability is capped at $50. If you report within 60 days, your liability is capped at $500. If you wait longer than 60 days, you may be liable for the full amount of unauthorized transactions.
Report unauthorized activity to your bank by phone first, then follow up in writing. Keep copies of everything—your written report, the bank's response, transaction records, and any correspondence. Your bank will investigate and typically issue a provisional credit while they look into it. The investigation usually takes 10 business days, though complex cases can take longer.
If the unauthorized activity involves your debit card specifically, you have additional protections under the Electronic Funds Transfer Act. Contact your bank's fraud department, not just customer service, to make sure your claim is handled correctly.
Frequently Asked Questions
Is it safe to give my account number to my employer for direct deposit?
Yes. Your employer needs your account number and routing number to set up direct deposit, and that's a legitimate use. They cannot access your account, make withdrawals, or see your balance with just these numbers. Your bank requires additional authentication for any account access.
What if my bank calls me and asks for my account number to verify my identity?
Don't provide it. Legitimate banks verify your identity using information only you would know—your mother's maiden name, the last four digits of your Social Security number, or recent transactions. If someone claiming to be from your bank asks for your full account number or password, hang up and call your bank directly using the number on your statement.
Can I give my account details to a family member I trust?
You can, but there's a safer way. Instead of sharing your login or account number, add them as an authorized user through your bank or set up a power of attorney. This gives them access without you having to share credentials, and you maintain legal control over what they can do.
What if I accidentally shared my account number in a text or email?
Contact your bank immediately. Your account number alone is lower risk than your login credentials, but it's still worth reporting. Ask your bank to monitor your account for suspicious activity and change your security questions. Review your transactions regularly for the next few months.
Is it safe to use my bank account for online shopping?
It depends on the website. Use your debit card or account number only on secure websites with a padlock icon in the address bar. Never enter your account details on a website you reached through an email link or text message. If you're unsure about a site's security, use a credit card or payment app instead—they offer more fraud protection than debit cards.