What can someone do with your bank account number?

If a scammer only has your bank account number and nothing else, it’s unlikely that they can steal your money directly. Still, they might try to use that information in phishing scams or other tricks to get more sensitive details from you.

From unauthorized ACH withdrawals to social engineering schemes, your money and identity could be at risk if your savings or checking account number falls into the wrong hands. Fortunately, taking a few smart precautions can make you much harder to target.

Keep reading to find out what a scammer can actually do with your bank account number, when to be extra careful, and how to share your information safely.

Set up unauthorized ACH withdrawals

A scammer can set up unauthorized Automated Clearing House (ACH) withdrawals without your permission. ACH withdrawals are electronic transfers that many consider to be a safe way to move funds from one account to another. Someone usually needs both your account and routing number to do this.

Scammers can target your account and routing numbers through a social engineering scheme, pretending to be your bank, a friend, or a family member to get you to verify or confirm a transfer. Once they have your banking information, they can easily withdraw your money.

Cybercriminals also use wire transfers to steal money. Unlike ACH transactions, which often take 1-2 business days and can be reversed, wire transfers move funds instantly and permanently, making recovery nearly impossible once the money’s sent. That’s why scammers often pose as landlords or vendors, sending fake “updated wire instructions” that direct your payment to their account.

Wire transfers require more information, such as the bank name and branch address, the recipient’s full name, and the SWIFT code or Fedwire number, which can also make them harder for scammers to pull off without social engineering.

Set up unauthorized recurring payments

Scammers can set up unauthorized recurring payments through fake merchant accounts or subscription services if they have access to your bank account number (and usually routing number). Many services only ask for these numbers to set up recurring payments.

Scammers might also sign up for fake subscriptions or register as a vendor and pull transfers from your account, and the money could be gone before you notice. They might start with a small unauthorized debit that’s not more than a few dollars as a test before trying larger pulls. That’s why it’s important to regularly check your account statements and activity logs, and set up manual payment authorization on payments over a certain amount. Oftentimes, payment authorizations can be set up using your banking app.

Create identity theft “building blocks”

A bank account number combined with your name, date of birth, or Social Security number gives cybercriminals enough sensitive data to impersonate you and commit identity theft.

Once they have more of your personally identifiable information (PII), they can open new credit cards or loans in your name. Some scammers use other types of fraud, such as filing phony tax returns, and routing the refund to a bank or mailing address of their choosing. They might even set up fake utility or phone accounts, then use those accounts to prove your identity when applying for more credit or larger loans.

Use in social engineering scams

Hackers can use your bank account number in social engineering scams as “proof” to get you to lower your guard. Someone may call you or send a fake email pretending to be your bank or a trusted company, then drop your account number into the conversation. Your account number lends a sense of legitimacy to the communication so you’ll be more likely to hand over other sensitive data.

Scammers can also pretend to be you when calling other businesses. Using your account number, along with a few basic pieces of personally identifiable information, they may try calling a utility company or payroll department and request an update to the payment details. If your details match what the business has on file, they’re more likely to comply.

Print fake checks

Fraudsters can use your bank account and routing numbers to print realistic fake checks that appear to come from your account. They’ll use your information and create counterfeit checks with a fake payee and signature. Criminals can then cash those checks at another bank or ATM, and they might withdraw the money before the bank discovers the check is fraudulent.

Some scammers wash real checks, too. They’ll chemically remove the payee and amount from a legitimate check, rewrite it, and reroute the funds. Others intercept mailed payroll or refund checks and replace them with fakes that look like they came from you.

Scammers may also send you a fake check to deposit. The check is typically for more than what is owed, and once the check clears, you’re asked to wire part of the money back. The bank may make the funds available quickly, but if the check is found to be fake, you may be held liable. It’s best to never send money back after depositing an unsolicited check.

Launch money laundering schemes

If scammers have your bank account number, they can slip illegally sourced funds into your account under the guise of making a mistake, then contact you to have you send the money back. In reality, they’re using you as a middle man to cover your tracks.

Sometimes, cybercriminals actively recruit money mules to accept deposits, or they may forward the money using a job posting to find unknowing participants.

For example, this job scam victim on Reddit posted about getting "sucked into a money laundering scheme" as a money mule after accepting a fake job offer. The poster got suspicious after earning $250 commission for 5 minutes of work “processing” payments. In the end, they did some research and realized they’d been used as a money mule, and reported the fraud.

Other hackers may use layering, a money laundering tactic in which multiple small deposits and withdrawals are made across several accounts to obscure the trail and make it harder for authorities to track.

That can put your account at risk, and banks may freeze your account while they investigate. You could face additional fees, frozen paychecks, and questions from law enforcement. So it’s never a good idea to accept unexpected deposits or “job offers” to help move money — it’s likely being done illegally.

What scammers can’t do with only your bank account number

A bank account number alone isn’t enough for a scammer to inflict much damage to your financial standing. After all, your bank account and even your routing number are located on your physical checks. It’s generally safe to give out your bank account number to certain people and institutions you trust.

Here is what scammers can’t do if they only have your bank account number:

• Log in to your online banking: Scammers need a username and password, and, these days, often a one-time code. An account number alone won’t get them past that security.
• Withdraw cash at an ATM: You need a physical card and PIN to withdraw money from an ATM. So even if the thief had your account number, there’s no chance for them to use it.
• Withdraw cash from your bank: Banks require additional verification before they let you withdraw money from your account, usually using a combination of a government-issued photo ID, such as your driver’s license, and security questions.
• Change your account details: Similar to withdrawing cash at a bank, banks require identity checks and ask you for more than just the account number for verification. Would-be thieves need more information to make significant changes or withdrawals.
• Steal your identity: Full identity theft typically requires a Social Security number, date of birth, address, or other personal document. Your account number is only one piece of that puzzle.

What to do if someone obtained your bank account number illegally

While it pays to be vigilant, you can still fall victim to hacking, getting tricked into sharing your bank account information, or having your credit card stolen. The first and most important step is to report it to your bank; they can block your card or account and help you set up a new, secured account.

Here’s a more detailed breakdown of steps to take if someone has your bank account number:

1. Tell your bank ASAP: Notify your bank that your account was compromised. They can freeze the account, potentially refund your money, stop further transfers, and issue you a new account number.
2. Monitor your account: Review every transaction and set up alerts to stay updated in real-time so you’re more likely to spot fraud when it occurs.
3. Change passwords: Update your passwords anywhere your bank login or personal data might reside. Create strong passwords that are harder for thieves to crack.
4. Contact the credit bureaus: Place a fraud alert on your credit file to prevent anyone from opening new accounts in your name without your permission.
5. Report it to the FTC: Filing a report establishes a paper trail and lets authorities build a case or link it to broader criminal activity. The FTC can also help you establish a recovery plan, allowing your situation to be resolved with fewer hassles.
6. Use an identity theft protection service: Having an extra layer of protection, such as LifeLock, can help protect your personal information against identity theft, detect threats early, and keep you one step ahead of scammers.

Best practices for sharing your bank account details

Sharing your bank account details is generally safe when you’re dealing with people or businesses you know and trust. However, it can become risky when that information ends up in the wrong hands, such as if you lose your wallet and your bank number is inside. That’s why it’s important to take precautions to keep your account details secure.

Here are some best practices for sharing your bank account information:

• Share only with trusted institutions, friends, and family: Only give your bank or credit card account information to friends or family members you know and trust. Avoid sharing it casually over text or on social media because those channels can be compromised. Caution still matters when sharing your personal information with people close to you.
• Use secure payment platforms: Payment platforms such as PayPal act as a protective middle layer between your bank and the other party, ensuring that your account and routing information remain private. Many of these platforms also offer built-in fraud protection, allowing you to safely transfer money without putting your bank account at risk.
• Keep your devices secure: Use strong passwords, biometric authentication (Face ID or fingerprints), and two-factor authentication (2FA) for added security. Update your software regularly to patch vulnerabilities that hackers can easily exploit.
• Monitor your account activity: Regularly check your activity logs and balances. Most financial institutions allow you to choose text, email, or app notifications with real-time updates.
• Use verified channels: Only share your account details through your bank’s online system, your employer’s payment portal, or trusted billing services that handle automatic payments. These were all built with strong security to protect your information.

Keep your bank account number safe and secure

You never know when a scam might be lurking around the corner. LifeLock Core monitors your personal information and financial accounts, alerting you to suspicious activity when it’s detected. One exposed detail is all it takes for a scammer to start piecing together the building blocks of identity theft, so don’t leave your security to chance. To keep your information safe and in good hands, get LifeLock Core today.

FAQs

How do fraudsters steal bank account numbers?

Fraudsters can steal your bank account number in various ways, whether it’s physical theft, scams, or cyberattacks. They can steal your bank account number from a check stolen from your purse or through phishing emails and malware.

Is it safe to give someone your bank account number?

It’s usually safe to share your bank account number with people or businesses you trust through secure channels. An account number without any additional information rarely allows a thief to drain your money.

Why would someone ask for my bank account number?

People might ask for your bank account number for various reasons, such as setting up direct deposit at work or automatic payments with your utility company. However, if someone you don’t know asks for your account number over email, text, or by phone, it’s likely a scam.

Can scammers steal my money when I transfer it?

Scammers can steal your money during a transfer, but they generally have to trick you into sending it to them specifically. They do this through spoofing, phishing, or impersonating trusted institutions.

Am I liable for unauthorized charges to my account?

You won’t be on the hook for much if someone makes unauthorized charges on your card. Federal law caps your liability at $50 for credit and debit cards, and many cards offer zero-liability protection. You may be liable for unauthorized charges on a debit card if you don’t report the fraud immediately or if you authorize a scam payment (even by mistake), so it’s important to stay on top of bank account transactions.