What Can Someone Do With Your Bank Account Number? (2026)

How Someone Gets Your Bank Account Number

Before a scammer can do anything with your bank account number, they need to obtain it. Some methods are obvious. Others are not.

Personal Checks

Every personal check has your name, home address, bank routing number, and account number printed on it. When you hand a check to a stranger — a contractor, a small business, a service provider — you are handing over everything needed to initiate an ACH debit against your account.

Once deposited, the physical check still exists. Unless the business shreds it, that paper can be stolen, photographed, or found in the trash. A check written to a tree removal company today can become an ACH fraud case next month.

Direct Deposit Forms

When you start a new job, your employer needs your bank account and routing numbers to set up direct deposit. In legitimate companies with established HR departments, this is standard and safe.

The risk is job scams. A scammer posts a convincing listing on a job board, conducts a fake interview, and sends you onboarding paperwork — including a direct deposit form. Once you submit your bank account details, the “employer” disappears. The job never existed. Your banking information now belongs to a criminal.

Phishing Attacks

A phishing email that impersonates your bank — citing a “security alert” or “account problem” — directs you to a fake login page. When you enter your credentials, the scammer captures your username, password, and any account details displayed during the session.

Bank impersonation scams are one of the most common forms. The emails and calls replicate legitimate bank communications down to the logos, formatting, and sender addresses.

Malware and Keyloggers

Keylogger malware and spyware installed on your device silently capture everything you type — including banking credentials, account numbers, and passwords. You will not know it is running. By the time you notice sluggish device performance, the data may have already been exfiltrated.

These infections typically arrive through malicious email attachments, compromised websites, or software downloads from untrusted sources.

Data Breaches

Companies that store your banking information — employers, utility providers, subscription services, tax platforms — can be breached. When they are, your bank account number may be packaged with other personal data and sold on dark web marketplaces. Major breaches can expose millions of financial records at once.

Tax Preparers

Filing taxes requires your bank account number if you want a direct deposit refund. Whether you use a human preparer or tax software, your account details pass through a system that could be breached, mishandled, or targeted by an insider. Use only preparers and platforms you trust, and verify their security practices.

What a Scammer Can Do With Your Bank Account Number

The severity depends on what other information the scammer has alongside your account number. Here is what is possible at each level.

1. Unauthorized ACH Withdrawals

With your routing number and account number — both printed on every check — a scammer can initiate Automated Clearing House (ACH) debits against your account. ACH is the system banks use for electronic payments: direct deposits, bill payments, and online purchases.

ACH fraud has been rising steadily. A scammer sets up a payment using your stolen account details, and funds are pulled from your account electronically. This can be a single large withdrawal or a series of small charges designed to avoid detection.

What makes ACH fraud dangerous: Unlike credit card fraud, where your liability is capped at $50 by federal law, ACH fraud liability depends on how quickly you report it. Under Regulation E:

The clock starts when your bank statement showing the unauthorized transaction becomes available — not when you notice it. This is why real-time transaction monitoring matters.

2. Counterfeit Checks

Creating a fake check requires only a name, address, bank name, routing number, and account number — all of which appear on a legitimate check. Counterfeit checks are straightforward to produce and difficult for small businesses and individual service providers to detect.

A scammer can write fake checks against your account to purchase goods, pay for services, or cash them at check-cashing stores. The charges hit your account when the checks clear. You may not discover the fraud until you review your statement or the bank contacts you about an overdrawn account.

3. Targeted Phishing and Social Engineering

Even if a scammer cannot directly access your account, knowing your bank name and account number gives them a credible foundation for social engineering.

The scammer contacts you — by email, phone, or text — impersonating your bank. They reference your actual bank and may cite partial account details to build trust. The goal is to extract the remaining information they need: your online banking password, a one-time verification code, or your Social Security number.

This is how a bank account number escalates from a low-level exposure to full account takeover. The account number itself is the hook; the phishing attack is what lands the catch.

4. Identity Theft

Your bank account number alone will not enable identity theft. But combined with your name, address, date of birth, or Social Security number, it becomes part of a full identity profile that a criminal can use to:

• Open new bank accounts or credit lines in your name
• Apply for loans
• File fraudulent tax returns
• Set up utility accounts
• Commit medical identity theft

The more data points a scammer has, the more damage they can do. Bank account numbers are often one piece of a larger stolen identity package.

5. Tax Refund Fraud

A scammer with your SSN and bank account number can file a fraudulent tax return and direct the refund to an account they control — or use your account number to make the filing appear legitimate before redirecting funds.

Even without your SSN, a scammer can use your bank account number in a tax refund scam where they impersonate the IRS, reference your banking details to appear credible, and trick you into sending money to a fraudulent account.

6. Money Laundering

Criminals run illegally obtained funds through stolen bank accounts to avoid detection. If your account number is compromised, a scammer can route money through your account — making small deposits followed by transfers to other accounts.

You may notice unfamiliar deposits or withdrawals you did not initiate. These are red flags that your account is being used as a pass-through. Report any unrecognized transactions to your bank immediately, even deposits — accepting laundered funds can create legal exposure for you.

How to Prevent Bank Account Number Theft

Stop Writing Personal Checks

Every check you write puts your account and routing numbers, name, and address in someone else’s hands. Use credit cards, debit cards, payment apps (Venmo, Zelle, Apple Pay), or cash instead. If a business only accepts cash or checks, choose cash.

Verify Employers Before Sharing Direct Deposit Information

Before providing your bank account details for direct deposit, verify the company independently. Look up the company’s website and phone number yourself — do not rely on contact information provided in the job listing. Be especially cautious with remote positions found on job boards.

Recognize Phishing Attempts

Your bank will never ask you to “verify” your account number, password, or SSN through an email link. If you receive an urgent message about your account, do not click any links. Log into your bank’s website directly by typing the URL yourself, or call the number on the back of your card.

Protect Your Devices

Keep your operating system and software updated. Use reputable antivirus software. Do not download attachments from unknown senders or install software from untrusted sources. These are the primary vectors for keylogger and infostealer malware that capture banking credentials.

Use Strong, Unique Passwords

Your online banking password should be unique — not reused from any other account. Use a password manager to generate and store complex passwords. Enable two-factor authentication on every financial account.

Use Trusted Tax Preparers

Verify credentials before handing over your banking information at tax time. If you use tax software, ensure the platform uses encryption and has a clean security track record. File over a secure internet connection — never on public Wi-Fi without a VPN.

Monitor Your Accounts Continuously

Do not wait for monthly statements to check your accounts. Enable real-time transaction notifications through your bank’s app. Review your accounts weekly at minimum. For automated coverage, an identity theft protection service monitors your bank accounts, credit reports, and the dark web around the clock.

Try Aura Free for 14 Days — Monitor Your Bank Accounts + Identity →

FAQ

What can someone do with your bank account number?

A scammer with your bank account and routing numbers can initiate unauthorized ACH withdrawals, create counterfeit checks, set up fraudulent bill payments, and use your account details for targeted phishing attacks. Combined with other personal information like your name, address, or SSN, bank account numbers also enable identity theft, tax refund fraud, and money laundering through your account.

Can someone steal money with just your bank account number?

Your bank account number alone is not enough to withdraw money — but paired with your routing number (which is printed on every check), a scammer can initiate ACH debits. Both numbers are on the bottom of every personal check.

How do scammers get your bank account number?

Common methods include personal checks, phishing emails that impersonate your bank, data breaches at companies that store your banking information, keylogger malware on your device, compromised direct deposit forms, and dishonest tax preparers.

What should I do if my bank account number is compromised?

Contact your bank immediately — they may close the account and open a new one. Change all online banking passwords and enable two-factor authentication. Review recent transactions for unauthorized activity. File a report at IdentityTheft.gov and consider filing a police report.

Should I be worried if someone has my bank account number?

Yes — but severity depends on what else they have. A bank account number alone has limited utility. Paired with your routing number, name, and address, a scammer can attempt ACH fraud and counterfeit checks. Paired with your SSN and date of birth, the risk escalates to full identity theft.

Can I change my bank account number?

You cannot change a bank account number — the only option is to close the compromised account and open a new one. Your bank can do this quickly. You will need to update any automatic payments, direct deposits, and linked services.

Is it safe to give out your bank account number for direct deposit?

Generally yes, when providing it to a verified employer through official HR channels. The risk comes from job scams — fake employers that collect your banking information during a fraudulent onboarding process. Verify the employer independently before providing account details.

Does my bank cover unauthorized transactions?

Under Regulation E, banks must investigate and typically reimburse unauthorized electronic transactions if you report them within 60 days. Within 2 business days limits liability to $50; between 2 and 60 days raises it to $500; after 60 days you may have no protection at all.