A bank account number paired with a routing number can give someone a path to your money. Your routing number identifies your bank and is not a secret. Your account number is private. If a scammer has both, treat it as urgent.
Identity theft means someone uses your personal or financial information without your permission. Bank account numbers are on the list of information that counts. Move through the official channels below, and keep notes as you go.
Why bank account and routing numbers are sensitive
The routing number sends a transfer to the right institution. The account number points to your funds inside it. With both, a scammer may try unauthorized electronic debits or set up recurring charges. Our sources describe unauthorized automatic withdrawals as a common banking scam, often tied to a free trial or a prize you never asked for.
Phishing is another common route. It means fake emails, texts or calls that pretend to come from a bank or agency. A message asking you to verify your bank account or debit card number is a warning sign. Scammers may also pose as your bank and ask for account details over the phone.
If you shared your details, write down what you remember. Note the date, the time, the website or phone number, and exactly what you gave away. One page of notes will save you time on every call that follows.
Immediate steps to take
Call your bank or credit union first. Do not use a number from a suspicious text, email or voicemail. Use the number on the back of your card or on your official statement. Ask whether the bank has flagged any activity and what its fraud department will do next.
The CFPB lists closing affected accounts as an early step in an identity theft response. Ask the representative whether your account should be closed. Our sources do not explain how to get a new account number or how to move direct deposits and automatic payments. Ask your bank to walk you through that.
Next, report to the FTC at the CFPB identity theft guidance, which points you to IdentityTheft.gov. That site produces an Identity Theft Report and a recovery plan. You can also call the FTC identity theft line at 1-877-438-4338. The same guidance advises reporting to local police. Keep copies of everything. Some institutions may ask for them, so having them ready is wise.
Protecting your credit and watching for misuse
Scammers who have your banking details may also try to open new credit. Contact one of the three nationwide credit bureaus, Equifax, Experian or TransUnion, and ask for a fraud alert and a credit freeze. According to USAGov, you only need to contact one, and that bureau should notify the others. Check afterward that all three have your request on file.
A fraud alert asks lenders to verify your identity before opening new credit. A freeze limits access to your credit report. Our sources do not cover what a freeze costs or how to lift one, so ask the bureau directly.
Keep watching your statements and credit reports. Federal guidance lists these warning signs:
- Bills for items or services you did not buy.
- Debt collection calls for accounts you did not open.
- Unfamiliar accounts on your credit report.
- Loan or card denials you did not expect.
- Missing mail.
If you see unauthorized automatic withdrawals, contact your bank to stop them. Our sources do not say how long a bank has to refund unauthorized debits, so ask about that timeline on the call. Keep a log of each conversation with the date, the representative's name and any case number.
Spotting and reporting scams that use your banking details
The FDIC warns about bank impersonation scams and fake banks. Before you share account details with any bank, check that it is real and FDIC-insured. If a caller says they are from your bank and asks for your account number, hang up and call the number on your card.
Scammers also pose as government agencies. The FTC says it will never threaten you, tell you to transfer money to protect it, or ask you to withdraw cash or buy gold for someone. Any call like that is a scam.
Send each report to the right place. HelpWithMyBank.gov lays out the channels:
- Fake checks that arrive by mail go to the U.S. Postal Inspection Service.
- Counterfeit checks and general fraud go to the FTC. The counterfeit check line is 1-877-382-4357.
- Unauthorized withdrawals go to your bank.
- Phishing texts can be forwarded to 7726 (SPAM).
- Phishing emails go to [email protected], and phishing attacks can be reported at ftc.gov/complaint.
Watch for overpayment scams. Someone sends a check you did not ask for, tells you to deposit it and asks you to wire part of the money back. If the check is counterfeit, you must repay your bank the full amount, and you lose the money you wired. Our sources do not describe how to recover money already sent to a scammer. Stopping before you wire anything is the safest move the sources point to.
Please seek a professional. This article is general information, not financial, tax or insurance advice. Please seek a licensed financial, tax or insurance professional about your own situation.
