I Gave a Scammer My Bank Account Number — Here’s What to Do Right Now
Your stomach just dropped. You realized mid-conversation — or maybe hours later — that you just gave your bank account number to a scammer. Maybe it was a fake customer support call. A job offer that asked for direct deposit information. A “government benefit” that required account verification. A check that turned out to be fraudulent.
However it happened, you need to act fast.
The next few hours matter enormously. The sooner you move, the better your chances of protecting your money, stopping unauthorized transactions, and preventing the damage from spreading into identity theft. This is not the time to freeze — it’s the time to act.
Take a breath. Then work through every step in this guide.
How Serious Is This?
Your bank account number alone — without your routing number, PIN, online banking password, or debit card details — gives a scammer limited but real options for harm. What they can do with just an account number varies, but the risks include:
- ACH withdrawals — In some cases, an account and routing number together are enough to initiate an electronic withdrawal. If you shared both, the risk level is significantly higher.
- Check fraud — Scammers can print fraudulent checks using your account and routing number and use them to make purchases or withdraw funds.
- Account targeting — Your account number can be used as a starting point to gather more information about you through social engineering attacks on your bank.
- Identity theft — Combined with other personal information you may have shared in the same interaction, your account number contributes to a broader identity profile.
The bottom line: treat this as a serious threat and act immediately, even if you’re not sure yet whether any unauthorized activity has occurred.
What to Do Right Now — Step by Step
Step 1: Call Your Bank Immediately
This is the single most important step — and the most time-sensitive. Call the fraud or security department of your bank right now using the number on the back of your debit card or the official number on your bank’s website. Do not use any number provided by the person you were just speaking with.
Tell them exactly what happened: you gave your account number to someone you now believe may be a scammer. Ask them to:
- Place a fraud alert or security hold on your account
- Review recent transactions for any unauthorized activity
- Change your account number — yes, this is possible, though it varies by bank. Changing your account number is the most definitive way to cut off access from anyone who has it.
- Issue a new debit card if your card number was also shared
- Set up real-time transaction alerts if you don’t have them already
Banks have dedicated fraud teams who handle exactly this situation every day. Be direct and thorough. The more detail you give them, the better they can protect you.
Step 2: Change Your Online Banking Password and PIN Immediately
Even if you didn’t share your online banking login credentials, change your password right now as a precaution. If the scammer has your account number and other personal information, social engineering your bank’s customer service line to gain further access is a known tactic.
Use a strong, unique password you haven’t used anywhere else. Enable two-factor authentication (2FA) on your online banking account if it isn’t already active — this adds a critical layer of protection even if someone gets your password.
Also change the PIN on any associated debit cards.
Step 3: Monitor Your Account in Real Time
Log in to your online banking and review every recent transaction. Look for anything you don’t recognize — even small amounts. Scammers sometimes test accounts with micro-transactions before attempting larger withdrawals, specifically to see if the account is active and whether the owner is paying attention.
Set up transaction alerts if your bank offers them — most do, and they’re free. You want a text or email notification for every single transaction until you’re confident the situation is resolved.
Check back every few hours for the next 48–72 hours. Unauthorized ACH transactions typically take one to three business days to process and appear, so staying vigilant in that window is critical.
Step 4: Place a Fraud Alert on Your Credit
Even if the scammer only has your bank account number, they may have collected other personal details during the same interaction — your name, address, date of birth, Social Security number, or employer information. That combination can enable identity theft well beyond your bank account.
Contact one of the three major credit bureaus to place a fraud alert — when you alert one, they’re required to notify the other two:
- Equifax: equifax.com/personal/credit-report-services/credit-fraud-alerts
- Experian: experian.com/fraud/center.html
- TransUnion: transunion.com/fraud-alerts
A fraud alert tells lenders to take extra verification steps before opening any new credit in your name. It’s free, lasts one year, and can be renewed.
If you believe your full identity may have been compromised, consider going further and placing a credit freeze at all three bureaus. A freeze completely blocks new credit from being opened in your name until you lift it — it’s the strongest protection available and is also free.
Step 5: Document Everything
Before memories fade, write down everything you can about the interaction:
- The phone number, email address, website, or platform where contact was made
- The name and company the scammer claimed to represent
- Exactly what information you provided and when
- What they told you the information was needed for
- Any reference numbers, confirmation codes, or documents they sent
Save screenshots, emails, texts, or any other evidence. This documentation is essential for filing reports, disputing transactions, and any future fraud investigation.
Step 6: Report to the FTC
File a report at ReportFraud.ftc.gov. The FTC is the primary federal agency for consumer fraud complaints, and your report feeds into the Consumer Sentinel Network used by thousands of law enforcement agencies. You’ll also receive a personalized recovery plan after submitting.
Filing takes about 10 minutes and doesn’t require a lawyer or any special knowledge — just the details of what happened.
Step 7: Report to the FBI If Money Was Transferred
If any money was actually taken from your account — or if the scam involved any internet-based component — also file a report with the FBI’s Internet Crime Complaint Center at IC3.gov. The FBI coordinates with financial institutions on fraud recovery and has been involved in recovering funds in significant cases.
The sooner you file, the better the chances of any financial recovery effort.
Step 8: Report to Your State Attorney General
Many states have active consumer fraud units that investigate and prosecute financial scams. Search “[your state] attorney general report fraud” to find your state’s reporting page. If the scammer appeared to be operating locally or impersonating a state-licensed business, this report is especially valuable.
What If Unauthorized Transactions Already Appeared?
If you’re reviewing your account and see transactions you didn’t authorize, take these additional steps immediately:
Dispute every unauthorized transaction with your bank. Under the Electronic Fund Transfer Act, you have legal rights when it comes to unauthorized electronic transactions — but your level of protection depends significantly on how quickly you report. Generally:
- Report within 2 business days: your liability is capped at $50
- Report within 60 days: your liability is capped at $500
- After 60 days: you may be responsible for the full amount
Don’t wait. Call your bank’s fraud line, dispute each transaction individually, and ask for written confirmation of each dispute you file.
Ask your bank to attempt a recall on any wire transfers. Wire transfers are the hardest to recover, but banks can sometimes recall them if reported quickly enough — within hours in the best cases. This is a long shot but always worth attempting.
Document the timeline carefully. When you noticed the unauthorized activity, when you reported it, and who you spoke with at the bank are all important details for any dispute resolution process.
What If You Also Shared Other Personal Information?
Depending on what else was shared during the same interaction, you may need to take additional steps:
If you shared your Social Security number: Place a credit freeze at all three bureaus immediately. Also consider filing an Identity Theft Report at IdentityTheft.gov — the FTC’s dedicated identity theft recovery site, which generates a personalized recovery plan and official documentation you can use with creditors.
If you shared your debit card number and CVV: Your card is compromised regardless of what else happened. Call your bank and request a new card immediately.
If you shared your online banking username and password: Change them immediately on every device. If you use the same password elsewhere, change it there too. Enable two-factor authentication.
If you shared your driver’s license or passport information: Contact your state’s DMV to report potential identity fraud. Notify your bank as well, as identity documents are commonly used in account takeover attempts.
If you shared your Medicare or health insurance ID: Contact Medicare at 1-800-MEDICARE and your insurance provider to flag potential fraudulent billing.
How Did This Happen? Common Scams That Steal Banking Information
Understanding how you got here can help you protect yourself going forward — and recognize a similar attempt in the future.
Fake employer or job offer scams. A scammer poses as a recruiter or employer and asks for direct deposit information as part of onboarding. Sometimes they send a fraudulent check first, ask you to deposit it and forward a portion — the check bounces days later, leaving you on the hook.
Fake customer support calls. A caller claims to be from your bank, a utility company, Amazon, or another trusted business. They say there’s a problem with your account and ask you to “verify” your banking details.
Government impersonation. A caller poses as the IRS, Social Security Administration, or another government agency claiming you owe money or are owed a refund — and needs your account number to process it.
Fake check scams. You receive a check — from a fake mystery shopping job, a fake prize, a fake rent overpayment — and are asked to deposit it and send part of the funds back. The check appears to clear initially, but bounces days later.
Phishing emails or fake websites. A convincing email or website mimics your bank or a trusted retailer and asks you to log in or verify your account — capturing your credentials and account details in the process.
Online marketplace fraud. A fake buyer or seller on Craigslist, Facebook Marketplace, or eBay claims to need your account number to make a payment directly.
Not Sure If You Were Scammed? Use the ScamSave AI Triage Tool
Sometimes the realization doesn’t hit immediately. You shared information with someone who seemed legitimate, but now something feels off. You’re not sure if it was a real job, a real bank representative, or a real company.
Don’t wait until you see an unauthorized charge to find out.
The ScamSave AI Scam Triage Tool can help you evaluate what happened in seconds. Describe the interaction — what they said, what they asked for, how they contacted you — and the AI analyzes it against known fraud patterns to tell you whether what you experienced matches a known scam, how serious the risk is, and what your immediate next steps should be.
When you’re not sure, find out fast. Every hour matters.
👉 Use the ScamSave AI Scam Triage Tool — Free
Why ScamSave Members Are Better Protected Before, During, and After
The best outcome is never needing this guide in the first place. ScamSave membership is built to keep you ahead of scammers — not just help you recover after they’ve struck.
🔔 Real-Time Scam Alerts
Live intelligence from the FTC, FBI IC3, and BBB Scam Tracker — so you know what scams are actively circulating right now, before they reach you.
📋 Top 100 Scams Database
Every major scam type explained in plain language — including exactly how fake job scams, bank impersonation calls, and check fraud schemes are structured so you can recognize them on contact.
🛡️ CISSP-Certified Expert Guidance
ScamSave is built by a Certified Information Systems Security Professional (CISSP) with decades of cybersecurity and fraud prevention experience. The guidance here is grounded in how fraud actually works at a technical and psychological level — not recycled generic tips.
📚 Member-Only Recovery Resources
Step-by-step guides for every major scam recovery scenario, printable documentation checklists, dispute letter templates, and tools to help you navigate the recovery process with confidence.
🤖 Unlimited AI Scam Triage Access
Members get unlimited use of the AI Triage Tool — so every suspicious call, email, job offer, or request for financial information can be evaluated before you hand anything over.
ScamSave doesn’t just help you recover. It helps you never need to recover.
Frequently Asked Questions
Can a scammer drain my account with just my account number?
With just your account number and no routing number, their options are limited — but not zero. With both your account and routing numbers, they can potentially initiate ACH withdrawals or print fraudulent checks. That’s why contacting your bank immediately is critical regardless of exactly what was shared.
How quickly can a scammer use my bank account number?
ACH transactions typically take one to three business days to process, but some fraudulent transactions can be initiated almost immediately. Don’t wait to see if anything happens — contact your bank now and let them place protections before any transaction clears.
Will my bank refund money stolen by a scammer?
It depends on how the money was taken and how quickly you reported it. Unauthorized electronic transactions have legal protections under the Electronic Fund Transfer Act — but time limits apply. Credit card fraud protections are generally stronger than debit card protections. Contact your bank immediately and ask specifically about your options for each transaction in question.
Should I close my account and open a new one?
In many cases, changing your account number rather than closing and reopening the account is sufficient. Your bank can advise on the best approach for your specific situation. If your account has been actively compromised with unauthorized transactions, closing and reopening may provide the cleanest break.
What if the scammer also has my Social Security number?
This elevates the situation to potential identity theft beyond just your bank account. File an identity theft report at IdentityTheft.gov, place credit freezes at all three bureaus, and monitor your credit reports closely for any new accounts or inquiries you don’t recognize.
I think I was scammed through a job posting — what should I do?
In addition to the steps above, report the fraudulent job posting to the platform where you found it (Indeed, LinkedIn, ZipRecruiter, etc.) so it can be taken down. Also report to the FTC and your state attorney general, as fake job scams are a federal offense.
I’m embarrassed this happened. Should I still report it?
Yes — and please know that this happens to smart, careful people every day. These scammers are sophisticated professionals who study psychology and practice their scripts constantly. The embarrassment is understandable but misplaced. Reporting protects you and everyone else they’ll target next.
The Bottom Line
Finding out you gave a scammer your bank account number is terrifying. But it is not hopeless — especially if you act now.
Call your bank first. Change your passwords. Monitor your account closely. File reports with the FTC and FBI. Document everything. The faster you move through these steps, the more control you take back.
And when this is behind you — join ScamSave. Because the best protection is knowing what a scam looks like before you’re in the middle of one.
👉 Use the Free AI Scam Triage Tool Now
👉 Join ScamSave for Expert Fraud Protection
Written by a CISSP-Certified cybersecurity professional. ScamSave is dedicated to helping everyday people protect themselves from fraud, scams, and financial crime.
