I Gave My Bank Account Number to a Scammer: What to Do Right Now

By Chris Clark, founder of Senior Tech Cafe

“I gave my bank account number to a scammer.” If that’s you, call your bank’s fraud department first, using the number on the back of your card or on your statement. An account number alone usually isn’t enough to empty an account, and the sooner your bank knows, the more it can stop.

That stomach-drop feeling is the same one you get when you confidently wave at someone across the street, only to realize they were waving at the person standing behind you. Except this time it isn’t just your ego, and the “nice young man from customer service” may be working out of a boiler room five time zones away.

Take a breath. You’re not alone, you’re not foolish, and it’s very likely not too late. Here’s what to do, in order.

What to Do If You Get Scammed: The First Steps, in Order

Speed matters more than anything else here. Work down this list.

1. Call your bank’s fraud department, using a number you trust. Don’t call a number the scammer emailed or texted you. Use the toll-free number on the back of your debit or credit card, on your statement, or on the bank’s website with the address typed in yourself. When the automated system answers, say “fraud” to get to the right team.
2. Lock your card and ask about the account. Many banking apps have a Lock Card or Freeze Card switch on the home screen; tap it now. A card lock stops card purchases but not always transfers or checks, so ask the fraud team whether to block the account, or close it and open a new one with a new number.
3. Disconnect any computer the scammer got into. If they talked you into installing a program so they could “fix” your computer, turn off the Wi-Fi or unplug the network cable. If the computer can’t reach the internet, they can’t see what’s on it.
4. Change your online banking password if you shared your login, your PIN or a one-time code. Do it from a phone or computer the scammer never touched.
5. Report it to the FTC at ReportFraud.ftc.gov. If you also gave out your Social Security number, go to IdentityTheft.gov, which builds a recovery plan based on what you shared.
6. Write everything down. Note the date and time of each call, who you spoke with and your case number. Then follow up with the bank in writing and keep a copy.

What a Scammer Can Do With Your Bank Account Number

Once the lockdown is handled, it’s time to look at what you shared. Many people assume that handing over a bank account number means instant financial ruin. Banking doesn’t quite work that way.

Think of your account number (and your bank’s routing number) as your home’s mailing address. A criminal who knows you live at 123 Main Street knows where the house is, but can’t just walk inside. To steal the good silverware, they need the house key: your PIN, your online banking password, or the one-time code your bank texts you.

The address isn’t useless to a crook, though. With your account and routing numbers, a scammer can try to print fake checks or set up electronic withdrawals from your account. Federal rules protect you from electronic withdrawals you didn’t authorize if you report them within 60 days of the statement they first appear on. That’s why the call to your bank comes first, and why you’ll want to read your statements closely for the next few months.

How Much Risk Are You At?

• You gave only an account number or routing number. Risk: low to medium. Tell your bank, watch your statements, and don’t lose sleep.
• You gave your PIN or online banking password, or read out a code from a text message. Risk: high, because that’s enough to get into your account. Call the bank now, change your password and ask them to stop any pending transfers.
• You let the scammer control your screen. Risk: very high. They may have installed hidden software. Have a trusted professional clean the computer before you log in to any financial site on it again.
• You gave your Social Security number too. Risk: high, for new accounts opened in your name. Go to IdentityTheft.gov and consider a free credit freeze.
• You sent money yourself. Risk: depends on how you paid. Call the bank, card company, wire service or gift card company right away and ask them to reverse the payment.

The Conversation Guide: What to Say to Your Bank

One of the biggest reasons people put off reporting a scam is the fear of sounding foolish. You might be expecting a bank teller to roll their eyes and confiscate your smartphone. Fraud departments take these calls all day. They’ve heard it all, and they’re there to help, not judge.

You don’t need to over-explain. Give your name, then say: “I believe I’ve been the victim of fraud, and I may have given out my account details. I need to secure my account and stop any unauthorized transactions right away.”

Before you hang up, ask three things:

• Can you stop or reverse any transfers that are still pending?
• Should I close this account and open one with a new number?
• What’s my case number, and where do I send a written follow-up?

If money has already left through an electronic transfer you didn’t make, the bank generally has 10 business days to investigate. If it needs longer, it has to put the money back in your account provisionally while it finishes, for up to 45 days in most cases.

The Next 48 Hours: Your Digital Safety Net

Once the immediate threat is frozen, it’s time to patch the holes in your digital ship.

Change your passwords and security questions. Start with your bank and your email, since email is how most passwords get reset. Update your security questions while you’re at it. If your secret question is “What is your mother’s maiden name?” and you post about your family on Facebook, a scammer can guess it faster than you can say “identity theft.” Here’s how to set up security questions and recovery options that actually work.

Put a fraud alert or a freeze on your credit. A fraud alert is free and lasts a year. Contact any one of the three credit bureaus (Equifax, Experian or TransUnion) and it tells the other two. A credit freeze goes further and blocks new accounts in your name. It’s also free, doesn’t affect your credit score, and you place it with each bureau separately.

Watch for the recovery scam. This is a cruel second wave: a different scammer contacts you claiming to be from the FBI, your bank or a “hacker group,” promising to get your stolen money back for an upfront fee. It’s the same criminals wearing a different digital mustache. Government agencies never charge a fee to help you get money back. Hang up.

From now on, when an email or text demands immediate payment or account verification, don’t use its links. Check the company’s website yourself by typing the address you know.

Questions About Sharing Bank Details With a Scammer

Can a Scammer Steal My Money With Just My Account Number?

Usually not. To move money out of your account, a scammer normally needs your PIN, your online banking password, a one-time code or your debit card. An account number can still be used for fake checks or unauthorized electronic withdrawals, so tell your bank and read your statements closely for the next few months.

Will the Bank Refund My Money If I Was Scammed?

It depends on how the money moved. If a scammer used your card or your login without your permission, federal rules usually protect you as long as you report it quickly. If you sent the money yourself, by wire, payment app or gift card, recovery is much harder, though it’s always worth asking right away.

How Long Does My Bank Have to Investigate an Unauthorized Transfer?

For an electronic transfer you didn’t authorize, your bank generally has 10 business days to investigate after you report it. If it needs longer, it must provisionally put the money back in your account while it finishes, and it can take up to 45 days, or 90 days for some debit card and foreign transactions.

Should I Be Embarrassed That I Fell for a Scam?

Absolutely not. Scammers are professionals who use pressure, fake deadlines and spoofed phone numbers that make it look like your real bank is calling. Falling for one says more about their skill than your judgment. Reporting it quickly is the smart move, and bank fraud teams deal with these calls every day.

What Should I Do If I Get Scammed and Already Paid?

If you get scammed and already paid, contact whoever moved the money right away and ask them to reverse it: your bank for a transfer or Zelle payment, the card company for a card charge, the wire service for a wire, or the gift card company for gift cards. Then report it at ReportFraud.ftc.gov.

Next Steps for a Safer Digital Life

Going through a scam scare is exhausting, but it doesn’t mean you have to toss your laptop into the nearest river and go back to writing checks by candlelight.

The best defense against the next one is knowing the playbook. Scammers love to pose as your bank, so learn how to tell whether a bank fraud alert is real. If the trouble started with a link in a message, here’s what to do after clicking a phishing link. For the full checklist, start with our online safety guide for seniors.

When it comes to unexpected requests for money, the smartest thing you can do is hang up, slow down, and verify.