Yes, scammers can do a lot with your BSB and account number, including setting up fraudulent direct debits for subscriptions or bills, initiating unauthorized electronic transfers (especially if they have other details like your name/address), potentially creating fake checks, and even facilitating money laundering by depositing funds. While just BSB/account number might not be enough for full identity theft, it allows for significant unauthorized payments and scams, so it's crucial to only share these details with trusted entities and regularly check your bank statements.
In short, giving your bank account number is generally safe as long as you do so with trusted entities and through secure channels. Note that there is very little a scammer can do with a bank account number alone.
If a criminal has both your routing number and account number they can potentially steal money from your account through fraudulent ACH transfers and payments.
Wherever you live and wherever you bank, you could be targeted for fraud and scams.
Fraudsters will often ask you to pay for goods and services by bank transfer. This is because they know that it makes it harder to recover the money. You could be dealing with a scammer if they won't let you pay by card or any other way that protects your money, like PayPal goods and services.
Contact your bank and let them know. You may have received messages sent from your account that you don't recognise, or you may have been locked out of your account, refer to our guidance on recovering a hacked account. Contact your IT department and let them know.
Credit and debit cards may offer some protections that can help you recover your money for purchases you don't receive. If you pay with a credit card, your bank will likely reimburse you if you don't receive the goods. If you pay with a debit card, your bank will try to recover your money from the scammer's bank.
Yes, someone can potentially take money using just your BSB and account number, primarily through setting up unauthorized direct debits (if they get past security checks) or combining them with other personal info for more complex fraud, but it's much harder to withdraw funds like an ATM withdrawal without your PIN or login details; the main risk is setting up recurring payments or using them with other stolen data like your driver's license, so always share details with trusted entities and monitor your statements closely.
All that is needed is a little information, such as your social security number, birth date, address, phone number, or any other information which can be discovered.
Common scammer phrases create urgency, promise rewards, threaten consequences, or build fake intimacy, using language like "Act Now," "You've Won," "Problem with your account," "Soulmate," "If you love me," "Would you kindly," or "Don't tell anyone" to manipulate victims into revealing personal info or sending money. They often use awkward grammar, unusual spelling (like "British English"), and demand secrecy to bypass critical thinking and isolate you.
It's not the same as a scammer obtaining your credit card digits. No one will be able to withdraw money from your personal bank account if all they have is your account number.
Protecting your personal and bank information is very important. Remember these simple rules: Share only safe details: Bank name, branch address, routing number and codes for international transfers. Keep sensitive details private: Full account number, online login, PIN and security answers.
Banks may refund scammed money, but it heavily depends on whether the transaction was authorized or unauthorized, how quickly you report it, and the specific circumstances, with refunds more likely for unauthorized fraud (hacks) than for authorized payments where you were tricked into sending money (like romance scams or investment scams), though credit card chargebacks and consumer protections offer avenues for recovery. Your best chance for a refund involves immediate reporting, especially for unauthorized transfers, using credit cards for payments, and providing documentation to your bank.
If a scammer only has your bank account number, there is limited direct access to your funds. That said, the account number alone can still be useful to criminals. Account numbers can be listed in applications, forms or fake documents to make a fraudulent claim look more legitimate.
While it might appear harmless to share your bank account number, the potential risks far outweigh the convenience. From unauthorised transactions to identity theft, the dangers are significant and real.
In fact, bank phishing scams have become one of the most common types of criminal activities on the internet. In addition to stealing login credentials for bank accounts, cybercriminals also steal credit and debit card information for their own financial gain.
To access your bank account, a scammer usually needs your bank account number and credentials (username and password). They might also need your SSN or date of birth to bypass security questions or 2FA.
Beware of these warning signs:
To confirm something isn't a scam, STOP and don't rush, CHECK for red flags like urgency or unusual requests, verify the source independently (don't use provided links), research reviews and business details, and look for spelling errors or poor grammar. Legitimate entities won't demand immediate payment in specific ways or ask for sensitive details out of the blue; use official channels to confirm any suspicious contact.
Can I run a test to see if my phone is hacked? Yes, running an antivirus scan using a mobile security app like Norton 360 Deluxe can help you identify malware infections that could be granting hackers access to your device or data.
After you've locked your debit or credit card, you should let your card issuer know about the situation. Tell them that you fell for a scam and unintentionally gave the scammer your card number. The more information you provide about the scam, the more they can help you and protect your money.
Generally, a hacker would need a combination of personal data. It includes date of birth, Identity Number, PIN, full name, address, the full card number on the front of the card, its expiry date, and CVV number at the back to make payments fraudulently with your credit or debit cards.
If there is a reason to receive money from a stranger — for an appliance or piece of furniture sold on an online marketplace, for example — it might be a better idea to ask them to send money by email or through PayPal with a phone number. That way, there's no need to share bank transfer details.
If you're a victim of monetary or identity theft:
Consider these seven ways to help you outsmart scammers: