What Can Someone Do With Your Bank Account Number?

Short answer: a sort code and account number alone is not enough to take money from your account. On its own it can't authorise a payment — that needs more (a card number, a one-time code, or access to your app). But those two numbers do let a criminal do real damage: set up a Direct Debit, impersonate you confidently, or trick you into a second step that does drain the account. This page explains exactly what they can and cannot do, what is safe to share, and what to do if you are worried.

The quick answer

  • Sort code + account number alone: cannot be used to take money out. No UK bank lets a raw account number authorise a payment.
  • What they can do with it: set up a Direct Debit (refundable, but a nuisance), run a "confirmation of payee" check to see your name, or use it as ammunition in a convincing follow-up scam.
  • The real danger is not the number — it is the second step. A scammer who already knows your name, sort code and account number sounds far more credible when they phone pretending to be your bank.
  • If you are worried: tell your bank, watch your statements, and set up alerts. You do not usually need to close the account for a number alone.

What someone can actually do with your sort code and account number

1. Set up a Direct Debit against your account

A Direct Debit mandate needs your name, sort code and account number. In theory, someone with those can set one up. In practice:

  • You are protected by the Direct Debit Guarantee — every UK bank must refund an unauthorised Direct Debit in full, immediately.
  • You would usually notice quickly on your statement, and can cancel it at once.
  • It is a nuisance, not a theft — but it is the main real risk from the numbers alone.

2. Run a Confirmation of Payee check to learn your name

Banks now run Confirmation of Payee — when someone enters your sort code and account number, the bank confirms whether the name matches. A scammer can use this to confirm your full name if they only had part of it. It leaks information; it does not move money.

3. Impersonate your bank convincingly

This is the biggest risk. Armed with your real account number, a fraudster phoning "from your bank" sounds authentic — they can quote your details. That is why they ask for the number first. The number is the key to a convincing lie, not the key to your money.

What they cannot do with a sort code and account number alone

  • Take money out. A payment needs an authorised instruction — a card, an app, a one-time code, or a signed mandate.
  • Access your online banking. That needs your login, password and often a code sent to your phone.
  • Read your balance or transactions. An account number does not grant access to the account.
  • Set up a standing order from your account without further authorisation.

Is it safe to share your sort code and account number?

In the right context, yes — these two numbers are designed to be shared to receive money. You give them out on invoices, to employers, and to friends sending you cash. What is never safe:

  • Sharing them together with your card number, expiry and CVV, or a one-time passcode.
  • Reading them out to someone who phoned you — even if they claim to be your bank. Hang up and call the number on your card.
  • Entering them into a page you reached through an email or text link.
  • Sharing your online banking password or an app approval prompt — no legitimate bank ever asks for these.

What to do if someone has your bank account number

  1. Do not panic — a number alone cannot empty your account.
  2. Tell your bank using the number on the back of your card, or in the app. Ask them to check for any Direct Debits or payees you did not set up.
  3. Watch your statements closely for the next few weeks. Set up transaction alerts in your banking app if you have them.
  4. If you were also tricked into a payment, a one-time code, or app approval, treat it as authorised fraud: call your bank immediately — they may be able to recall the payment. Then report to Action Fraud on 0300 123 2040 or at actionfraud.police.uk.
  5. If you gave card details too (number, expiry, CVV), freeze the card in your app or call the bank to cancel it right away.
  6. Report scam texts and calls by forwarding texts to 7726 and reporting calls to your network.

The one rule that keeps you safe

Your bank will never phone, text or email asking you to confirm your account number, move money to a "safe account", or read out a code. If someone says your money is at risk and you must act now, it is a scam — hang up and call the number on your card.

What happens if someone has your bank account number — FAQ

Can someone take money from my account with just my sort code and account number? No. Those two numbers alone cannot authorise a payment. To move money a fraudster needs something more — a card, a one-time code, or your approval. The numbers are dangerous mainly because they make a follow-up scam believable.

Can someone set up a Direct Debit with my account number? In theory yes, but the Direct Debit Guarantee means your bank must refund an unauthorised Direct Debit in full, usually immediately. You would normally spot it on your statement and can cancel it at once.

Is it safe to give my sort code and account number to a company? To a company you contacted (for a refund or invoice) it is normal and safe. It is not safe to give them to someone who contacted you, especially alongside card details or a one-time code.

What can a scammer do with my bank account number and sort code? Practically: set up a Direct Debit, confirm your name via Confirmation of Payee, or impersonate your bank to trick you into a second step. They cannot read your balance, log into your online banking, or take money with those numbers alone.

Should I close my bank account if someone has my number? Usually not. Closing it does not undo the bigger risk (the follow-up scam). Instead, tell your bank, watch for unauthorised Direct Debits, and stay alert to anyone calling who already seems to know your details.