Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

As a non-USAsian, I'm always puzzled by the American's paranoia about their bank account details.

In most countries, bank account numbers are effectively public knowledge, and appear at the bottom of invoices and such. The trick is that with this knowledge you can pay money in to an account, but you can't get it out - for that you need authorisation. This makes paying via echeck or direct credit very easy.

Am I right that in the US you can get money out of an account if you know the account number? If not, why the secrecy about your bank account numbers?



Yes, in the US you can take money out of an account if you know the number. No, it's not a good system.


Actually, you can't just take funds out. How would you do that, counterfeit a check and commit fraud by cashing it in? The bank ATMs/teller machines would reject that check and you'd find yourself in prison very quickly.


Actually, you can.

1) ACH. Everyone has mentioned that already. I'd need routing and account number, and likely need to know if it's checking/savings or business/personal. Like they've said, everything that I can find on a check. You could contest it for ~ 60 days, but you'd have to sign something at the bank, and you're out the money till you do.

2) Drafts. They're like checks, but not. Some health clubs (Curves, iirc) do this as well as some other less reputable businesses. Basically, once you sign an authorization (that they keep on file, not like it gets passed to the bank or anything), they can print a check like thing and put some specific language in the signature block area, and deposit it. Typically, this is done in bulk. Often times, it's then immediately converted into an electronic equivalent check (Check21 law) and then deposited in one big file. Return rates on these are astronomical. Most banks won't touch them. They should die.


You use the system backing check processing, ACH. Theoretically, this is similar to counterfeiting a check, except:

- these are electronic requests, so there's nothing to distinguish "genuine" from "fraudulent" ones

- you really do have all of the information that goes into an ACH payment

Really, it's much more similar to forging a check than to counterfeiting one.


What service allows you to specify a debit from an account that's not authorized, in hte US? No bank that I've even used provides that, nor does an online service or API without first authorizing a debit via ACH with the deposit confirmation.


deposit confirmation seems to have disappeared. I pay several of my bills (including rent, kind of a biggie) via direct withdrawal and never confirmed the account. Just went to a website one day, typed in some numbers, and clicked pay. (oh, I did have to mark the checkbox that says "I authorize this payment", but that doesn't seem like foolproof security to me.)


I'm no expert by any means but aren't the account number and routing number both printed on the bottom of every check? Are you saying that simply giving a check to someone compromises your checking account?


Yes, they are printed on the bottom of checks because they are the information that allows conversion of the check into money. Yes, giving a check to someone compromises your account. You're trusting the other person to do nothing other than withdraw the amount on the check, but you're giving them enough information to withdraw whatever you have in your account.


And be charged with a crime for it. That's the other part. Not just trust.


Remember that the person you're replying to said "which, honestly, I know nothing about".

To remove money from a US account, you also need authorization. The trick thieves use is to lie about having authorization. In that case, it's fraud.

I don't know of many fraudulent transactions that can't be reversed. Even fraudulent/unauthorized wire transfers can be reversed. The bigger problem is the hassle that comes with losing access to cash while the situation is resolved.

Can someone with actual banking knowledge correct me where I'm wrong and clear up this confusion?


It may be a historical thing. Whenever you get a receipt from an ATM or a store, your account number if blocked out (so you end up with "XXXXXXXX9585") for privacy reasons. I honestly don't know dangerous exposing my account numbers would be. Consumer protection laws can be hit-or-miss (or, in many cases, just plain missing). It's easier to just be careful.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: