Bank fraud and financial scams are on the rise in the UK, making many people cautious about sharing their account number and sort code. While these details alone do not provide direct access to your money, scammers can still misuse them in various ways.
This article explores whether someone can scam you using your account number and sort code, when it is safe to share these details, and what steps you should take if you suspect fraud.
We also explain what to do if you’ve already shared your bank details, and how to recover money if you’ve lost any.
What Is A Sort Code And Account Number?
In the UK, each bank account is identified by two main details:
- Sort Code – A six-digit number (formatted as XX-XX-XX) that identifies the bank and branch where your account is held.
- Account Number – An eight-digit number unique to your account within that branch.
These details are essential for receiving payments, setting up standing orders, and processing direct debits. They are commonly used for transactions, but many people are concerned about whether they can be exploited by scammers.
Can Someone Scam You With Your Account Number And Sort Code?
While your sort code and account number alone do not allow someone to withdraw money from your account, they can still be misused by fraudsters in several ways:
1. Social Engineering & Phishing Attacks
Fraudsters can use your bank details to pose as a legitimate institution, tricking you or others into revealing sensitive information like security codes or passwords. For example, they may send an email or text message pretending to be your bank and claim there is a problem with your account.
2. Authorised Push Payment (APP) Fraud
A scammer might pose as a trusted person (such as a solicitor, tradesperson, or business) and convince you to send money to a fraudulent account. This is known as an APP scam.
3. Fake Direct Debits
Although banks have strict measures in place to verify direct debit authorisations, scammers have occasionally attempted to set up fake ones using stolen bank details.
4. Identity Fraud
If scammers obtain additional personal details (such as your name, address, and date of birth), they may use your bank details as part of a larger identity fraud scheme.
Is It Safe To Give Out Your Account Number and Sort Code?
Generally, it is safe to share your account number and sort code for legitimate purposes, such as receiving payments or setting up direct debits with trusted companies. However, while these details alone cannot be used to directly withdraw money, they can be exploited in fraud attempts.
You should be especially cautious if:
- You are asked to share your details by someone you do not know personally.
- You receive an unexpected message or call claiming to be from your bank.
- You are asked for additional details, such as online banking login information, security codes, or passwords.
In short, while your account number and sort code alone are not enough for a scammer to steal money from your account, they can be used as part of a larger fraud attempt.
Let’s look at when it’s safe to share your bank details and when it could be a problem.
When Is It Safe To Share?
There are certain situations where it is normal and safe to share your account number and sort code:
✅ Receiving Payments – If someone owes you money, they will need your bank details to make a transfer.
✅ Setting Up Direct Debits – When dealing with legitimate businesses (e.g., utility providers, mobile networks, insurance companies).
✅ Providing Employer Details – Your workplace will need your account details to process salary payments.
✅ Business Transactions – If you are a freelancer or business owner, you may need to share your bank details with clients.
However, even in these cases, make sure you are only sharing your details with trusted individuals or companies.
What To Be Careful Of
Although sharing your account number and sort code is generally safe, you should be aware of certain risks.
1. Fraudsters Requesting Additional Information
Scammers might use your bank details to trick you into giving them more sensitive information. They might call or email you pretending to be your bank and ask you to confirm security details. Your bank will never ask for PINs or passwords over the phone.
2. Fake Payment Requests
If someone contacts you claiming to be a company you owe money to, always verify the request before making a payment. Never send money to a new account without double-checking with the company directly.
3. Fraudulent Direct Debits
While banks have systems in place to prevent unauthorised direct debits, always check your bank statements for any payments you don’t recognise. Under the Direct Debit Guarantee, you can claim a full refund if an unauthorised payment is taken from your account.
What Can Someone Do With My Sort Code And Account Number?
While your sort code and account number alone cannot be used to withdraw money, they can still be misused. Here are some common examples of how that can happen:
🔴 Attempting to set up fraudulent direct debits (though these can usually be reversed).
🔴 Tricking you into revealing more sensitive details through phishing scams.
🔴 Pretending to be you to commit identity fraud.
🔴 Intercepting invoice payments and redirecting money to their own account.
Although your bank has security measures in place, you should always remain cautious when sharing your details.
Examples Of Scams Involving Account Numbers And Sort Codes
1. Invoice Fraud
A fraudster intercepts an invoice from a business and changes the payment details. The victim unknowingly sends money to the scammer instead of the intended recipient.
2. Impersonation Scams
Scammers impersonate a legitimate company (such as HMRC, PayPal, or a bank) and convince victims to make payments using fake bank details.
A common example that happened in the UK recently was the Royal Mail phishing scam, where victims received a text message purporting to be Royal Mail. The message asked them to pay an outstanding postage fee, with the link to pay taking people to a legitimiate-looking Royal Mail page. Victims were then asked to enter details like their sort code and account number.
3. Phishing Emails and Texts
Fraudsters send emails or texts pretending to be your bank, asking you to “verify your details” by entering your banking credentials.
4. Fake Job Offers and Refund Scams
Scammers trick victims into sharing their bank details by promising job opportunities, tax refunds, or competition winnings.
What To Do If You’ve Shared Your Bank Details
If you suspect your account number and sort code have been misused, take action immediately:
1️⃣ Check your bank statements for any unauthorised transactions.
2️⃣ Contact your bank’s fraud department to report any suspicious activity.
3️⃣ Cancel any unauthorised direct debits – you are entitled to a refund under the Direct Debit Guarantee.
4️⃣ Beware of follow-up scams – scammers might target you again.
5️⃣ Report the scam to Action Fraud (www.actionfraud.org.uk) if you have lost money. You can head here to learn more about reporting fraud.
Get Help Recovering Lost Money
If you’ve lost money in a scam after someone obtained your sort code and account number, we can help.
Here at Capital Refund House, we offer a specialist fraud recovery service that allows you to get your money back when all hope appears to be lost. Our service is all No Win No Fee, meaning if we don’t succeed getting your money back, you don’t have to pay us.
To see if we can help you today, just click the button below. You can also head here to learn more about bank fraud. You can also head here to learn more about how to get your money back from a scammer.
Frequently Asked Questions (FAQ)
Below, you can find answers to some frequently asked questions on the topic of scams involving account numbers and sort codes.
Can someone take money from my bank with an account number?
No, your account number and sort code alone cannot be used to withdraw money. However, scammers may use them to trick you into making a payment.
Is it possible to get scammed with an account number and sort code?
Yes, scammers can use your bank details to commit fraud, such as invoice scams, phishing attacks, and social engineering schemes.
