Can't the account information on my checks be easily used for fraud?
Yes, and there are almost no checks (no pun intended) on people pulling money from your account using a routing number. It is an EXTREMELY insecure system. If you want a real Halloween scare, read this article: Easy Check Fraud Technique Draws Scrutiny. Unfortunately you just have to live with it. If you are curious why this loophole is allowed to continue, consider how hard it is to close it without undermining the convenience of checks. Short of you going to the bank with each person you write a check to and showing ID to validate the transaction, I don't see how you could continue to use a negotiable instrument like this without such a security hole.  The ultimate answer is going to have to be replacing checks with other means of payment. Yes, those numbers are all that is needed to withdraw funds, or at least set online payment of bills which you don't owe. Donald Knuth also faced this problem, leading him to cease sending checks as payment for finding errors in his writings. The bottom line is to keep most of your money in accounts with no check privileges and to not give the account numbers for these accounts to anyone. Keep just enough in your checking account for the checks you are going to write. "That's accurate.  Here is another risk with the current checking system, which many people are not aware of: Anyone who knows your checking account number can learn what your balance in that account is.  (This is bank-specific, but it is possible at the major banks I've checked.) How does that work?  Many banks have a phone line where you can dial up and interact with an automated voice response system, for various customer service tasks.  One of the options is something like ""merchant check verification"".  That option is intended to help a merchant who receives a check to verify whether the person writing the check has enough money in their account for the check to clear.  If you select that option in the phone tree, it will prompt you to enter in the account number on the check and the amount of the check, and then it will respond by telling you either ""there are currently sufficient funds in the account to cash this check"" or ""there are not sufficient funds; this check would bounce"". Here's how you can abuse this system to learn how much someone has in their bank account, if you know their account number.  You call up and check whether they've enough money to cash a $10,000 check (note that you don't actually have to have a check for $10,000 in your hands; you just need to know the account number).  If the system says ""nope, it'd bounce"", then you call again and try $5,000.  If the system says ""yup, sufficient funds for a $5,000 check"", then you try $7,500.  If it says ""nope, not enough for that"", you try $6,250.  Etcetera.  At each step, you narrow the range of possible account balances by a factor of two.  Consequently, after about a dozen or so steps, you will likely know their balance to within a few dollars.  (Computer scientists know this procedure by the name ""binary search"".  The rest of us may recognize it as akin to a game of ""20 questions"".) If this bothers you, you may be able to protect your self by calling up your bank and asking them how to prevent it.  When I talked to my bank (Bank of America), they told me they could put a fraud alert flag on your account, which would disable the merchant check verification service for my account.  It does mean that I have to provide a 3-digit PIN any time I phone up my bank, but that's fine with me. I realize many folks may terribly not be concerned about revealing their bank account balance, so in the grand scheme of things, this risk may be relatively minor.  However, I thought I'd document it here for others to be aware of." When an someone as esteemed and smart as Donald Knuth tells you the chequing system is busted it's time to close your cheque account, or I guess live with the associated risk. Answer to question, yes your account information can be used to commit fraud on you via your bank. I was a victim of this.  I'm not sure who got my routing and account number off my check, but someone subscribed to Playboy.com using my bank account information.  Luckily it was only for about $30 and the bank refunded my money.  However, it was a mess in that I had to open a new checking account and keep the other one open until all checks cleared.  The bank was extremely helpful and monitored the account to make sure only the checks I told them about were processed.  I then had to close the old account. This is why I believe checks are much less secure than credit cards or debit cards.  A paper check can lay on someone's desk for anyone to pick up or write the information down off of it.  I avoid checks if at all possible.  For things like Craig's list, I would try to use PayPal or some other intermediate processing service. Yes this is a huge security loophole and many banks will do nothing to refund if you are scammed.  For example for business accounts some Wells Fargo branches say you must notify within 24 hours of any check withdrawal or the loss is yours.  Basically banks don't care - they are a monopoly system and you are stuck with them.  When the losses and complaints get too great they will eventually implement the European system of electronic transfers - but the banks don't want to be bothered with that expense yet.   Sure you can use paypal - another overpriced monopoly - or much better try Dwolla or bitcoin.
This is the information required to wire money into your account from abroad. They would only need the account number and the ABA (routing) number to withdraw, and it is printed on every check you give. The only way someone can take money out of your account using just your sort code and account number is if you set up a direct debit to pay them (or someone pretending to be you sets up the direct debit). Even with Paperless DD's this can take some time. Anyone who can process debit card transactions can take money from your account if they have your debit card number, expiry date and cvv number. Direct debits do not have an expiry date so they are normally used for paying automatic regular long term bills (like rent, rates, electricity etc). Note, anyone with an ordinary bank account can pay money into account,  using your sort code and account number. From personal experience, I can tell you that bank account numbers are not unique.  Someone from another branch of my bank was able to withdraw money from my account at my branch because they had the same account number.  You are supposed to enter your branch number on the withdrawal slip in front of your account number.  The person who got my money did not do this.  Because it was at my branch, the teller debited my account for the transaction.  I caught this on my monthly statement and immediately complained to my branch manager. He was able to retrieve the withdrawal slip and saw what had happened.  He credited my account and said he was going to talk to the teller who should have asked for the branch number and/or should have noticed that the name and address on the withdrawal slip did not match those on my account.  I would not have thought that the bank would allow this situation considering how many numbers are available to assign but they did. "First, there are not necessarily two accounts involved.  Usually the receiving party can take the check to the bank on which it is drawn and receive cash.  In this case, there is only one bank, it can look to see that the account on which the check is drawn has sufficient funds, and make an (essentially irrevocable) decision to pay the bearer.  (Essentially irrevocable precisely because the bearer did not necessarily have to present account information.) The more usual case is that the receiving party deposits the check into an account at their own bank.  The receiving party's bank then (directly or indirectly - in the US via the Federal Reserve) presents the check to the paying party's bank.  At that point if the there are insufficient funds, the check ""bounces"" and the receiving party's account will be debited.  The receiving party's bank knows that account number because, in this case, the receiving party is a customer of the bank.  This is why funds from check deposits are typically not available for immediate withdrawal." When I last asked a certain large bank in the US (in 2011 or 2012), they didn't offer expiring personal checks. (I think they did offer something like that for business customers.) They also told me that, even if the payee cashes the check a year later and the check bounces, even if it's because I have closed the respective account, he will be able to go to the police and file a report against me for non-payment. (This is what the customer service rep told me on the phone after a bit of prodding, but someone else feel free to improve this answer and fix details or disagree; it's hard to believe and quite outrageous if true.) "Here's a hack for getting the ""free"" checking that requires direct deposit. Some effort to set up, but once everything is in place, it's all autopilot. (If your transfer into savings is higher than your transfer out of savings, you'll build up a nice little stash over time.) I don't know if there are deposit amounts or frequencies that you must have to qualify for the free account, if these are public or secret, or if this works everywhere. If anyone else has experience using this kind of hack, please leave a comment." "See ""Structuring transactions to evade reporting requirement prohibited."" You absolutely run the risk of the accusation of structuring. One can move money via check, direct transfer, etc, all day long, from account to account, and not have a reporting issue. But, cash deposits have a reporting requirement (by the bank) if $10K or over. Very simple, you deposit $5000 today, and $5000 tomorrow. That's structuring, and illegal.  Let me offer a pre-emptive ""I don't know what frequency of $10000/X deposits triggers this rule. But, like the Supreme Court's, ""We have trouble defining porn, but we know it when we see it. And we're happy to have these cases brought to us,"" structuring is similarly not 100% definable, else one would shift a bit right."" You did not ask, but your friend runs the risk of gift tax issues, as he's not filing the forms to acknowledge once he's over $14,000." "As others have noted, in the U.S. a checking account gives you the ability to write a check, while a savings account does not. I think you know what a check is even if you don't use them, right? Let me know if you need an explanation. Personally, I rarely write paper checks any more. I have an account for a small side business, and I haven't bothered to get new checks printed since I moved 6 years ago even though the checks still have my old address, because I've only written I think 3 paper checks on that account in that time.  From the bank's point of view, there are all sorts of government regulations that are different for the two types of accounts. But that is probably of little concern to you unless you own a bank. If the software you have bought allows you to do the things you need to do regardless of whether you call the account ""savings"" or ""checking"", then ... who cares? I doubt that the banking software police will come to your house and beat you into unconsciousness and arrest you because you labeled an account ""checking"" that you were supposed to label ""savings"". If one account type does what you need to do and the other doesn't, then use the one that works." I'm guessing you're in the US? If so, yes, you can be prosecuted, but it's unlikely.  Fraud crimes are up to a prosecutor to pursue, there are a lot of fraud cases and bystanders take low priority, I'm assuming you're passively complicit, not actively.  If this is the case it's best to work with the bank to get your situation cleaned up and move on.  These days, most banks have dealt with wire fraud at least once, and they're familiar with cashiers check fraud.   A fair warning, the bank will report you, if they think you're involved, so if you are not a complete bystander, you may want to lawyer up.  So hopefully you didn't try to spend any of the fraudulent money and hopefully you have proof of a third party, because they will want a connection to that person (name/number/other) to file their report. You encountered a quite common scam: You are supposed to perform a job, they send you a check for too much money, and you are supposed to pay them some money back. Ten weeks later the check bounces and your money is gone.  That's these people's job. They do this all day long. The success rate isn't very high, so they are busy doing this all day. These scammers might have your name and address, but if that is all there is, they can get names and addresses of 100s of people by using the phone book, and they don't.  I wouldn't say that it is impossible to turn your name and address into money, but it is hard work. So it is quie unlikely to happen. Avoid talking to a person:  Just use an automated system, such as an ATM or a cellphone app.  Automated systems will ONLY scan for the RTN # and Account number at the bottom of the check (the funny looking blocky numbers). The automated system will not care who the check is made out to, or who is present, so long as you have an account to credit the money into, and the account number on the check can get the money debited properly. If you have the expired check in hand and take it back to the bank that issued it to you, I'd think they could do something for you.  (I'd hope they would, anyway.) But automatically?  I don't think so. I agree with you that smartphone deposits make you more vulnerable to a variety of issues. Checks are completely insecure, since anyone with your routing/account number can create a check, and individuals are less likely to shred or otherwise secure the check properly. Ways to control this risk are: "If someone gains access to these data, he could use social engineering approach to impersonate you - i.e. call the American Express and ask tell he he is you and he lost the access to the account and he needs the access to be reset and sent to certain email, and if they doubt it's you he would send them the statement data, even on company letterhead (which he would be able to fake since he has the data from the statements, and AE has no idea how the authentic letterhead looks like). He could also do the opposite trick - like calling your assistant or even yourself and saying something like ""I'm from American Express, calling about the transaction at this-and-this date and this-and-this time, this amount, please confirm you are {your name} and your address is {your address}, I need to confirm something"" - which would make it appear as he is really from AE since he knows all these details - and then ask you some detail he's missing ""for security"" - like your birth date or last digits of SSID or anything like that - and then use these details to impersonate you to AE.  So putting all this info together where it can be accessed by strangers does have risks. It may not work out if both you and AE personnel are vigilant and follow instructions to the letter, but we know it not always so." POS stands for Point of Sale (like a specific store location) which indicates that the purchase occurred by using your debit card, but it can also be the on-line transaction done via 3-D Secure. Checking with bank, they said that Kirchstrasse transaction could be related to direct marketing subscription service ordered on-line. Investigating further what I've found these kind of transactions are performed by 2BuySafe company registered at Kirchstrasse in Liechtenstein with went through the MultiCards on-line cashier which can be used for paying different variety of services (e.g. in this case it was polish on-line storage service called Chomikuj). These kind of transactions can be tracked by checking the e-mail (e.g. in gmail by the following query: after:2014/09/02 before:2014/09/02 Order). Remember, that if you still don't recognise your transaction, you should call your bank. I have found also some other people concerns about that kind of transactions who ask: Is 2BuySafe.com and www.multicards.com some sort of Scam? Provided answer says: MultiCards Internet Billing is a provider of online credit card and   debit card processing and payment solutions to many retailers   worldwide. MultiCards was one of the pioneer companies offering this   type of service since 1995 and is a PCI / DSS certified Internet   Payment Service Provider (IPSP) providing service to hundreds of   retail websites worldwide  MultiCards is a registered Internet Payment   Service Provider and has implemented various fraud protection tools   including, but not limited to, MultiCards Fraud Score Tool and   'Verified by Visa' and 'MasterCard SecureCode' to protect card   holder's card details.  2BuySafe.com Is also Secured and Verified By   GeoTrust  The certificate should be trusted by all major web browsers   (all the correct intermediate certificates are installed). The certificate was issued by GeoTrust.  Entering Incorrect information can lead to a card being rejected as @   TOS  2BuySafe.com is hosted on the Multicards Server site