To verify a bank account number, you confirm that the routing number and account number belong to a real, open account using one of three methods: instant verification through a data aggregator, micro-deposit confirmation, or a written verification letter from the bank itself. The fastest option takes seconds; the most formal takes a few business days. Which one you use depends on who is asking and how much proof they need.
What You Need Before You Start
Every method relies on the same three pieces of information: the nine-digit routing number that identifies your bank, the account number that identifies your specific account, and the full legal name on the account. A mismatch between the name you enter and the name on file is one of the most common reasons a verification fails.
The easiest place to find both numbers is at the bottom of a personal check. The first nine digits on the left are the routing number, printed in magnetic ink. The next set is your account number, followed by the check number. If you don’t have checks, your monthly statement lists both near the top of the document, and your bank’s online portal shows them under account details.
ACH Routing Number vs. Wire Routing Number
Some banks use different routing numbers for electronic transfers and wire transfers. An ACH routing number handles batch electronic transactions like direct deposits and bill payments. A wire routing number directs individual real-time transfers between banks. At smaller institutions these may be identical, but at larger banks they often differ. Using the wrong one causes the verification to fail or routes the payment to the wrong channel. If you aren’t sure which is required, check your bank’s website or call customer service before submitting.
Instant Verification Through a Data Aggregator
Instant verification is the fastest method. Services like Plaid, Finicity, and MX connect directly to your bank through secure data links and confirm your account in seconds. You’ll see this method when signing up for payment apps, investment platforms, or any service that needs to link to a bank account.
The process works like this. The app presents a secure window where you select your bank from a list. You log in with your online banking credentials, but instead of handing those credentials to the app, most modern systems redirect you to your bank’s own login page using a protocol called OAuth. Your bank authenticates you directly and issues a temporary digital token to the verification service. That token grants limited, specific access to confirm the account is open and valid, without exposing your password.
The aggregator shares only the information the requesting app actually needs. If an app only needs to confirm a checking account for payments, the service will not share data about your savings accounts, credit cards, or transaction history. You can typically see which apps you’ve connected and revoke access at any time through the aggregator’s consumer portal or directly through the third-party app. Under the Consumer Financial Protection Bureau’s Personal Financial Data Rights rule, revocation must take effect immediately, deletion of your data is the default, and access cannot last longer than one year without your express reauthorization.
Micro-Deposit Verification
When instant verification isn’t available, either because your bank doesn’t support aggregator connections or you’d rather not share login credentials, micro-deposits are the standard fallback. The requesting company sends two small transfers, typically between one cent and ninety-nine cents, to your account. They usually appear in your transaction history within one to three business days.
Once you see the deposits, you log into the verification portal and enter the exact amounts. Correctly reporting both values proves you have authorized access to the account. It confirms the account exists and that you control it.
Watch the timing. Many providers set an expiration window, often around ten days from when the deposits are initiated, after which the request expires and you have to start over. If the deposits haven’t appeared after three business days, check that you entered the correct routing and account numbers. A single transposed digit can send the deposits to the wrong account or bounce them back.
Prenote Verification for Direct Deposit
Employers and payroll processors sometimes use a related method called a prenote, short for prenotification. A prenote is a zero-dollar test transaction sent through the ACH network to confirm your routing and account numbers can receive deposits. No money moves. Under Nacha rules, the sender must wait at least three banking days after the prenote before sending an actual payment. If there’s a problem, such as a closed account or a mismatched number, the sender receives a return notice during that waiting period, before any real money is at risk. You may encounter this when setting up direct deposit with a new employer.
Requesting a Verification Letter From Your Bank
For high-value transactions like mortgage applications, business contracts, or immigration filings, a third party may require written proof directly from your bank. This document, sometimes called a bank confirmation letter or verification of deposit, is issued by the financial institution itself and carries more weight than a screenshot or printout.
Request one by visiting a branch, calling customer service, or sending a secure message through your bank’s online portal. The letter typically includes your account number, routing number, the date the account was opened, the current balance, and the name on the account. Banks usually process these requests within a few business days and may charge an administrative fee that varies by institution.
Fannie Mae Form 1006 for Mortgage Applications
Mortgage lenders often use a standardized document called the Fannie Mae Request for Verification of Deposit, Form 1006, to confirm your financial standing. Your lender sends the form directly to your bank, and the bank fills in the account type, current balance, average balance over the previous two months, the date the account was opened, and any outstanding loans you hold there. You sign the form to authorize the release of that information. This is one of the few verification scenarios where a third party contacts your bank on your behalf rather than you providing the information yourself.
Spotting Fake Verification Requests
Scammers frequently disguise phishing attempts as bank verification requests. An email or text might claim there’s suspicious activity on your account, that your payment information needs updating, or that you must verify your details to avoid a freeze. These messages often look convincing, using familiar logos and urgent language.
The Federal Trade Commission warns that legitimate companies will not email or text you a link asking you to provide personal or financial information like your bank account number, Social Security number, or login credentials. If you receive an unexpected verification request, don’t click any links in the message. Log into your bank’s website directly by typing the address into your browser, or call the number on the back of your debit card. If the request was real, you’ll see it reflected in your account.
Red flags that indicate a fraudulent request:
- Generic greetings like “Dear customer” instead of your actual name.
- Urgency or threats claiming your account will be closed or frozen unless you act immediately.
- Unfamiliar URLs that don’t match your bank’s actual web address, often with slight misspellings or extra characters.
- Requests to reply with your password, PIN, or full account number by email or text.
When Verification Fails
Verification attempts fail more often than most people expect. The usual causes:
- Name mismatch. The name you enter must match the name on the account exactly. A middle initial versus a full middle name is enough to trip the system. Call your bank to confirm the exact name on file.
- Wrong routing number. Using a wire routing number when the system expects an ACH routing number, or the reverse, is a frequent mistake. Check which one is required before submitting.
- Transposed digits. Even one mistyped digit sends the verification to the wrong destination. Re-enter both numbers by reading them from your statement or online portal, not from memory.
- Closed or restricted account. Verification fails if the account is closed, frozen, or flagged. Banks report account problems to checking account reporting companies such as ChexSystems and Early Warning Services, and negative information can remain on your record for up to seven years.
- Bank doesn’t support instant verification. Some smaller banks and credit unions haven’t built connections to data aggregators. If instant verification keeps failing, switch to the micro-deposit method.
If you believe your checking account report contains inaccurate information that’s causing failures, you have the right to dispute it. Contact the reporting company in writing, and it must investigate and correct any errors.
Your Rights If Something Goes Wrong
If a verification error leads to money being sent to the wrong account or an unauthorized transfer, the Electronic Fund Transfer Act and its implementing regulation, Regulation E, protect you. The law sets out error resolution procedures and caps your financial liability, but the cap depends on how quickly you report the problem:
- Within two business days of learning about the issue: your maximum liability is $50.
- After two business days but within 60 days of receiving your statement: your maximum liability rises to $500.
- After 60 days: you could be responsible for the full amount of unauthorized transfers that occur after that 60-day window, with no cap.
Monitor your statements closely during and after any verification process. If you spot a transfer you didn’t authorize, report it to your bank immediately. The faster you act, the less you can lose.