To verify a bank account number, you confirm that a specific routing number and account number belong to a real, open account in the name you expect. Three methods do this job: instant verification through a data aggregator, micro-deposit confirmation, and a written verification letter issued by the bank. Which one fits depends on how fast you need the answer, how much the transaction is worth, and how comfortable you are sharing banking credentials with a third party.
What You Need Before You Start
Every method relies on the same three pieces of information: the bank’s nine-digit routing number, the account number, and the full legal name on the account. A mismatch between the name you provide and the name on file is one of the most common reasons verification fails.
The bottom of a personal check is the fastest place to find both numbers. The first nine digits on the left, printed in magnetic ink, are the routing number. The next set of digits is the account number, followed by the check number. If you don’t have checks, your monthly statement lists both numbers near the top, and you can also find them by logging into your bank’s online portal and opening the account details page.
ACH Routing Numbers vs. Wire Routing Numbers
Some banks use different routing numbers for electronic transfers and wire transfers. An ACH routing number handles batch transactions like direct deposits and bill payments. A wire routing number directs individual real-time transfers between banks. At smaller institutions the two are often identical, but larger banks frequently use separate numbers. Submitting a wire routing number where an ACH number is expected, or the reverse, will cause verification to fail or route a payment through the wrong channel. Check your bank’s website or call customer service if you aren’t sure which one the requesting system wants.
Instant Verification Through a Data Aggregator
Instant verification is the fastest option and the one you’ll meet most often when linking a bank account to a payment app, investment platform, or budgeting tool. Services like Plaid, Finicity, and MX connect directly to your bank through secure data links and confirm the account in seconds.
The flow is familiar. A secure window appears inside the app or website, you pick your bank from a list, and you log in with your online banking credentials. On modern systems, that login doesn’t happen inside the third-party app. A protocol called OAuth redirects you to your bank’s own login page, your bank authenticates you directly, and it issues a temporary digital token to the verification service. The token grants limited, specific access to confirm the account without exposing your password.
Data minimization governs what the aggregator shares. If the requesting app only needs to confirm a checking account for payments, the service will not hand over data about savings accounts, credit cards, or transaction history. You can generally see which apps you’ve connected, and revoke access, through the aggregator’s consumer portal or through the third-party app’s settings.
The Consumer Financial Protection Bureau’s Personal Financial Data Rights rule strengthens this control. When you revoke a third party’s access, the revocation takes effect immediately and deletion of your data becomes the default. Access cannot last longer than one year without your express reauthorization, and third parties can only collect and use your data to deliver the specific product you requested — not retain it for unrelated business purposes.
Micro-Deposit Verification
When instant verification isn’t available, or you’d rather not share online banking credentials, micro-deposits are the standard fallback. The requesting company sends two small transfers, typically between one cent and ninety-nine cents, to your account. They usually appear in your transaction history within one to three business days.
Once you see the deposits, log into the verification portal and enter the exact amounts. Reporting both values correctly proves that the account exists and that you have authorized access to it.
Watch the clock. Many providers set an expiration window, often around ten days from when the deposits are initiated, after which the verification request expires and you start over. If the deposits haven’t posted after three business days, check that the routing and account numbers you submitted were correct. A single transposed digit can send the deposits to the wrong account or bounce them back.
Prenote Verification for Direct Deposit
Employers and payroll processors sometimes use a related method called a prenote, short for prenotification. A prenote is a zero-dollar test transaction sent through the ACH network to confirm your routing and account numbers can receive deposits. No money moves. Under Nacha rules, the sender must wait at least three banking days after the prenote before sending an actual payment. If the account is closed or a number is wrong, the sender receives a return notice during that window, before real money is at risk. You’ll typically see this when setting up direct deposit with a new employer.
Requesting a Verification Letter From Your Bank
For high-value transactions — mortgage applications, business contracts, immigration filings — a third party may require written proof directly from your bank. This document, sometimes called a bank confirmation letter or verification of deposit, is issued by the financial institution itself and carries more weight than a screenshot or printout.
Request one by visiting a branch, calling customer service, or sending a secure message through the online portal. The letter typically includes the account number, routing number, the date the account was opened, the current balance, and the account holder’s name. Processing usually takes a few business days, and banks may charge an administrative fee that varies by institution.
Fannie Mae Form 1006 for Mortgage Applications
Mortgage lenders often use a standardized form called the Fannie Mae Request for Verification of Deposit, Form 1006, to confirm your financial standing. The lender sends the form directly to your bank, and the bank fills in the account type, current balance, average balance over the previous two months, the date the account was opened, and any outstanding loans you hold there. You sign the form to authorize your bank to release this information. This is one of the few verification scenarios where a third party contacts your bank on your behalf rather than you supplying the information yourself.
Why Verification Fails and How to Fix It
Verification attempts fail more often than most people expect. The common causes:
- Name mismatch. The name you enter must match the name on the account. A recent name change, or a difference between a middle initial and full middle name, can trip the system. Contact your bank to confirm the exact name on file.
- Wrong routing number type. Using a wire routing number where an ACH routing number is expected is a frequent mistake. Confirm which is required before submitting.
- Closed, frozen, or flagged account. Verification will fail if the account has been closed or restricted. Banks report account problems to checking account reporting companies such as ChexSystems and Early Warning Services, and negative information can remain on your record for up to seven years, though some reporting companies disregard information older than five years. If you believe your report contains errors, you have the right to dispute it in writing, and the reporting company must investigate and correct any inaccuracies.
- Transposed digits. Re-enter both numbers carefully, checking against a statement or the online portal rather than typing from memory.
- Bank not supported by the aggregator. Some smaller banks and credit unions haven’t built connections to data aggregators. If instant verification keeps failing, switch to the micro-deposit method.
Telling a Real Verification Request From a Fake One
Scammers frequently disguise phishing attempts as bank verification requests. An email or text might claim there’s suspicious activity, that payment information needs updating, or that you must “verify” your details to avoid an account freeze. Familiar logos and urgent language make these messages look convincing.
The Federal Trade Commission warns that legitimate companies will not email or text you a link asking you to provide personal or financial information like your bank account number, Social Security number, or login credentials. If a verification request arrives unexpectedly, don’t click the links in the message. Log into your bank’s website directly by typing the address into your browser, or call the number on the back of your debit card. If the request was real, you’ll see it reflected in your account.
Signs of a fraudulent request:
- Generic greetings like “Dear customer” instead of your actual name.
- Urgent threats that your account will be closed or frozen unless you act immediately.
- URLs that don’t match your bank’s actual web address, often with slight misspellings or extra characters.
- Requests to reply with your password, PIN, or full account number by email or text.
Your Rights If a Transfer Goes Wrong
If a verification error leads to money being sent to the wrong account, or an unauthorized transfer follows, the Electronic Fund Transfer Act and its implementing regulation, Regulation E, protect you. The law sets error resolution procedures and caps your liability based on how quickly you report the problem.
- Within two business days of learning about the issue, your maximum liability is $50.
- After two business days but within 60 days of receiving your statement, your maximum liability rises to $500.
- After 60 days, you could be responsible for the full amount of unauthorized transfers that occur after that window, with no cap.
Monitor your statements closely during and after any verification process. If you see a transfer you didn’t authorize, report it to your bank immediately. The faster you act, the less you stand to lose.