What Does External Account Mean? Linking, Verification, and Rights

An external account is any bank or financial account held at a different institution from the one you’re currently signed into. So what does an external account mean in practice? If you’re inside your brokerage app and you want to pull cash from your checking account at another bank, that checking account is the external one. The label is about which company’s books the account sits on, not who owns the money. In most cases, both accounts belong to you.

Why the Label Is Relative

The same account can be internal in one app and external in another. A savings account at an online bank is internal when you log into that bank’s own portal. Open your investment platform or credit union app and try to connect it, and now it’s external. Each institution runs under its own charter and keeps its own ledger, which is why linking two accounts never merges them. It only builds a pipe between them so money can move.

What People Use External Account Links For

Most people link an outside account because they want to move money without walking into a branch or mailing a check. The common uses look like this:

  • Funding a high-yield savings account at a bank that pays a better rate than your everyday checking bank.
  • Sending cash to a brokerage or robo-advisor that holds accounts at a separate custodian.
  • Paying a credit card, mortgage, or auto loan held at a different lender.
  • Pulling balances from several banks into one primary account or one dashboard.

These moves almost always ride the Automated Clearing House (ACH) network, which processes payments in batches rather than instantly. ACH is cheap. Most banks don’t charge consumers anything for a standard ACH transfer, while a domestic wire typically runs $20 to $35. The tradeoff is speed. A standard ACH transfer settles in one to three business days, while a wire often lands the same day.1Federal Reserve Financial Services. FedACH Processing Schedule Same-day ACH exists for eligible payments, but your bank may not pass that option through for consumer transfers.

What You Need to Link One

Two numbers do most of the work:

  • The routing number, a nine-digit code identifying the external bank or credit union. It sits at the bottom left of a paper check and inside the bank’s online portal. Only federally or state-chartered institutions eligible for a Federal Reserve master account are assigned one.2American Bankers Association. ABA Routing Number
  • The account number, which points to your specific account at that bank. It appears on statements and in the online banking dashboard.

You’ll also tell the platform whether the account is checking, savings, or money market, because the receiving institution uses that to route the transaction. Copy both numbers exactly. A single wrong digit can send money to the wrong account or bounce the transfer.

Most platforms only let you link accounts you personally own. On a joint account, the names generally have to match. Business and personal accounts usually can’t be cross-linked, since a personal brokerage will reject a business checking account when the ownership names don’t line up.

How Verification Works

Before any money moves, the platform has to confirm you actually control the external account. There are two common ways this happens.

Instant Verification

Many platforms use a third-party aggregator service. You log in to your external bank through an encrypted connection inside the aggregator, which confirms the account exists and belongs to you, and the link goes live immediately. It’s fast. The catch is that you’re handing your online banking username and password to a third party, which is covered further down.

Micro-Deposit Verification

If instant verification isn’t offered, or you’d rather not share credentials, the institution sends two small deposits (each under $1.00) to your external account. They usually arrive within one to three business days.3U.S. Bank. What Are Microdeposits? You log back into the requesting platform, type in the exact cent amounts, and that proves you can see inside the external account. Some institutions give you a limited window, often around 15 days, to confirm before the verification attempt expires.

Transfer Limits, Timing, and Fees

Once the link is active, you can start sending and receiving. Banks set their own daily, per-transaction, and monthly dollar caps on ACH transfers, and they vary widely. Some institutions cap transactions at $1,000 while others allow $25,000 or more per day. Check the policy before you schedule something large. If you need to send more than your cap, you can split the transfer across days or ask for a temporary limit increase.

Standard ACH settles the next business day, though your bank may hold funds an extra day or two before making them available.1Federal Reserve Financial Services. FedACH Processing Schedule Same-day ACH is available for payments up to $1 million per transaction, but not every bank passes it through to consumer accounts.4Nacha. ACH Payments Fact Sheet

Standard ACH transfers between linked accounts are free at many banks, but not all. A few costs worth checking:

  • Outgoing transfer fees, especially for expedited or same-day delivery. Check both the sending and receiving bank.
  • Stop payment fees if you need to cancel a pending or recurring ACH, often $15 to $36.
  • Returned-item fees from either bank if a transfer fails for insufficient funds or wrong account details.
  • Wire fees of $20 to $35 for a domestic outgoing wire if you skip ACH.

Your Rights if an Unauthorized Transfer Happens

Electronic transfers between linked accounts fall under the Electronic Fund Transfer Act and Regulation E.5eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers If someone pulls money from your account without permission, how much you can lose depends on how fast you report it:

  • Report within 2 business days: your maximum loss is $50, or the amount transferred before you notified the bank, whichever is less.
  • Report after 2 business days but within 60 days of your statement: your maximum loss rises to $500.
  • Report after 60 days from the statement date: you could lose the entire amount of any unauthorized transfers that happen after that 60-day window, with no cap.

The 60-day rule is the one most people miss. Even if the breach wasn’t your fault, failing to review statements and flag unauthorized activity within 60 days can leave you on the hook for every dollar taken after that deadline.6Office of the Law Revision Counsel. 15 U.S. Code 1693g – Consumer Liability Set a monthly reminder to review statements from every linked account. Call the bank first when something looks wrong, and follow up in writing if they ask.

The Credential-Sharing Risk

Instant verification means typing your bank username and password into a third-party aggregator. These services often use screen scraping, logging into your bank on your behalf and reading your data, sometimes pulling more than the account number, including balances and transaction history.

These third parties aren’t always held to the same federal data-protection standards as your bank. If an aggregator is breached, your financial information could be exposed, and your remedies may be more limited than they would be against a regulated bank. A few habits reduce the exposure:

  • Pick micro-deposits over instant verification when you have the choice. The method never requires sharing a login.
  • Review connected apps inside your online banking settings. Most banks now show which third-party services have access to your data under a “manage third-party access” or “data sharing” menu.
  • Revoke access you no longer need. If you linked an account for a single transfer and don’t use the service anymore, disconnect it to stop ongoing data collection.
  • Change your bank password after revoking access if you had used credential-based linking.

What’s Changing Under the CFPB’s 1033 Rule

The Consumer Financial Protection Bureau finalized its Personal Financial Data Rights rule under Section 1033 of the Dodd-Frank Act, and it will reshape how account linking works over the next several years.7CFPB. CFPB Finalizes Personal Financial Data Rights Rule Banks and financial providers will have to share your account data, including transactions, balances, and payment details, with any third party you authorize, at no cost to you.

The rule adds consumer protections too. Third parties can only collect and use your data to deliver the specific product you asked for, not to feed unrelated uses like targeted advertising. You can revoke access at any time, and the revocation has to be simple rather than buried. Once you revoke, the third party must delete your data by default. Authorization expires after one year unless you actively renew it.

Compliance phases in by institution size. Banks with $250 billion or more in assets must comply by April 1, 2026. Those with $10 billion to $250 billion in assets have until April 1, 2027, and smaller institutions have later dates running out to April 1, 2030.8CFPB. Section 1033.121 Compliance Dates As those dates arrive, linking an external account should become more standardized and less dependent on handing your bank password to a middleman.