Account Number

What is an account number?

In a banking or payment form, an account number identifies the particular account involved in the transaction. It directs the receiving institution to the customer account concerned. Separate details may identify the institution, branch, or payment route. Australia’s consumer regulator describes an account number as the number a bank or other financial institution gives to a particular account. The Bank of England’s work on account-to-account payments also treats it as an identifier assigned when a digital-money account is created.

There is no universal format. A UK account is typically described by an eight-digit account number and a six-digit sort code. Australian payment procedures allow an alphanumeric account number that must be unique within its BSB. Countries that use IBAN have their own national structures: the IBAN Registry records different lengths and components by country. Digit count alone cannot establish which details a payment form needs. Check the labels and instructions for the relevant country, institution, and transfer type.

The label also has a broader meaning outside banking. A provider may use “account number” for a customer or service-account reference. West Northamptonshire Council, for example, uses the term for a Council Tax reference. On a bill, portal, or request form, the surrounding document tells you whether the field calls for a bank-account identifier or a customer reference.

How does a bank account number work with other payment identifiers?

Payment instructions often pair an account number with system-specific information for the receiving institution, branch, or route. The combination depends on the country and payment rail. U.S. ACH records hold the routing number and account number in separate fields. UK account-to-account payments commonly use an account number with a sort code, while Australian procedures identify an account by its BSB and account number. Follow the receiving institution’s instructions for the transfer you are making.

Account number vs. routing number, sort code, and BSB

These identifiers serve different purposes. The account number points to the customer account. A routing-number, sort-code, or BSB field supplies the institutional or branch context required by a particular payment system. Enter each one in the field the payment form specifies.

For a U.S. ACH entry, the Federal Reserve’s FedACH guide lists the receiving depository financial institution’s nine-digit routing number separately from the account number. The Federal Reserve’s routing directory contains institutional routing information for participating payment services. It cannot look up a customer account or establish who owns one.

In the UK, an account number is typically eight digits. Combining it with a six-digit sort code routes an account-to-account payment to the correct account, according to the Bank of England. In Australia, the six-digit BSB represents the bank and branch or system where the account is held. The account number is unique within that BSB under the Australian Payments Network’s procedures.

These examples are specific to their jurisdictions. A routing number, sort code, or BSB may help route a payment through the relevant system, but it neither replaces the account number nor proves that a particular person controls the account. Check the instructions for the receiving country, institution, and transfer type before supplying the details.

Account number vs. IBAN and SWIFT/BIC

An IBAN is a structured international account identifier. In countries with registered IBAN formats, it combines a country code, check digits, and a country-defined Basic Bank Account Number (BBAN). The BBAN includes a bank identifier and identifies the account at the specified institution and country. The IBAN Registry shows how the permitted length and components vary by country.

An IBAN therefore differs from a standalone domestic account-number field and an institution-routing code. It supports cross-border processing, but not every country uses IBAN, and a transfer may require other information. Use the full set of details specified by the receiving institution and payment method.

A BIC has another role. The ISO 9362 registration authority defines it as a business-party identifier used to address messages, route transactions, and identify financial or non-financial institutions. It does not identify a customer’s deposit account or verify its owner. A BIC alone also does not establish that the named party is connected to the Swift network, because the standard distinguishes connected and non-connected BICs. The payment instructions determine whether one is needed.

Account number vs. a debit or credit card number

The number on a debit or credit card is a payment-card number, also called a primary account number (PAN). The PCI Security Standards Council glossary defines a PAN as the unique payment-card number that identifies the issuer and cardholder account. It belongs to the card-payment system and differs from the deposit-account number used for bank-account payments.

In the U.S., the Federal Reserve’s commentary on Regulation II distinguishes a card transaction from an ACH debit initiated with an account number and routing number. A debit card may be connected to a bank account, but its visible card number is not the deposit-account field requested on an ACH form. A credit-card number serves the card-payment relationship and cannot substitute for a bank-account number.

Read the label on the payment form: a card-number field calls for the PAN, while separate account-number and routing fields call for bank-account details. If the label is unclear, ask the financial institution or payment provider through an official channel before submitting anything.

Where can you find and confirm an account number?

Start with a current statement or an authenticated online or mobile-banking service. For its UK current accounts, HSBC lists statements and online or mobile banking as places to find the number. A cheque or debit card may also show it for some institutions and account types, but neither is a universal source. Some U.S. checking accounts are checkless, as the FDIC notes, so there may be no paper cheque to consult. If a form is unclear, confirm the requested detail through the financial institution’s official channel.

Why check layouts and account types matter

There is no safe universal left-to-right rule for reading the numbers on a cheque. In the United States, the MICR line may contain a routing number, account number, cheque number, amount, and other information under Regulation CC. Australian cheque specifications likewise define separate account-number, BSB, and serial-number fields, while leaving the account-number format to the financial institution. The cheque or serial number is a separate field and cannot substitute for the account number.

Use the institution’s own instructions to identify the right field on its cheque or other document. A layout from one country, bank, or product may not apply to another.

Confirm the account type and any companion details required by the payment request as well. A U.S. Treasury direct-deposit change form, for example, asks for the routing number, financial-institution name, account number, account type, and account name. This is one example of instructions that need more than two numbers, rather than a universal field list. Match the account type and details to the selected payment method.

How should a business use account numbers for contractor payments?

Collect the receiving details required by the payment method, receiving country, and financial institution. In the U.S. wire-transfer example from the Office of the Comptroller of the Currency, the sender first confirms that both institutions can handle the transfer, then gathers the recipient’s account number, routing number, and bank address. Other instructions may call for fields such as the account type or account name. Contractors do not have a special universal account-number format.

Confirm new or changed payment instructions through a known secondary channel before relying on them. The FBI’s business email compromise guidance recommends checking account-information changes with the intended recipient through a secondary channel or two-factor authentication. This confirms the instruction through an independent contact path. By itself, it does not establish account ownership.

What should be validated before an ACH payment or debit?

Start by identifying the ACH transaction and the question the check needs to answer. For a U.S. ACH WEB debit, meaning a consumer debit payment authorized or initiated online, an Originator’s fraud-detection system must include account-number validation before first use and when a customer changes to a new, previously unused account number. A change sent by the receiving depository financial institution (RDFI) through the Notification of Change process already serves as validation if the Originator applies it correctly. The Nacha Account Validation Resource Center and WEB-debit rule guidance limit the requirement to this transaction type. It does not govern every ACH credit, contractor payment, wire, card transaction, or non-U.S. payment.

At minimum, the Originator must use a commercially reasonable means to determine whether the account is legitimate, open, and able to accept ACH entries. This minimum does not itself require ownership verification, although that check may still be appropriate for an Originator’s business model and risk profile. Nacha also says that, depending on all relevant facts and circumstances, a commercially reasonable method may remain compliant when a particular attempt returns no positive or negative result, or “no hit.” The rule still requires an account-validation component; a no-hit result is not automatic permission to proceed. A correctly formatted number, or even an account-status check, does not prove that the intended payee or authorizer owns the account. Account status and ownership answer different questions.

Nacha’s rule is method- and technology-neutral. Its examples include a prenotification entry, ACH micro-transaction verification, a commercially available ODFI or third-party validation service, and API-enabled validation. These are options, rather than prescribed technology or a guarantee of any outcome. Choose controls for the particular question at issue, whether that is account status, ownership, authorization, or a changed payment instruction.

The WEB-debit requirement does not apply merely because a business sends a contractor an ACH credit. For that credit, follow the selected payment provider’s and receiving institution’s instructions and choose independent checks suited to the process and risk.

How should account details be handled safely?

Provide account details for a legitimate payment purpose through an expected or independently verified channel. If an unexpected request asks for account information or changes payment instructions, contact the person or organization using a phone number, website, or other method already known to be genuine. The FBI’s business email compromise guidance recommends a secondary channel for account-information changes. The Consumer Financial Protection Bureau directs consumers to trusted websites and phone numbers for financial institutions and reporting agencies.

An account number is payment information, not proof of identity, ownership, or authorization. A valid format, an account-status result, a payee-name match, and an ownership or authorization check each answer a different question. Select the checks required for the transaction instead of treating one detail as a complete payment credential.

Be cautious with unsolicited phone or internet contacts that ask you to verify account information. The Office of the Comptroller of the Currency’s phishing guidance warns U.S. bank customers against providing account numbers through unsolicited contacts and says banks do not ask customers to verify account information online. End the unsolicited exchange and use independently obtained official contact details.

If you suspect fraudulent instructions or an unauthorized transfer, contact the relevant financial institution promptly through trusted contact details. The FBI advises contacting the originating institution as soon as fraud is recognized to request a recall or reversal. Prompt contact may improve the available response options. Recall, reversal, reimbursement, or recovery depends on the jurisdiction, payment rail, account type, and circumstances.