16

My employer wants me to give my routing-numbers, social-security numbers, and basically everything else required to take money out of my account, to several third-party direct-deposit websites (one for weekly paychecks, one for mileage reimbursements, etc.). I am not comfortable giving my identity information away to all these places.

I'd like to give them access to an account which they can only deposit into, never withdraw (either a separate account, or, even better, a deposit-only alias to my real account). Does such a thing exist?


[Edit] I'm not worried about the companies so much as I am worried about bad guys who inevitably hack those companies' databases, or get hired to work there.

This type of account would also be handy for giving read-only access to sites like mint.com or quicken.com, easing my mind about their hackers/unscrupulous employees.

6
  • 11
    If it's deposit-only, how are you planning to get the money out of it?
    – Mike Scott
    Commented Feb 2, 2011 at 20:14
  • 2
    @Mike: In person, or on their website. My point was that the money can't be withdrawn with a check or debit-card. Commented Feb 2, 2011 at 23:43
  • 11
    A new product say;there is a Account that accepts deposits. Does not allow any withdrawls by any means. Has a facility to auto-sweep the funds into another account. Thats the only debit possible on the account. Then this would be safe, were we can communicate all the details of first accounts for deposits. Restrict the details of second accounts and if we feel there is a risk of info getting leaked, create a 3rd account and use it for debits. Moving the funds from 2nd Account as required.
    – Dheer
    Commented Feb 3, 2011 at 7:55
  • 14
    @P.Brian.Mackey - I've gotten more than one letter from a "pretty well protected" facility over the past few years saying "we're sorry, but your information may have been stolen" for one reason or another. If you follow this sort of news, you'll see a near constant stream of information leaks. You often have to give up your info and hope for the best, but I never trust that they're going to get it right.
    – bstpierre
    Commented Feb 7, 2011 at 3:36
  • 4
    Bit late to the party, but something along these lines exists in Europe. E.g. I have one account that is deposit-only with exactly one exception, a so-called reference account (can be and is in my case at another bank): withdrawals from the "deposit-only" account can only ever go to that reference account, and changing the reference account is a somewhat tedious procedure ;-). But then our account numbers are not secret in the sense that having the account number anyways allows only deposits, no withdrawals (with some exceptions that have other mechanisms for protection, though).
    – cbeleites
    Commented Jul 28, 2018 at 21:48

9 Answers 9

20

Do you write checks? You are giving your bank account and routing number to anybody you have ever given a check to. Your employer is paying taxes on your behalf, so they need your social security number so they can pay your social security taxes.

Account and routing numbers are how deposits are made. If you are concerned, create a free checking account, collect the direct deposit and each payday go to the bank and withdraw your money to put it where you like.

Nothing is deposit only because you will want your money back.

Finally, you would be shocked at how little it takes to make a draft on your account in the US. Certainly not your SSN, Address, or even your name.

4
  • 4
    "Do you write checks? You are giving your bank account and routing number to anybody you have ever given a check to" - That's exactly my point. I'd like to be able to give out my bank account + routing number (by writing checks, etc) without having to worry about fraud. It's the 21st century, how is this not a thing yet!? Commented Dec 3, 2016 at 17:41
  • 1
    @BlueRaja-DannyPflughoeft How do you intend to write a check if the number it uses is deposit-only?
    – glglgl
    Commented Jul 30, 2018 at 11:12
  • 1
    @glglgl You wouldn't, that's the point. To use the money you'd need to move it to a different account (using their web interface or going in in-person or whatever) Commented Jul 30, 2018 at 15:54
  • 5
    @BlueRaja-DannyPflughoeft But you mentionned it. And as soon as you write out a check, the receiver has your "spending" account number. So that thing just won't work.
    – glglgl
    Commented Jul 31, 2018 at 8:52
7

There is such a thing as Deposit Only. This will allow the individual's account to function only for collection of monetary deposits. NO ONE will be able to withdraw...only deposit. The account holder may still physically withdraw at their banking institution. Think of it as taking your account from a "public" profile to a "private" profile. Doing this is beneficial for ppl who may have been scammed into a program or product where there account is bieng fraudulently overdrafted, or simply to protect your funds from bieng drafted without your approval or despite your requests for ceasing the drafts.

When making your account a deposit only account it's a good idea to open a NEW account at a Different banking institution, because some banks will still allow an account that is "attached" to the deposit only account to be drafted from it. WIth the new account you can utilize that one for paying day to day bills and just transfer funds from the deposit only account to the new account.

A deposit only account is also a good way to build up a nice nest egg for yourself or even a young adult!

source- Financial Adivsor 4years-

2
  • 1
    Is this a common feature for banks/credit unions? Or do only some offer it? Is "deposit-only" the "official" name for this type of account? Commented Sep 28, 2011 at 20:40
  • because some banks will still allow an account that is "attached" to the deposit only account to be drafted from it. and some banks also make it impossible to not attach all your accounts together, i.e. they use some common identifier such as SSN as the "index" into your account, meaning you can't actually have two separate accounts which aren't linked.
    – user12515
    Commented Aug 5, 2015 at 4:05
7

I would suggest opening a bank account that you use to accept deposits only, and then get a system set up where it automatically transfers the money over to your main account. If not instantly it could transfer the money hourly or daily.

Of course you would have to pay a premium for this "peace of mind" ;)

1
  • 1
    You wouldn't have to pay a premium for that. Normal bank accounts can transfer money for free
    – Daniel
    Commented Jun 14, 2021 at 13:17
6

Usually the most significant risk scenarios here are:

  1. Compromise of your electronic banking credentials where hackers send your money off someplace. (Especially for commercial accounts -- consumer accounts have some State and Federally mandated protections)
  2. Theft of checks, fraudulent use of routing/account numbers, or similar scenarios.

Third parties can abuse your routing/account numbers to initiate debits, but this is a type of fraud that is easily traced. It can happen, but it is more likely that it would be a scenario where you were specifically targeted vs. the victim of some random fraud. Defending against someone who is specifically going after you is very difficult, especially if you don't know about it.

Your SSN isnt used for the bank transfer, you are providing it so that the entity making the payments can report on payments to you for tax purposes.

If you are truly worried about this type of scenario, I suggest setting up a dedicated savings account for the purpose of receiving these payments and then sweeping (either manually or automatically) the funds into another account. Most stock brokers will allow you to automate this, and most banks will let you do this manually.

5

Legally, no one else can withdraw from your account. If you suspect the direct-deposit websites are making withdrawals, you can monitor your account balance and dispute any transactions that were not made by you.

But realistically, any company that did that would soon be out of business and in so much legal trouble that it wouldn't be worth the money they could get from you.

2
  • 4
    It's not them I'm worried about; as a professional software-developer, I know how hard it is to secure a website, and I also know how often (very, very often) developers who don't know the first thing about software security (it is hardly taught at school, if at all) for positions that really should require security experts. Commented Feb 2, 2011 at 23:47
  • @BlueRaja-DannyPflughoeft - This it to sadly true. I have looked at the data stored by some big name ECommerce solutions that the default setting its unencrytped personal information. Some of them make it impossible to do it seemlessly. It scares the hell out of me.
    – user4127
    Commented Sep 28, 2011 at 20:53
1

According to this answer, Wells Fargo supports read-only sub-accounts, and Capital One is in the process of supporting them.

It sounds like both are difficult to get to work with third party processors like Mint.com, though. Ugh!

1

If you have enough money at an institution, additional accounts are often free. As may folks noted, set up checking accounts that you use for deposit or electronic payment only. Once a week or so, log in and move any money from that account to your main or protected account. This is the process that is used by many large companies.

PS: knowing what is going "out" of the electronic payment account is tricky, especially if you have automatic drafts for variable bills, like utility bills. One solution is an overdraft protection on that account. It may cost you money if exercised, but better than what it will cost you to bounce payments.

0

Aside from the automated part, I can do this right now:

I have a checking account and 2 savings accounts. The second savings account was started when they gave a short term 5% for new deposits. So I opened the new high interest savings account and moved all but $4 from the old account.

I could now set up interac autodepost to that account for here in canada. Use that account for deposits, then peridically move all but the minimum to the other savings account.

For interac payments all you need to do is give the payer your email address. I don't see why that wouldn't work for paypal.

0

Simple solution: Two bank accounts, one that receives the payments and one that you keep the rest of your money in. Schedule a periodic automatic transfer from the first to the second to sweep your income across. They can be in the same bank, to make that sweep easier.

It might be enough to just use your checking account as the exposed one and your savings account as the hidden one. As others have noted, writing a check expires all that information anyway, so it isn't significant new risk... and checking accounts typically pay low interest so you want most of the money in the savings account anyway.

That does what I need, anyway. You may have other concerns.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .