"Is it safe to give someone a voided check?" is the right question to ask before you hand one over, because a voided check is not nothing — it carries real account details. The honest answer is that it is reasonably safe to give to a party you trust and have a real reason to deal with, and risky to scatter carelessly. The difference comes down to what is actually printed on the check, what someone could and could not do with it, and the protections that sit behind your account. This guide walks through all three so you can decide with clear eyes.
For the fundamentals of what a voided check is and how to make one, see our explainer on what a voided check is. Here we go deep on one thing only: the safety question.
What information is actually on a voided check?
A voided check exposes a specific, limited set of details — and, just as importantly, omits others. Knowing exactly what is on it tells you how much exposure you are accepting.
- Your bank's routing number — a public nine-digit code identifying the bank; the same number is shared by every customer of that bank and is not secret.
- Your account number — the identifier for your specific account. This is the genuinely sensitive number.
- Your name, and usually your address — printed in the top-left corner.
- The check number — harmless on its own.
What a voided check does NOT contain matters just as much: there is no PIN, no online-banking username or password, no card CVV, no Social Security number, and no signature if you voided it correctly. So a voided check cannot be used to log into your bank, reset your credentials, or impersonate you for identity theft the way a full identity profile could. The exposure is real but bounded — it is account information, not account access.
What's the real risk — and what isn't?
The headline risk is not that someone "cashes" a voided check; the VOID mark makes that impossible, and an unsigned voided check has no valid signature anyway. The actual risk is that your routing and account numbers, in the wrong hands, can be used to attempt an unauthorized ACH debit — instructing the ACH network to pull money from your account, the same mechanism a legitimate biller uses for autopay. This is the core of what security professionals call ACH fraud.
Two things keep this risk modest for a normally shared voided check. First, an attacker needs more than your numbers to make a debit stick and stay — fraudulent ACH debits are traceable and reversible, and banks monitor for them. Second, federal law puts the recovery on your side. Under the Electronic Fund Transfer Act and Regulation E, an unauthorized electronic transfer is an "error" you can dispute: if you report it within 60 days of the statement that shows it, your liability for unauthorized transfers is sharply limited, and your bank must investigate and correct genuine errors on a defined timeline. The CFPB and Nacha both describe these protections in detail.
Who should — and shouldn't — get a voided check?
Safety is mostly about the recipient and the channel, not the document. Give a voided check only to a party you have an established, legitimate reason to deal with, and send it in a way you can verify.
- Safe to give: your actual employer's payroll department, a known lender or mortgage servicer, an established utility or insurer, a brokerage you are opening an account with — recipients with a clear reason to need verified account details.
- Be cautious: anyone who contacted you unexpectedly, a "job" that asks for a voided check before you have signed an offer, a buyer or seller on a marketplace, or any request that arrives by cold email, text, or social media.
- Do not give: anyone you cannot independently verify, anyone pressuring you to send it fast, or any address or upload link you reached by clicking a link in an unsolicited message — classic signs of a scam harvesting account numbers.
When you do send one, prefer the recipient's official secure portal or in-person handoff over plain email. Email is unencrypted by default, so a photo of a voided check sent to the wrong address — or intercepted — exposes your account number. If you must email it, confirm the address directly with the recipient first.
If something goes wrong: your right to claw it back
The reassuring backstop is that you are not stuck with an unauthorized debit. If a company you authorized for autopay keeps charging you after you cancel, the CFPB says you can revoke permission by telling the company and then your bank — ideally in writing — and that after you do, "any additional payments initiated by that company would be errors, and you can contact your bank for a refund." If a debit appears that you never authorized at all, report it to your bank promptly; under Regulation E your protection is strongest when you act quickly, and the bank must investigate. Acting fast — well inside the 60-day window — is what keeps your liability at or near zero.
So: is it safe to give someone a voided check? Yes, to the right recipient, through the right channel, with the numbers handled with care — and with the comfort that the law gives you a way to undo a debit that should not have happened. The danger is not the document itself but giving it to someone who should never have had it.