Should Employers Ask for Banking Information During Onboarding?

Disclaimer: This post is general information, not legal or financial advice. If you suspect identity theft, contact your country's free identity-support service immediately.

Yes — eventually. No — not yet. Whether an employer asking for banking information is reasonable depends entirely on when in the onboarding flow they ask, and which details.

Most modern job scams disguise themselves as onboarding paperwork. Knowing exactly what a real employer needs is the easiest way to spot the fakes.

What a real employer legitimately needs

After you have a signed offer letter on company letterhead, a real employer typically needs:

Your full legal name and address (for tax forms and payroll).
Your tax identification number — TFN (AU), NI number (UK), SSN (US), PAN (IN), or equivalent.
A bank account number and routing/BSB/sort code for direct deposit.
Government ID to confirm right to work (verified in person or through an established service like the UK's IDSP or Australia's VEVO).

That is it. Anything else is either premature or a scam.

What a real employer never asks for

🚩 Your bank login, password, or PIN.
🚩 Your card's full number, CVV, or expiry date.
🚩 A one-time passcode from your bank.
🚩 A photo of you holding your driver's licence — before a signed contract, sent to a personal Gmail.
🚩 Full passport scans before a contract exists.
🚩 Any payment from you — for training, software, equipment, visa processing, background-check fees.
🚩 You to receive a cheque or transfer and forward part of it elsewhere.

If any of the above shows up in "onboarding paperwork", treat the offer as fake until proven otherwise.

Timing matters

| Stage | OK to share | |---|---| | Application | Resume, cover letter, public links. Nothing else. | | Interview | Work history, references, portfolio. | | Offer received | Verify the company first (7-step check). | | Signed contract | Tax ID, bank account for payroll, government ID via a verified service. | | First day | Final ID checks at the office or with an established remote-verification service. |

If a recruiter asks for bank or ID details before the signed contract, you are either dealing with a disorganised company you do not want to work for, or a scam. Either way, push back.

How identity-theft "onboarding" scams work

The scammer offers a job, sends an enthusiastic welcome packet, and asks you to fill out:

A "direct deposit" form requesting your bank login.
An "I-9 / right-to-work" form with a photo of you holding your passport.
A "benefits enrolment" form asking for your full SSN, mother's maiden name, and date of birth.

You complete it. The job never starts. Your identity is sold or used to open credit lines.

What to do if you have already shared bank or ID details

Stop responding to the "employer".
Contact your bank. Tell them you may have shared details with a fraudster. Ask whether you should freeze the account or rotate the account number.
Contact a free identity-theft support service. IDCARE in Australia/NZ (1800 595 160), IdentityTheft.gov in the US, Action Fraud in the UK.
Place a fraud alert on your credit file. Equifax, Experian, TransUnion all accept free fraud alerts.
Walk through our damage-control checklist.
Run any further messages from the "employer" through our scam checker before you reply.

Want to be sure before sharing anything?

Read the longer job scam checker guide. It lists the specific patterns to look for in fake onboarding flows, and how to verify the recruiter, the company, and the offer in under 15 minutes.

Where to Report

🇦🇺 Australia: Scamwatch and IDCARE
🇺🇸 USA: FTC ReportFraud and IdentityTheft.gov
🇬🇧 UK: Action Fraud
🌐 International: Global Scam Reporting Directory

A real employer asks for the minimum information, at the right moment, through a verified channel. Anyone asking for more, sooner, or by Gmail is not your future employer.