Employers normally ask for bank details after hiring you, when setting up payroll. An account number and payment-routing details can be normal; your online banking password, PIN or one-time security code are not payroll details. Verify the employer and the request before sharing anything sensitive.

If a job application asks for bank details before an interview, pause. The US Federal Trade Commission (FTC) identifies requests for personal financial information at that stage as a likely job scam. An offer letter alone does not verify who is collecting your information.

What bank details do employers need?

For ordinary payroll deposits, employers need details that identify the account receiving your wages. The exact fields depend on your country and payroll system.

Account holder name and bank account number: can be normal when setting up payroll with a verified employer.
Routing number, BSB or sort code: identifies where a payment should go; the name varies by country.
Bank name or bank address: ask payroll which field they need and why. Confirm the details with your bank if unsure.
Online banking login, password, PIN or security code: do not give these to an employer or recruiter. They provide account access or authorise actions.
Card number, expiry date or CVV: these are card payment details, not the account details needed for an ordinary payroll deposit. Question the request.

For Australia, myGov lists account name, BSB and account number as the bank details to provide when starting a job. Employers also request tax file number and superannuation information for separate payroll purposes. That does not mean giving anyone access to your myGov or banking account.

When should you share bank or identity details?

Application or before an interview: leave bank details off your resume and application. If someone says they need them to assess your suitability, ask why and independently check the recruiter before continuing.

During recruitment: some identity checks can be legitimate before employment begins. For example, the FTC says a US employer may request a Social Security number during the interview process for a background check. An identity-document request is therefore not automatically a scam, and a signed contract is not a universal dividing line. Confirm the purpose, recipient and secure submission method first. FTC background-check guidance

After hiring, during onboarding: bank details for direct deposit are expected. Still verify the payroll contact and portal independently. A realistic welcome pack or company logo cannot establish that the sender works for the company.

How to verify an onboarding request

Find the employer independently. Use a company website or telephone number you locate yourself, rather than relying on links or numbers in the message.
Confirm the person and role. Ask the company whether the recruiter, job offer and payroll request are genuine. Scamwatch recommends contacting recruitment agencies using independently sourced numbers.
Check the collection method. Ask HR to confirm the exact payroll portal or document-upload service and explain any unexpected fields. A personal email address warrants checking; an official-looking address also needs verification.
Share only what the verified process requires. If the explanation remains unclear, pause and speak to the employer through the contact you verified.

Use our company verification checklist for a fuller check of the business and recruiter.

Stop if the job asks you to move money

An employer sending a cheque and asking you to buy equipment from a designated supplier, return an overpayment or forward money is a serious warning. A bank making funds available does not prove the cheque is genuine; a fake can be discovered later. FTC fake-check guidance

Do not pay for the promise of a job, buy gift cards for a recruiter, or use your personal account to receive and forward other people's payments. If an unexpected job-related charge appears, verify it independently before paying. FTC job-scam guidance

Already shared details with a suspected scammer?

Contact your bank promptly. Explain exactly what you shared or paid and follow its advice. Account details, a password and an authorised transfer need different responses.
Change compromised passwords and stop contact. Scamwatch recommends contacting your bank immediately if money or personal information has been lost. Scamwatch recovery steps
Get identity support if documents or identity numbers were exposed. Use IDCARE in Australia and New Zealand or IdentityTheft.gov in the US. Credit-protection options depend on your country and situation.
Report the incident. Use Scamwatch, FTC ReportFraud or the relevant service in our global reporting directory.

If you want help spotting warning signs in a recruiter's message, check the message after removing bank details, identity numbers, passwords and document images. A checker can flag suspicious patterns; confirm the employer independently before sharing personal information. Our job scam guide and damage-control checklist cover the next steps.

This is general information. Payroll and identity-check requirements vary by country and employer.

What Bank Details Do Employers Need? What to Share Safely