what can someone do with bsb and account number

With just your BSB and account number, someone can mostly do one glamorous thing: send you money.

They generally can’t withdraw funds or empty your account; in Australia, pulling money needs a Direct Debit Request or PayTo mandate you’ve authorised, and dodgy debits can be disputed and reversed by your bank.

The real risks are social engineering and invoice‑redirection scams—trickery that gets you to pay the wrong person, or “authorise” a debit you never wanted.

Share details only with trusted payers, double‑check payee info, consider PayID to reduce misdirected payments, monitor statements/alerts, and call your bank immediately if anything smells off.