All a criminal needs is a bank account number and routing number, and they can steal money from a bank account through something called a fraudulent ACH, or Automatic Clearinghouse House, transfer.