If you have connected your bank account to Truss, you might notice that your account numbers look different when you log into the platform, but that is no cause for concern.
This is a common practice called virtual account numbers or tokenization, and banks do it intentionally for security reasons. Here's why:
What's actually happening
When you connect your bank account to a third-party platform (like Plaid, Venmo, or a budgeting app), the bank doesn't give out your real account number. Instead, it issues a surrogate/virtual account number that maps back to your real account on their end.
Why they do it
Limit exposure — If the third-party platform gets hacked or has a data breach, your real account number isn't compromised. The virtual number can simply be revoked without you needing to change your actual account.
Granular access control — The virtual number can be tied to specific permissions (read-only balance checks vs. the ability to pull funds), so the bank can enforce exactly what the third party is allowed to do.
Revocability — You can disconnect an app and that virtual number becomes useless, without affecting your real account or other connections.
Fraud tracing — If fraudulent activity occurs, the bank can immediately identify which third-party connection was the source, since each integration may get its own unique number.
Regulatory compliance — Open banking regulations in some regions actually encourage or require this kind of tokenization as a privacy protection measure.
Why it varies by bank
Not all banks do this — smaller banks or credit unions that use simpler integrations may just share your real account number. Chase, PNC, and other large banks have more sophisticated API infrastructure (often part of their open banking programs) that supports this tokenization layer.
Practical impact for you
Usually none — transactions work the same way. But it can cause confusion if you're manually comparing account numbers across platforms, or if a platform that stores your "account number" tries to reuse it after you've disconnected and reconnected.
Example: Chase Banking
Chase Bank uses "substitute account numbers" when providing authorized third parties with sensitive financial information. This measure is done to help protect Chase users from fraud and other potential security issues. The given "substitute numbers" are only relevant for transactions placed within the third-party platform.
When you connected your Chase account to the Truss platform, Plaid acted as a "Data Access Provider". During the account connection process, Chase Bank provided Plaid with protective "substitute account numbers" for your Chase bank account, which were then passed to Truss. The "substitute account numbers" serve the same purpose as your actual Chase Bank account numbers in the Truss dashboard.
