your routing number, since that’s currently general public, but combining that using your checking account info is sufficient to siphon money. Cash App doesn’t need end users to backlink their checking account, https://central.xero.com/s/question/0D58V00009LpYuJSAV/will-cash-app-refund-money-if-scammed