accept routing_number and (masked) account_number as well