No, the employer may NOT--and there is no legitimate purpose for doing so. This may be identify theft, and it may also be the first step in some scheme to launder money, to defaud, etc. You should tell the employer to not do this and to close the account; you should then confirm with the bank that it was closed and also tell them it was opened without your consent; and you may wish to contact the police, or at least should think about it.