Banking and Paying Safely Online
Your money moves through your phone now — banking apps, tap-to-pay, peer-to-peer transfers, one-click checkout. That convenience is genuinely safer than mailing checks in most respects, but it concentrates risk: the device in your pocket is now the vault door. A few habits keep the convenience without the exposure.
Protect the accounts that hold money
- Strongest authentication you have on banking and payment apps — a unique password and app-based MFA or a passkey, never SMS codes for your primary bank (SIM-swapping targets exactly these; see Your Phone Is Your Perimeter).
- Turn on transaction alerts. A push for every charge turns fraud detection from a monthly chore into a real-time reflex.
- Lock the device. Biometrics plus a strong passcode; a banking app is only as safe as the phone it lives on.
Credit beats debit online
For online and unfamiliar purchases, a credit card is safer than a debit card — not because it's harder to steal, but because of what happens after. Credit fraud is the bank's money until resolved; debit fraud is your money, gone from your checking account while you dispute it. Better still, use a mobile wallet (Apple Pay, Google Pay) or virtual card numbers: they hand the merchant a one-time token, so a breach at the store never exposes your real card.
Shop like the store might be fake
- Type the address yourself or use a bookmark; don't chase a "50% off" link from an email or social ad to a lookalike storefront.
- Be suspicious of impossible deals. The sought-after item at half price from a site you've never heard of is bait.
- Look for real contact details and reviews off-site. Fake shops are cheap to spin up and vanish after collecting cards.
- Never pay a "business" by gift card, wire, or crypto. Those are the irreversible rails scammers demand precisely because you can't claw the money back.
Peer-to-peer apps: treat like cash
Zelle, Venmo, Cash App and the like move money instantly and, crucially, irreversibly. Send only to people you know and have verified — a scammer posing as your landlord or a marketplace seller relies on that finality. Banks generally won't refund a payment you authorized, even to a fraudster. Double-check the handle; confirm big transfers through a second channel.
Where you bank matters as much as how
Do sensitive banking on a network you trust — your home Wi-Fi or your cellular connection — not the coffee-shop network, and never after typing your password into a captive portal (see the Wi-Fi guide). The bank's own app over cellular is the safest combination on offer.
Stop paying strangers on irreversible rails. Think of your phone as the vault door and lock it accordingly. Connect through your own network, with a credit card or a tokenized wallet, and let alerts watch your back.