Key Takeaways
- Use strong unique credentials and available multifactor authentication.
- Access banking through verified routes and review alerts and transactions.
- Keep devices current and respond promptly to suspected account compromise.
Online banking security is a routine of protecting access, checking activity and knowing how to get help. A secure connection does not stop someone from persuading you to authorize the wrong payment. Combine technical protection with a rule for verifying unexpected requests.
The FTC recommends strong passwords, two-factor authentication, software updates and independent checks of suspicious messages. Use the checklist below with your own bank’s current security instructions. It is general guidance and does not certify any particular bank, app or device.
Protect the login and its recovery path
Use a unique strong password. A reputable password manager can help you create and store different passwords, but it also needs a strong master password and secure recovery. Avoid reusing an email password for banking.
Enable two-factor authentication when offered. The FTC identifies authenticator apps and security keys as more secure options than common text or email codes. Choose the strongest method your institution supports and make sure you understand how to recover access if a device is lost.
Keep recovery contact details current. Store backup instructions securely rather than in an unprotected shared document. Never send a one-time code to a person who unexpectedly contacts you, even if they claim to be investigating fraud.
Use a trusted route into the account
Open the bank’s known app or type its verified website address. Avoid signing in through unexpected text or email links. Check an app’s publisher and use the institution’s official download guidance. A padlock or HTTPS does not by itself prove that a website belongs to your bank.
Update your operating system, browser and apps. Protect the device with a screen lock. Avoid sensitive banking on a shared or unfamiliar device. Network protection helps, but it does not make phishing or an authorized scam payment safe.
Make alerts useful
Review the bank’s available notifications for logins, transfers, card activity and changes to contact details. Set thresholds that will help you notice relevant activity, and confirm where notifications go. An alert is useful only if you see it and know what to do next.
| Routine | Your record |
|---|---|
| Verify the official support route | Known app or statement location ___ |
| Check security and recovery settings | Review date ___ |
| Review activity and alerts | Next check ___ |
| Know the lost-device procedure | Where instructions are stored ___ |
Respond quickly to an unfamiliar transaction
Contact the bank immediately through a verified route. State the transaction, date and amount and explain whether you authorized it or were tricked into sending it. Ask about its fraud and dispute process, time limits and written follow-up. Record the reference number.
The FTC recommends asking the relevant provider whether a scam payment can be reversed or refunded. Do not assume that every transfer has the same legal protection or that a refund is guaranteed. If account credentials were exposed, follow the bank’s recovery instructions and secure any other account using the same password.
Start today by verifying one support route and reviewing one security setting. You do not need a new paid subscription to take those first steps.
General education for US readers. Examples are fictional. No first-hand product testing or credentials are claimed.
Sources
- Protect Your Personal Information From Hackers and Scammers | Consumer Advice
- What To Do if You Were Scammed | Consumer Advice
