Online banking safely: a plain-English checklist

📅 Checked as of October 2026. Apps and rules change, so check the sources below if something looks different.

Set up once

• Get the real app from the App Store or Google Play (check the developer is your bank), or type the bank’s web address yourself.
• Unique password stored in a password manager.
• Two-step sign-in on, plus Face ID or fingerprint for the app. See two-step for money accounts.
• Alerts for every login, transfer and card purchase over a small amount.
• Updates: keep your phone and the app updated.

Spot the fake bank

• Texts like “Did you make a $500 Zelle payment? Reply YES or NO”, followed by a call from “fraud department”.
• Caller ID can show your bank’s real name and number. It can be faked.
• Requests to read back a code, move money to a “safe account”, or install a screen-sharing app.

Out and about

• Banking apps encrypt your data, so using them on public Wi-Fi is far safer than it once was. When you can, use cellular data for money tasks anyway.
• Don’t bank on shared or library computers.
• Lock your phone with a passcode, and know how to find or erase it if lost. See Find My device.

Quick tips

• Turn on transaction alerts in your bank app.
• Save your bank’s real number (from your card) in your contacts.
• Check your accounts weekly, and your credit reports for free at AnnualCreditReport.com.

Sources

• FTC: How to recognize and avoid phishing scams
• FTC: Impersonation scams (bank and government)
• FTC: Use two-factor authentication to protect your accounts
• AnnualCreditReport.com (free credit reports)