How to Protect Your Finances Online (Right Now!)

Transcript:

On this episode of the Personal Finance podcast, How to protect your finances online right now.

What's up buddy? Welcome to the Personal Finance podcast. I'm your host, Andrew from mastermoney.co. And today on the Personal Finance podcast, we're going to talk about how to protect your finances online right now.

If you guys have any questions, make sure you join the Master Money newsletter by going to mastermoney.co. And don't forget to follow us on Spotify, Apple podcast, YouTube, or whatever your favorite podcast player is. And if you want to help out the show, consider leaving a five star rating and review on podcast, Spotify or your favorite podcast player.

Now today I'm going to be diving into how to protect your finances online. Now, this is one of the most important things that people need to have this year and beyond is making sure you have a plan in place to protect your finances online. And there are a number of reasons why you need to make sure that this happens.

First is there are record high identity theft and data breaches. In 2024, identity theft hit an all time high with millions of personal records stolen due to data breaches from major companies, hospitals, and even government systems. And your data is likely already out there.

And criminals can use this information to either drain your bank account, open credit cards in your name, or file false tax returns. And all of these are happening more and more and more. But also AI powered scams are everywhere. And scammers are now using AI to mimic voices.

They're generating fake emails, they create hyper realistic phishing websites. And one wrong click and you're handing over sensitive financial info. You can no longer just trust your eyes and ears with layer protection. You must make sure you have a plan in place, which we're going to talk about more in this episode.

Also, more of our financial life is online, from budgeting apps to investment platforms, digital wallets. Your entire net worth may be accessible from your phone or your browser, and one compromised login could expose everything, including retirement savings, your brokerage account, your crypto wallets.

And that's the last thing I want for each and every single one of you. You have to have a plan in place to protect yourself and your info is also bought and sold every single day. Where data brokers are out there and they can legally buy and sell your information, including addresses. They can buy your income levels, your credit history, your spending habits.

That info can also be used to target you as scams or influence you and your financial decisions without you even knowing. Now, hackers are also increasingly going after easy targets. And so children and the elderly are prime targets. So if you're someone out there who has kids who can understand some of this information, or if you have elderly parents or you have elderly people in your life, send them this episode because this episode is going to help them put together a financial plan so they are not targeted as much.

Because if you manage your finances for loved ones, your digital footprint puts their money at risk too. You have to make sure that you are protecting them as well. Now, your digital behavior can also influence everything from credit card fraud to eligibility for loans in a compromised account.

Or even a public data leak could delay your mortgage approval or even tank your credit score. I have seen people get their credit score destroyed because they had some sort of data breach. They did not put some of these protection plans in place. And also you could be locked out of your money. This is one of these scariest things that could happen to you is ransomware attacks and credential thefts can lock you out of your own accounts.

And if you're not prepared with strong passwords or recovery options, they could take days or weeks to even regain access to your funds. Now you may be saying to yourself, well, I'm financially savvy. This is not going to happen to me. Well, let's just remember what happened to Chase Bank last year. Chase Bank literally was frauded by a ton of everyday Americans with something called the infinite money glitch.

One of the biggest bank in the entire world, JP Morgan, was frauded by a bunch of different people with something called that infinite money glitch. And when that happened, they lost millions and millions and millions of dollars. They are now going back after these folks, but people were able to steal money from the biggest bank in the world.

Why do you think it would not happen to you? This is something where you must make sure that you have a plan in place. I'm going to show you exactly how to do that today in this episode. Let's get into it all right. The first thing that you need to be doing is you need to make sure that you are removing your personal information online.

Now, why does this matter? Because data brokers will sell your name, your address and contact info to scammers. Now, this is completely legal. There are companies out there that are data brokers who will take your information and they will sell it to other people. And if these scammers get a hold of your information, even if it's pieces of your information, maybe it's a part of your address, maybe it's a part of your phone number, maybe it's your name.

If they get a piece of this information, guess what? If they have any other data breach where they get any other part of your information, they can start to sign up for student loans in your name. They can start to sign up for bank accounts in your name. They can start to log into different access points that you do not want them logged into.

All of these are really, really important places to protect it. And so the way to protect that is to remove your personal information. Because if you do not remove your personal information, it dramatically increases your risk of identity theft, of spam, and of phishing.

And hackers also will use this data to answer security questions and access your bank accounts. And I have seen this happen a number of different times. In fact, we've had listeners of this podcast tell me their stories of ways that they have gotten scammed, where scammers have gotten their information and they have logged into their bank account.

So what do you do about this situation? Well, there's two things you can do. Number one is you can try to remove your personal information from these data brokers on your own. You go to each one of these different websites and there could be dozens, there could be hundreds, there could be thousands. And you go and look and you say to yourself, OK, I got to send a letter on this one.

I got to send an e-mail to this one, but I have to give proof that this is actually my information. So I have to send in my drivers license and a couple other forms of ID. And you have to do all these different hoops just to remove it from one different website. Or you can go and hire a service like Delete Me and Delete Me is a service that will remove your personal information from these websites.

So what you do is you go to joindeleteme.com/PFP 20 and create an account and that's going to give you 20% off. If you go to that link, then you submit your personal info, your name, your e-mail, your phone number, past addresses, and delete me will file removal requests with dozens and dozens of these data brokers.

When I did it initially, the first day alone, they did it to hundreds of data brokers and eventually they removed it from thousands of different websites and they'll rescan every few months and then they will update you with reports to your e-mail. And then what you do going forward is you can use aliases or burner emails for non essential websites going forward.

That's going to help you where your real core information is not being utilized. So the first part of your plan is I want you to remove your personal information from the Internet. The fastest way to do that is with delete me. And they save you so much time. And guess what? What is time? Time is your most valuable asset.

You need to make sure that you protect it #2 is you need to make sure that you are using a password manager. Now, most people do not utilize a password manager. Maybe they have a spreadsheet, or you're using a Google Doc, or you're trying to rely on the old noggin upstairs. But you need to make sure that you are utilizing a password manager. 81% of data breaches happen because of weak or reused passwords.

And it's impossible to remember strong and unique passwords, which is why these password managers are so incredibly valuable. And a breach on one site shouldn't mean access to your entire bank, bank or all of your other financial systems. If you are using the same password on every single bank account, my friends, you have to stop doing that.

So you need to use a password manager because they create very unique passwords. So how do you do this? First, you choose a secure password manager. I use two of them. I use one for my business and I use one for my personal information. And so typically sites like 1 Password are absolutely amazing.

They can actually help you with that information. Then you create a really strong master password that you will never use anywhere else. So when you sign up for one of these websites on one password or whatever else, you create this master password that nobody else wouldn't even know what it is. And then you import your saved passwords from either Chrome, Safari, wherever else into this password manager.

So it's actually something that you can transfer over depending on what browser you utilize. And then what I would do is let auto generate new complex passwords for each account. This is going to help you make sure that you are indefensible for people just randomly logging in and the passwords that it creates are just a bunch of jumbled up numbers and letters that nobody would ever be able to guess that.

You can also store backup codes and secure notes in some of these apps as well. They are really really helpful for most people and I highly highly recommend a password manager. It does not cost much to have one available #3 is to enable 2 factor authentication. Now this really does matter for a lot of people.

And some people who do not check that box because they do not want to deal with like a text code coming to their their phone or an e-mail coming in and taking that extra step. That is something you absolutely do not want to do. You have to enable 2 factor authentication when it comes to anything financially related.

Now. Even if a hacker has your password, they cannot log in with two factor authentication and text message. 2 factor authentication can be hijacked. So the safer option now is to use something like Authy, which is a authenticator. Microsoft has one, Google has an authenticator.

There are a bunch of great free ones out there that you can use. But an authenticator will give you that two factor authentication and nobody can access it. Now, many financial institutions also require that two factor authentication. But again, if you're just getting text messages and it may not be enough, if you want that extra indefensible force, I would use an authenticator.

And So what you can do is go to your security settings at all your banks or your broker or your e-mail accounts and turn on 2 factor authentication and choose app based authentication, not text. So you want to go in, you choose app based authentication, then download something like Google Authenticator, Microsoft Authenticator or Offy.

And then you scan the QR code and store backup codes safely. You can store your backup codes in something like 1 password or whatever your password manager is. And you can test it to ensure that you can actually login securely #4 is to freeze your credit reports. So freezing your credit reports is one of the easiest ways to make sure that your financial information is protected.

One, it prevents anyone, including scammers, from opening loans in your name. How does this work? You go to the major credit bureaus and we'll go through the steps in a second, and you go and freeze your credit. So when you are not opening up a credit card or if you're not opening a loan, you freeze your credit. So nobody else can try to open up a credit card or loan because when they run your credit report, it's frozen and they know that this should not be open because you did not authorize it.

Now it's free and it takes minutes and it's not going to affect your current credit use and it's one of the strongest identity theft protections that are available and I highly recommend you do it. Here's how you do it, OK. One is you're going to go through the two to three major credit bureaus. So you're going to go to Equifax, you're going to go to Experian, and you're going to go to Trans Union, and you're going to go to each of those websites individually.

Then you're going to create an account and you're going to verify your identity. And so when you create an account and verify your identity, that will allow you to start to freeze your credit. And so you go click freeze my credit or security freeze. And that's going to freeze your credit for that time frame.

And then you set a PIN or a password for each Bureau. Use your password manager, make it really tough to know what it is. And then keep this info stored securely in your past manager so that once you need to go back and unfreeze your credit, you can do it now. You can do this literally in 5 minutes. Once you set this up, it is so incredibly easy.

I know it's an extra step. I know you don't want to do it, but you need to do it to make sure that nobody scams you and opens an account in your name. In the age of AI, my friends, we are going to get scammed left and right. And if you don't have some of these security things in place, it is going to be something that you wish you did #5 is to utilize virtual credit card number.

So if you don't know what a virtual credit card number is, it hides your real credit card number when you're shopping online. And it also limits your exposure if a site gets hacked because sometimes these websites will get hacked and they take all the credit card information, they start running up on those credit cards. And you can also set spinning limits or even delete cards instantly with each individual credit card number.

Now, not all card issuers have this yet. I know places like Capital One have it, City has it. But what you want to do is you want to use your credit card issuer that offers these virtual cards. And you log into your account and you generate a virtual card. OK, Then you set up a spending limit and an expiration date for each one of these.

So if you want to go and do this quarterly, if you want to do it monthly, you absolutely can. And you use your virtual card at check out instead of your real number. This is an account that has a spending limit, so they can't just run your card up and you delete the card when you're done using it on that site or subscription.

So some people will create virtual cards for each place that they start to shop. So one for Amazon, one for Netflix, one for wherever else you shop, and that'll help you going forward. Number six is beware of phishing scam. So this matters a ton for a lot of people now because phishing scams are getting more and more creative now.

Most financial fraud starts with a phishing e-mail or a text, and links often lead to fake websites that steal your personal info. And these phishing attempts are more convincing than ever before. It's not just for your grandma getting a phishing e-mail anymore. A lot of times they'll look like your real bank website, or they will look like Amazon.com, or they will look like your state toll provider and you get those toll texts, or they will look like, you know, somewhere you shop frequently.

This is why when data brokers sell your information, they will sell your shopping trends, They will sell where you have spent money in the past. Let's say for example, you shop a lot of Dick's Sporting Goods and Dick's Sporting Goods sends you texts. OK, well if you shop a lot of Dick's Sporting Goods, they're going to see that and they're going to say I'm going to send a text message looking like it's Dick's Sporting Goods so that they think that if they push this, they're actually just logging into Dick's Sporting Goods, but instead you're giving away the information that is on your phone.

I want you to make sure that you are watching out for those scams. Also, with AI voice recognition, they can change voices based on people that you know. I have had people tell me that they have gotten phone calls that sounds like their husband or their wife or they have gotten phone calls that sounds like their parents are in trouble and they need money.

And it's because these AI voice scammers are phishing for that information. So here's how to protect yourself. One, don't click on links or emails or texts you didn't expect. 2 Instead, type the URL into your browser yourself. If you're shopping and it's Dick's Sporting Goods send you a link, just type the URL into the browser yourself and go look at what the sale is.

Check the sender's e-mail address also, because scammers often fake and so you want to make sure you look that e-mail address. Look for typos, look for urgency request. A big red flag when it comes to scams is they are going to trying to make it the most urgent thing you've ever heard. But to say, hey, right now you got to spend this money or right now you got to make sure that you pay this toll or whatever else it is.

So you got to make sure that if there's urgency, that's always, always a red flag. And when in doubt, call the company directly. All right, Next up is to secure your e-mail account. So your e-mail is the key to reset your passwords. And hackers can access your entire financial life from one inbox.

If you have an e-mail account that has all your information in one spot. An e-mail is actually #1 target in most data breaches. That's what they are looking for as they are trying to get your e-mail login information because they can do a lot if they have that login information. Now, what would you do if you were going to be one of the most protected people out there is I would create a separate e-mail just for banking and investing and obviously using very strong passwords and making sure it has that two factor authentication and avoid forwarding any emails with sensitive financial info.

And then what I would do is periodically review your accounts, connected apps and devices and use encrypted services like ProtonMail if you want extra privacy. So ProtonMail helps you get that additional privacy if you are looking to make sure that you were bulletproof when it comes to some of this stuff.

Now, I would also use encrypted messaging for financial conversations. And you can do that with a service like Signal or ProtonMail for that secure information. And you can invite your spouse or you can invite your advisors or whoever else or CPA to use it with you. And then you enable auto delete on sensitive threads and never send banking info over regular text or e-mail.

You want to make sure that you have those conversations over secured places. So usually your CPA or your advisor will have some sort of place that you can send over secure information. Also making sure that you secure your investment and even your crypto accounts. So crypto is even more susceptible to a lot of these scams.

Some reason a lot of hackers are targeting crypto platforms because they have really large payouts, but they also target your brokerage account and many people leave thousands in hot wallets vulnerable online. And so security for investing is just as critical as saving. You got to make sure that you have security for investing to protect your finances.

Again, you want to turn on 2 factor authentication for these accounts. You want to use hardware for things like your crypto, so you can use a Ledger or you can use Treasure for crypto and you can store your recovery phrase online, never in the cloud and and obviously always monitoring logins and enable alerts for every new device and then withdraw any idle crypto to cold storage instead of leaving it on exchanges.

Exchanges are really susceptible to theft and I am just waiting for the day that one of these big exchanges going to get hit. It seemingly is all the time that they are having to protect from against some of this stuff. Lastly is to turn on account auto lock features. So many accounts let you freeze access when they're not in use and it this just adds an extra layer of defense if your credentials are stolen.

And it's like putting a digital deadbolt on your finances. So what you do is you log into your bank, your brokerage app, you look for credit freeze, log in, time out or travel lock features and you set your accounts to auto lock after inactivity. Now you can use biometric access like your Face ID or your fingerprint for some of these apps.

I like to always use Face ID and then review your app security settings once month. So those are 10 tips to put together your financial plan. Now I'm going to give you some quick tips for extra security that might help you with this. One is to make sure that you are monitoring your financial accounts more frequently with instant transaction alerts.

Another one is to never store credit card details on shopping websites, so I know it's really easy to have that one click on Amazon, but that does make you more susceptible using AVPN in public Wi-Fi areas. If you're travelling across the country, I would utilize AVPN to protect your financial data if you have to log into banks and then disable any unused features like Zelle or Venmo.

If you don't use them. That just means you are more susceptible to scammers and you have a wider range of your information being stolen. Also sign up for a dark web monitoring service if you want to go with that extra step to detect leaked financial data and call your mobile provider to enable a SIM port freeze to prevent SIM swap attacks.

If you're looking to protect your phone. Another one is to set spending limits on your credit cards to minimize fraud risk. I like to do that a lot and then regularly review third party app connections to your bank and investment accounts. And then lastly is to keep an offline backup of all important financial data in case of cyber attacks.

All of those are super important. Those are some of the additional quick tips that I would definitely put into place. Thank you so much for listening to this episode. Make sure you go to joindeleteme.com/PFP 20, sign up for delete me. Get your personal information removed. Also, don't forget to follow this show on Apple Podcast, Spotify, or your favorite podcast player and we will see you on the next episode.