A stronger account, a safer payment

Start with your login

Use a strong, unique password for each account. A password manager can help you create and store them. Enable multi-factor authentication wherever your bank or payment app supports it.

Protect your email account too: it often controls password resets for your financial accounts.

• Never reuse your banking password on another website.
• Never disclose one-time verification codes to callers or message senders.
• Reject sign-in approval prompts you did not initiate.

Protect the phone you pay with

• Use a device passcode and available biometric locks.
• Keep the operating system and banking apps updated.
• Enable transaction alerts and check statements for unfamiliar activity.
• Use the bank’s official app or a saved official website address.
• Avoid granting remote access to anyone who contacts you about your money.

Security cannot verify a seller

MFA helps protect access to your account. It does not confirm that an unfamiliar seller is honest, or that your purchase qualifies for protection. Check the recipient and the payment type as well.