A mobile banking app makes it easy to manage your money from anywhere, any time. But you could be putting your financial information at risk in exchange for convenience.

Mobile banking apps use a variety of security features to keep your data safe. That said, you also must take steps to protect your information. Here’s what you need to know to keep your money safe from cybercriminals, hackers and scammers when using your bank’s app.

Read more: Beware of These Common Banking Scams

Are banking apps safe?

Banking apps are generally safe ways to manage your money. Mobile tools have a range of built-in security features to put fences around your information that are difficult for hackers to scale. 

Safety features aren’t limited to the biggest banks with the resources to invest in the latest and greatest tech. Even some smaller credit unions and community banks use tools like biometric authentication — using physical characteristics like your fingerprint or face — to limit your account access to the only person who should be able to get in: you. 

Many banks also use multifactor authentication, which requires a second form of identification, such as a text message sent to your phone, to prove that you are attempting to access the account.

Many banks also use end-to-end encryption, which prevents anyone from seeing your information while it’s being transmitted.

How hackers can gain access to your banking information

Regardless of these safety features, there are several methods bad actors use to try to obtain your personal or financial information.

• Data breaches: While banks don’t make as many headlines for massive data breaches as retailers, they still happen. For example, a Fidelity data breach in October compromised 77,000 customers’ personal data. While that isn’t directly related to their mobile app experiences, the implications are similar: It is possible for someone to steal your money or your identity by getting ahold of your banking information.
• App-based banking trojans: Once downloaded, these malicious programs can gain access to your banking information, and they can be tricky to spot. Cybercriminals may send you a text or email that looks legitimate, along with a link. Don’t click links from any unfamiliar senders. If you can’t tell if a notification is legitimate, contact your bank to find out.
• Fake banking apps: Scammers also create fake apps that look just like your bank’s mobile app to trick you into downloading them and entering your login information. Once you enter your information, scammers have access to your account. You should only download a banking app from your bank’s website to ensure it’s the correct one.
• Unprotected Wi-Fi networks: If you’re using free Wi-Fi at a cafe, airport or any other public location, you’re putting yourself at risk. Hackers can tap into these networks and access your devices. Avoid opening your mobile banking app while connected to any of these networks. You’re better off waiting to look at your account until you’re on your home network.
• Phishing websites and messages: Scammers may also send you a text or email prompting you to click a link and enter your credit card or banking information. In these messages, scammers may pretend to be your bank or someone you know requesting payment for an unpaid bill. As with banking trojans, treat these messages with suspicion and contact your bank to verify if they’re legitimate.

How to keep your data safe when using a banking app

Banks invest in upgrades to regularly identify vulnerabilities in their apps, but keeping your mobile banking data safe isn’t just up to them. You can help protect your information by following these tips.

Create strong and unique passwords

Research from All About Cookies found that 84% of respondents used “unsafe password practices.” No, “1234” isn’t a strong password, nor is your last name or any other easily identifiable words. Your password should be complicated — ideally, a mix of uppercase and lowercase letters, numbers and special characters. 

Also, be sure to create different passwords for different accounts. This way, if your password for one account falls into the wrong hands, scammers can’t use it to get into your bank account. While that may seem like more information to juggle, you can use a password manager to keep it organized.

Protect your login credentials

A strong password is only helpful if you don’t share it with anyone. This is another area where a password manager can help. It can help you develop strong passwords and encrypt them on your phone, along with any other devices, such as your computer and your tablet.

Also, make sure you log out of a banking app when you’re done using it. Many banking apps have an automatic logout feature that activates after a few minutes of inactivity. 

Set up multifactor authentication

Multifactor authentication is the digital equivalent of presenting multiple forms of ID in person. When you provide both a passport and a utility bill, for example, a company can feel more secure that it’s really you than if you just showed one form of ID.

Many big banks let you enable two-factor authentication, which can strengthen your defense against scammers. For example, you might enter your information to log into your app, and then receive a text message with a one-time code to verify your identity. It’s not foolproof, as there are crafty criminals who figure out ways to work around multifactor authentication, but it is worth the extra step.

Keep your app updated

Your bank keeps your mobile data safe by monitoring new and existing cyber threats and releasing software updates to strengthen its app’s security measures. To protect yourself by these measures, make sure your phone has the latest version of software installed for your bank’s app. You can do this by manually updating your app through your app store’s settings or enabling automatic updates.

Don’t use public Wi-Fi

Free Wi-Fi can come at a cost: an increased likelihood of someone on the same network managing to hack into your device. Never conduct banking activities on public Wi-Fi. (Ultimately, you’re better off avoiding doing much of anything over a public Wi-Fi network due to heightened cybersecurity risks.)

Don’t click on suspicious links 

Most people feel confident that they can avoid email scams. After all, the story of the Nigerian prince who will pay you loads of money to help him has probably been around since you started sending emails.

However, scammers have gotten increasingly creative with incentivizing you to click on a link that allows them to access your information or download malware onto your mobile device. Many now use smishing, sending those links to your mobile phone as a text message. Scrutinize every message that arrives on your phone, and if you have any doubts about its authenticity, don’t click on it. 

Monitor your bank accounts and credit report

No matter how vigilant you are in keeping your data safe, there are sophisticated criminals online who could find a way into your financial accounts. 

It’s smart to keep a close eye on your bank accounts to watch for any unfamiliar transactions. In some cases, hackers make a small charge — just a few dollars, for example — to see if you spot it before they do significantly larger damage. Review your transaction history regularly for any suspicious activity.

In addition, check your credit report frequently. It can help you spot potential fraud that never appears in your banking app. If someone manages to open a bank account with your name and Social Security Number, this is how you can find out about the fraud and work to repair the damage.

Banking app security FAQs