The Personal Finance Podcast - How to Protect Your Finances Online (Right Now!)

Episode Date: April 25, 2025

Thanks to DeleteMe for sponsoring the show! Use Promo Code PFP for 20% off! Click the link or go to http://joindeleteme.com/PFP20 Join The Master Money Newsletter where you will become smarter with your money in 5 minutes or less per week Here! Learn more about your ad choices. Visit megaphone.fm/adchoices

on this episode of the personal finance podcast, how to protect your finances online right now. What's up, everybody, and welcome to the personal finance podcast. I'm your host, Andrew from mastermoney.com. And today on the personal finance podcast, we're going to talk about how to protect your finances online right now. If you guys have any questions, make sure you join the mastermoney newsletter by going to mastermoney.com. And don't forget, to follow us on Spotify, Apple Podcasts, YouTube, or whatever your favorite podcast player is. And if you want to help out the show, consider leaving a five-star rating and review on Apple Podcast, Spotify, or your favorite podcast player. Now today, I'm going to be diving into how to protect

your finances online. Now, this is one of the most important things that people need to have this year and beyond is making sure you have a plan in place to protect your finances online. And there are a number of reasons why you need to make sure that this happens. First, is there are record high identity theft in data breaches. In 2024, identity theft hit an all-time high with millions of personal records stolen due to data breaches from major companies, hospitals, and even government systems. And your data is likely already out there, and criminals can use this information to either drain your bank account, open credit cards in your name, or file false tax returns.

And all of these are happening more and more and more. but also AI-powered scams are everywhere. And scammers are now using AI to mimic voices. They're generating fake emails. They create hyper-realistic fishing websites and one wrong click. And you're handing over sensitive financial info. You can no longer just trust your eyes and ears with layer protection. You must make sure you have a plan in place,

which we're going to talk about more in this episode. Also, more of our financial life is online. From budgeting apps to investment platforms, digital wallets, your entire net worth may be accessible from your phone or your browser. And one compromised login could expose everything, including retirement savings, your brokerage account, your crypto wallets, and that's the last thing I want for each and every single one of you. You have to have a plan in place to protect yourself.

And your info is also bought and sold every single day where data brokers are out there and they can legally buy and sell your information, including addresses. They can buy your income levels, your credit history, your spending habits. that info can also be used to target you as scams or influence you and your financial decisions without you even knowing. Now, hackers are also increasingly going after easy targets. And so children and the elderly are prime targets. So if you're someone out there who has kids who can understand some of this information or if you have elderly parents or you have elderly people in your life, send them this episode because this episode is going to help them put together a financial

plan so they are not targeted as much. Because if you manage your finances for love, ones, your digital footprint puts their money at risk too. You have to make sure that you are protecting them as well. Now, your digital behavior can also influence everything from credit card fraud to eligibility for loans in a compromised account or even a public data leak could delay your mortgage approval or even tank your credit score. I have seen people get their credit score destroyed because they had some sort of data breach. They did not put some of these protection plans in place. And also, you could be locked out of your money. This is one of these scariest things that could happen to you is ransomware attacks and credential theft can lock you out of your own accounts.

And if you're not prepared with strong passwords or recovery options, it could take days or weeks to even regain access to your funds. Now, you may be saying to yourself, well, I'm financially savvy. This is not going to happen to me. Well, let's just remember what happened to Chase Bank last year. Chase Bank literally was frauded by a ton of everyday Americans with something called the infinite money glitch. One of the biggest bank in the entire world, J.P. Morgan, was frauded by a bunch of different people with something called that infinite money glitch. And when that happened, they lost millions and millions and millions of dollars. They are now going back after these folks, but people were able to steal money from the biggest bank in the world. Why do you think it would

not happen to you? This is something where you must make sure that you have a plan in place. I'm going to show you exactly how to do that today in this episode. Let's get into it. All right, the first thing that you need to be doing is you need to make sure that you are removing your personal information online. Now, why does this matter? Because data brokers will sell your name, your address, and contact info to scammers. Now, this is completely legal. There are companies out there that are data brokers who will take your information and they will sell it to other people. And if these scammers get a hold of your information, even if it's pieces of your information, maybe it's a part of your address,

maybe it's a part of your phone number, maybe it's your name. If they get a piece of this information, guess what? If they have any other data breach where they get any other part of your information, they can start to sign up for student loans in your name, they can start to sign up for bank accounts in your name, they can start to log into different access points that you do not want them logged into. All of these are really, really important places to protect debt. And so the way to protect that is to remove your personal information. Because if you do not remove your personal information, it dramatically increases your risk of identity theft, of spam, and of fishing. And hackers also will use this data to answer security questions and access your bank

accounts. And I have seen this happen a number of different times. In fact, we've had listeners of this podcast, tell me their stories of ways that they have gotten scammed, where scammers have gotten their information and they have logged into their bank account. So what do you do about this situation? Well, there's two things you can do. Number one is you can try to remove your personal information from these data brokers on your own. You go to each one of these different websites and there can be dozens, there could be hundreds, there could be thousands. And you go and look and you say to yourself, okay, I got to send a letter on this one. I got to send an email to this one,

but I have to give proof that this is actually my information, so I have to send in my driver's license and a couple other forms of ID, and you have to do all these different hoops just to remove it from one different website. Or you can go and hire a service like Delete Me. And Delete Me is a service that will remove your personal information from these websites.

So what you do is you go to join DeleteMe.com slash pfp20 and create an account, and that's going to give you 20% off if you go to that link. then you submit your personal info, your name, your email, your phone number, past addresses, and delete me will file removal requests with dozens and dozens of these data brokers. When I did it initially, the first day alone, they did it to hundreds of data brokers, and eventually they removed it from thousands of different websites. And they'll rescan every few months, and then they'll update you with reports to your email.

And then what you do going forward is you can use aliases or burner emails for non-essential websites going forward. That's going to help you where your real core information is not being. utilize. So the first part of your plan is, I want you to remove your personal information from the internet. The fastest way to do that is with Delete Me, and they save you so much time. And guess what, what is time? Time is your most valuable asset. You need to make sure that you protect it. Number two is you need to make sure that you are using a password manager. Now, most people do not utilize a password manager. Maybe they have a spreadsheet or are you using a Google Doc or you're trying to rely on the old noggin upstairs, but you need to make sure that you are utilizing a password

manager. 81% of data breaches happen because of weak or reused passwords. And it's impossible to remember strong and unique passwords, which is why these password managers are so incredibly valuable. And a breach on one site shouldn't mean access to your entire bank or all of your other financial systems. If you are using these same password on every single bank account, my friends, you have to stop doing that. So you need to use a password manager because they create very unique passwords. So how do you do this. First, you choose a secure password manager. I use two of them. I use one for my business, and I use one for my personal information. And so typically, sites like one password are absolutely amazing. They can actually help you with that information. Then you create a really strong

master password that you will never use anywhere else. So when you sign up for one of these websites, on one password or whatever else, you create this master password that nobody else wouldn't even know what it is. And then you import your save passwords from either Chrome, wherever else into this password manager. So it's actually something that you can transfer over, depending on what browser you utilize. And then what I would do is let it auto-generate new complex passwords for each account. This is going to help you make sure that you are indefensible for people just randomly

logging in. And the passwords that it creates are just a bunch of jumbled up numbers and letters that nobody would ever be able to guess. Now, you can also store backup codes and secure notes in some of these apps as well. They are really, really helpful for most people. and I highly, highly recommend a password manager. It does not cost much to have one available. Number three is to enable two-factor authentication.

Now, this really does matter for a lot of people. And some people who do not check that box because they do not want to deal with like a text code coming to their phone or an email coming in and taking that extra step. That is something you absolutely do not want to do. You have to enable two-factor authentication when it comes to anything financially related. Now, even if a hacker has your password, they cannot log in with two-factor authentication. and text message two-factor authentication can be hijacked. So the safer option now is to use something like Othi, which is an authenticator.

Microsoft has one. Google has an authenticator. There are a bunch of great free ones out there that you can use, but an authenticator will give you that two-factor authentication and nobody can access it. Now, many financial institutions also require that two-factor authentication. But again, if you're just getting text messages in, it may not be enough. If you want that extra indefensible force, I would use an offensive. authenticator. And so what you can do is go to your security settings at all your banks or your

broker or your email accounts and turn on two factor authentication and choose app based authentication, not text. So you want to go in, you choose app based authentication. Then download something like Google Authenticator, Microsoft Authenticator, or Offi. And then you scan the QR code and store backup codes safely. You can store your backup codes in something like one password or whatever your password manager is, and you can test it to ensure that you can actually log in securely. Number four is to freeze your credit reports. So, freezing your credit reports is one of the easiest ways to make sure that your financial information is protected. One, it prevents anyone, including scammers, from opening loans in your name. How does this work? You go to the major

credit bureaus, and we'll go through the steps in a second, and you go and freeze your credit. So when you are not opening up a credit card or if you're not opening a loan, you freeze your credit so nobody else can try to open up a credit card or loan because when they run your credit report, it's frozen. And they know that this should not be open because you did not authorize it. Now, it's free, and it takes minutes, and it's not going to affect your current credit use. And it's one of these strongest identity theft protections that are available, and I highly recommend you do it. Here's how you do it, okay?

One is you're going to go to two, the three major credit bureaus. So you're going to go to Equifax, you're going to go to Experian, and you're going to go to TransUnion, and you're going to go to each of those websites individually. then you're going to create an account and you're going to verify your identity. And so when you create an account and verify your identity, that will allow you to start to freeze your credit. And so you go click freeze my credit or security freeze. And that's going to freeze your credit for that time frame. And then you set a pen or a password for each bureau.

Use your password manager. Make it really tough to know what it is. And then keep this info stored securely in your pass manager so that once you need to go back and unfreeze your credit, you can do it. Now, you can do this literally in five minutes. minutes. Once you set this up, it is so incredibly easy. I know it's an extra step. I know you don't want to do it, but you need to do it to make sure that nobody scams you and opens an account in your name. In the age of AI, my friends, we are going to get scammed left and right. And if you don't have some of these security things in place, it is going to be something that you wish you did.

Number five is to utilize virtual credit card number. So if you don't know what a virtual credit card number is, it hide your real credit card number when you're shopping online. And it also limits your exposure if a site gets hacked because sometimes these websites will get hacked and they take all the credit card information. They start running up on those credit cards. And you can also set spinning limits or even delete cards instantly with each individual credit card number. Now, not all card issuers have this yet. I know places like Capital One have it. City has it. But what you want to do is you want to use your credit card issuer that offers these virtual cards and you log into your account and you generate a virtual card. Then you set up a spending limit in an expiration date for each one of these. So if you want to go

and do this quarterly, if you want to do it monthly, you absolutely can. And you use your virtual car to checkout instead of your real number. This is an account that has a spending limit so they can't just run your card up. And then you delete the card when you're done using it on that site or subscription. So some people will create virtual cards for each place that they start to shop. So one for Amazon, one for Netflix, one for wherever else you shop. And that'll help you go in forward. Number six is beware of fishing scam. So this matters a ton for a lot of people now because fishing scams are getting more and more creative. Now, most financial fraud starts with a phishing email or a text. And links often lead to fake websites that steal your personal info. And these fishing

attempts are more convincing than ever before. It's not just for your grandma getting a fishing email anymore. A lot of times they'll look like your real bank website or they will look like Amazon.com or they will look like your state toll provider and you get those whole text or they will look like, you know, somewhere you shop frequently. This is why when data brokers sell your information, they will sell your shopping trends. They will sell where you have spent money in the past. Let's say, for example, you shop a lot of Dick's sporting goods and Dick's sporting goods sends you texts. Okay. Well, if you shop a lot of Dick Sporting goods, they're going to see that, and they're going to send a text message looking like it's Dick Sporting goods so that they think

that if they push this, they're actually just logging into Dick Sporting goods, but instead you're giving away the information that is on your phone. I want you to make sure that you are watching out for those scams. Also, with AI voice recognition, they can change voices based on people that you know. I have had people tell me that they have gotten phone calls that sounds like their husband or their wife, or they have gotten phone calls that sounds like their parents that are in trouble and they need money. And it's because these AI voice scammers are fishing for that information. So here's how to protect yourself. One, don't click on links or emails or text you didn't expect. Two, instead, type the URL into your browser yourself. If you're shopping and it sticks,

sporting goods, send you in a link, just type the URL into the browser yourself and go look at what the sale is. Check the sender's email address also because scammers often fake. And so you want to make sure you look that email address. Look for typos. Look for urgency requests. A big red flag when it comes to scams is they are going to try to make it the most urgent thing you've ever heard. They're to say, hey, right now you've got to spend this money or right now you got to make sure that you pay this toll or whatever else it is. So you got to make sure that if there's urgency, that's always, always a red flag. And then when in doubt, call the company directly.

All right. Next up is to secure your email account. So your email is the key to reset your passwords. And hackers can access your entire financial life from one inbox if you have an email account that has all your information in one spot. An email is actually the number one target in most data breaches. That's what they are looking for is they are trying to get your email login information because they can do a lot if they have that login or information.

Now, what would you do if you were? are going to be one of the most protected people out there is I would create a separate email just for banking and investing and obviously using very strong passwords and making sure it has that two-factor authentication and avoid forwarding any emails with sensitive financial info. And then what I would do is periodically review your accounts connected apps and devices and use encrypted services like ProtonMail if you want extra privacy. So ProtonMail helps you get that additional privacy if you are looking to make sure that you were bulletproof when it comes to some of this stuff. Now, I would also use encrypted messaging for financial conversations. And you can do that with a service like Signal or

Proton Mail for that secure information. And you can invite your spouse or you can invite your advisors or whoever else your CPA to use it with you. And then you enable auto delete on sensitive threads and never send banking info over regular text or email. You want to make sure that you have those conversations over secured places. So usually your CPA or your advisor will have some sort of place that you can send over secure information. Also, making sure that you secure your investment and even your crypto accounts. So crypto is even more susceptible to a lot of these scams. Some reason, a lot of hackers are targeting crypto platforms because they have really large payouts, but they also target your brokerage account. And many people leave thousands in hot wallets

vulnerable online. And so security for investing is just as critical as saving. You got to make sure that you have security for investing to protect your finances. Again, you want to turn on two-factor authentication for these accounts. You want to use hardware for things like your crypto, so you can use a ledger or you can use Trezer for crypto, and you can store your recovery phrase online, never in the cloud, and then obviously always monitoring logins and enable alerts for every new device. And then withdraw any idle crypto to cold storage instead of leaving it on exchanges. Exchanges are really susceptible to theft, and I am just waiting for the day that one of these big exchanges is going to get hit. It seemingly is all the time that they are having to protect from

against some of this stuff. Lastly, is to turn on account auto lock features. So many accounts let let you freeze access when they're not in use. And this just adds an extra layer of defense if your credentials are stolen. And it's like putting a digital deadbolt on your finances. So what you do is you log into your bank or your brokerage app. You look for credit freeze, log in timeout, or travel lock features. And you set your accounts to auto lock after inactivity. Now, you can use biometric access like your face ID or your fingerprint for some of these apps. I like to always use face ID and then review your app security settings once a month. So those are 10 tips to put together your financial plan. Now, I'm going to give you some quick tips for extra security

that might help you with this. One is to make sure that you are monitoring your financial accounts more frequently with instant transaction alerts. Another one is to never store credit card details on shopping website. So I know it's really easy to have that one click on Amazon, but that does make you more susceptible. Using a VPN in public Wi-Fi areas, if you're traveling across the country, I would utilize a VPN to protect your financial data if you have to log into banks. And then disable any unused features like Zell or Venmo if you don't use them. That just means you are more susceptible to scammers and you have a wider range of your information being stolen. Also, sign up for a dark web monitoring service if you want to go to that extra step

to detect leaked financial data and call your mobile provider to enable a SIM port freeze to prevent SIM swap attacks if you're looking to protect your phone. Another one is to set spinning limits on your credit cards to minimize fraud risk. I like to do that a lot. And then regularly review third-party app connections to your bank and investment accounts. And then lastly, is to keep an offline backup of all important financial data in case of cyber attacks. All of those are super important. Those are some of the additional quick tips that I would definitely put into place. Thank you so much for listening to this episode. Make sure you go to join delete me.com slash pfp20. Sign up for delete me. Get your personal information removed. Also,

So don't forget to follow this show on Apple Podcasts, Spotify, or your favorite podcast player. And we will see you on the next episode.