How to keep your money safe online

Banking, shopping, and investing now happen largely online—and so do the scams that target your money. In 2025, the Federal Trade Commission reported that consumers lost more than $15.9 billion to fraud. That figure continues to rise as scammers become more sophisticated.

You don't need to be a cybersecurity expert to protect yourself, instead staying informed and up-to-date on current scams and their warning signs can help you better recognize if you are being targeted.

What you'll learn:

• Why online financial security matters more than ever
• Build strong, unique passwords for every account
• Turn on two-factor authentication everywhere
• Recognize and avoid phishing scams
• Secure your devices and networks
• Monitor your accounts and credit
• Shop and bank safely online

Why online financial security matters more than ever

Cybercrime is no longer the work of lone hackers in basements. Today, organized criminal networks run scams on a massive level, using automated tools to test stolen passwords, send millions of phishing emails, and clone legitimate websites.

The consequences go beyond a drained bank account. Identity theft can damage your credit score, take months to resolve, and create lasting financial stress. Understanding the risks is the first step. The next is taking action—and that starts with the basics.

Build strong, unique passwords for every account

Weak and reused passwords remain the single biggest vulnerability in personal finance. If a hacker cracks one password, they'll try it on your email, your bank, and your shopping accounts. This tactic, called credential stuffing, succeeds far too often.

Here are some tips on how to create strong passwords to increase your online security:

• Make passwords long. Aim for at least 12 to 16 characters. Length matters more than complexity.
• Make passwords unique. Never reuse a password across multiple accounts, especially for banking and email.
• Use a passphrase. A random string of words like "copper-lantern-river-92" is both strong and easier to remember.
• Use a password manager. Tools like 1Password, Bitwarden, or Dashlane generate and store complex passwords so you don't have to memorize passwords.
• Change your password often. Try to change your passwords every three months. If your account is hacked or there is a data breach, you should reset your password immediately.

A password manager is one of the most effective security upgrades you can make. It removes the temptation to reuse passwords and protects you even if one site is breached.

Turn on two-factor authentication everywhere

Two-factor authentication (2FA) adds a second layer of security beyond your password. Even if a criminal steals your login details, they can't get in without the second factor—usually a code sent to your phone or generated by an app.

Whenever possible, choose an authenticator app or hardware key over text-based codes. Enable 2FA on your bank, email, and any account tied to your money.

While it isn’t required to set up two-factor authentication at Alliant, consider doing this for an extra layer of security. To turn it on today, follow these steps:

1. Log in to your Alliant account.
2. Click Profile & Settings.
3. Go to Access & Security.
4. Select Protect Your Account with Two-Factor Authentication.
5. Enter your mobile number.
6. Agree to the terms of service.

Recognize and avoid phishing scams

Phishing is the art of tricking you into handing over your information. Scammers pose as your bank, a delivery service, or even a government agency, then create a sense of urgency to make you act before you think.

Watch for these red flags:

• Urgent or threatening language, such as "Your account will be closed in 24 hours."
• Suspicious messages, like messages that are too good to be true or mention false information.
• Requests for sensitive information like passwords, PINs, or Social Security numbers. Legitimate banks never ask for these by email or text.
• Suspicious links. Hover over a link before clicking to see the real destination. When in doubt, type the website address directly into your browser.
• Slightly-off email addresses, like "[email protected]" instead of "alliantcreditunion.com."

If a message feels off, trust your instincts. Contact the company directly using a phone number from their official website, not one provided in the suspicious message.

Secure your devices and networks

Your phone and computer are the gateways to your finances. Keeping them secure is just as important as protecting your accounts.

• Keep software updated. Updates often patch security holes that hackers exploit. Turn on automatic updates for your operating system, browser, and apps.
• Use antivirus protection. Reputable security software adds a valuable layer of defense against malware designed to steal financial data.
• Avoid public Wi-Fi for banking. Open networks at cafes and airports are easy targets for snooping. If you must access your accounts on the go, use a virtual private network (VPN) or your phone's cellular data instead.
• Lock your devices. A strong PIN, fingerprint, or face unlock keeps prying eyes out if your phone is lost or stolen.

Monitor your accounts and credit

Catching fraud early can save you a major headache. The faster you spot unauthorized activity, the faster you can stop it.

• Check statements weekly. Review your bank and credit card activity for charges you don't recognize. Even small charges can be red flags since scammers will sometimes make small charges first to test stolen cards.
• Set up account alerts. Most banks let you receive instant notifications for transactions, login attempts, or large withdrawals.
• Monitor your credit reports. You're entitled to free reports from Equifax, Experian, and TransUnion through AnnualCreditReport.com. Review them for accounts you didn't open.
• Consider a credit freeze. Freezing your credit prevents anyone from opening new accounts in your name. It's free and one of the strongest defenses against identity theft.

Shop and bank safely online

Online transactions are convenient, but they require a few extra precautions to stay secure. Stick to websites with "https://" and a padlock icon in the address bar, which signals an encrypted connection. Avoid saving your card details on retail sites you rarely use. For extra protection, consider using a credit card or a digital wallet like Apple Pay or Google Pay rather than a debit card. Credit cards typically offer stronger fraud protection and don't pull directly from your bank account.

Take control of your financial security today

Protecting your money online comes down to consistency. No single tool makes you bulletproof, but layering these habits together creates a defense that's tough for criminals to crack.

Start with the highest-impact steps: on two-factor authentication, switch to a password manager, and set up account alerts. Each one takes just a few minutes but dramatically reduces your risk. From there, build the rest into your routine until safe habits become second nature.

The threats online aren't going away. But with the right precautions, you can stay one step ahead and keep your hard-earned money exactly where it belongs.