Safe Shopping and Banking

Mobile Payment Apps: Using Them Securely

General cautions for peer-to-peer and wallet payment apps: sending money to the wrong person, checking details, locking your phone and handling requests for payment.

On this page
  1. Convenient, fast and often final
  2. Two kinds of payment app
  3. Sending money to the wrong person
  4. Be wary of pressure to pay
  5. Protect the phone that holds the money
  6. Keep alerts and records on
  7. Fake apps and fake messages

Convenient, fast and often final

Mobile payment apps let you pay a friend, split a bill, tap your phone at a checkout or send money to a seller. Their appeal is speed. The same speed is the main thing to be careful about. When a payment lands in someone else’s account within seconds, undoing it can be difficult, and in some cases not possible.

This article covers general cautions. Apps and providers differ in features, fees and protections, so read the terms of the service you actually use and treat this as a starting point rather than a rulebook for any one app.

Two kinds of payment app

It helps to separate two common types:

  • Wallet-style payments. Your phone stores a digital version of a card, and you tap or authorize at a shop or online checkout. These generally work like a card payment, and the rules of the underlying card or account often still apply.
  • Peer-to-peer transfers. You send money directly to another person by name, phone number or handle. These are designed for people who know each other, and protections for goods or services bought from strangers are often limited or absent, depending on the service.

Many problems arise when people use a peer-to-peer transfer as though it were a protected shop payment.

Sending money to the wrong person

The most common error is simple: money goes to the wrong recipient. It might be a similar name, a mistyped number or a contact that was saved incorrectly. Some careful habits cut the risk:

  • Check the recipient every time. Confirm the full name and any details the app displays before you confirm, not only the first letters.
  • Send a very small test amount first if you are paying someone new and the amount is large, then ask them to confirm receipt.
  • Verify new contact details through a separate channel. If someone texts you a new number or account for a payment, call a number you already know to check.
  • Review the amount. Extra digits and decimal points are easy to miss on a small screen.
  • Slow down when you are tired or rushed.

If you do send money to the wrong person, contact the app provider and your bank quickly, explain exactly what happened and ask what they can do. You can also ask the recipient to return it, if you can reach them safely. Whether the funds can be recovered varies, and a refund is not guaranteed.

Be wary of pressure to pay

Scammers like payment apps for the same reason ordinary users do: speed and finality. Warning signs include:

  • A stranger who asks you to pay by app for goods you have not seen, particularly if the price is very low.
  • Someone claiming to be from your bank, a government office or a utility who asks you to transfer money to “protect” it. Official impersonation of this kind is a recurring pattern, and real organizations do not ask you to move funds to a safe account.
  • A request to send money to receive a larger payment, prize or job offer.
  • A message claiming a friend is in trouble and needs money urgently. Account takeovers mean a message can look like it came from someone you know, and voice cloning can make a phone call convincing too. Calling the person back on a number you already have is a simple check.
  • A buyer who overpays and asks you to refund the difference.

If someone wants you to hurry, pause. Real sellers and real friends can generally wait a few minutes while you check.

Protect the phone that holds the money

Your phone is effectively your wallet, so basic device security matters.

  • Use a screen lock with a PIN, password or biometric, and set the phone to lock quickly when idle.
  • Add a separate lock to the payment app if it offers one.
  • Turn on two-step verification for the app and for the email account linked to it. Attackers often target email first, because it can be used to reset other passwords.
  • Keep the operating system and apps updated. Software updates fix known weaknesses.
  • Install apps only from official stores, and be cautious about permissions that seem unrelated to payments.
  • Know what to do if the phone disappears. The lost phone steps include locking or wiping it remotely and contacting your bank and app providers.

Be careful about who can see your screen when you pay, and avoid typing codes or passwords on public networks you do not trust.

Keep alerts and records on

Turn on notifications for every payment sent or received. They let you spot an unauthorized transfer within moments. Review the app’s history regularly, along with the linked bank or card statements, and look for unfamiliar charges. If you see something you did not authorize, report it to the provider through the official app or website, and consider changing your password.

Be aware that payment apps sometimes link to several funding sources. Review which cards and accounts are connected and remove those you no longer use.

Fake apps and fake messages

Fraudsters create fake payment pages and apps that look legitimate. Messages that say a payment is pending and ask you to log in via a link are a classic phishing trick. Open the app yourself rather than following the link. Be careful with emails or texts saying a payment “failed” or an account is “locked.” Official notices will be visible inside the real app, and if they are not, that is a clue.

The complete guide to safe shopping and banking

Safe Online Shopping: The Essentials
Read the guide

Keep exploring

Guides from other topics

All topics →