Issue #156: Guess I’m never doing THAT again

August 17, 2022 • Issue #156

Hi y’all —

When you live in New York City, you learn to do pretty much everything out in the open.

If you’re, say, heading to a costume party in Queens, dozens of strangers on the sidewalk will see you dressed as a hotdog. (True story.) Having a bad day? You’re inevitably going to start crying on a park bench... in full view of concerned-looking tourists. And God forbid you attempt to covertly read smut on the subway.

Since moving here, I’ve adopted a who-cares stance on decorum. But after writing last week about how important it is to keep my bank account number secret lest fraudsters steal my identity, I started wondering if I need to clamp down on other financial habits when I’m out and about.

Specifically, I’m worried I’m exposing myself by using whatever free wireless network I’m on (at the bar, at the cafe, on the train, etc.) to check my bank app on my iPhone.

Should I avoid banking on public Wi-Fi? Is my cell phone’s data plan any safer?

Eileen Tan, chief information security officer at Varo Bank, gave me a straight answer: “Don’t use the public network unless you trust it,” she says.

Firing up my banking app under a random Wi-Fi network puts me at risk of what’s called a “man in the middle” attack. Scammers can set up Wi-Fi sniffers, which intercept data being transferred over a network, or fake hotspots.

There’s nothing stopping someone from sitting outside my local Starbucks, for example, and creating a network that’s called “Starbucks Wi-Fi.” If I connect to that instead of the legit Starbucks network, a stranger could see my user ID, my password, my bank account, my email address and more, Tan says.

In fact, Dave Hatter, director of business growth at cybersecurity firm Intrust IT, says he would “never, ever do any sort of banking transaction on a public network or on free Wi-Fi.”

He, too, says devices like sniffers and Wi-Fi Pineapples are too easy for bad actors to get. All someone has to do is pay $100, watch a couple of YouTube videos on how to mimic a network and take advantage of unsuspecting customers like me. It’s a popular method for fraud because it’s both low-effort and high-reward.

My home (password-protected) Wi-Fi network is more secure because it’s more difficult for scammers to exploit. But probably the safest method is to turn off my iPhone’s Wi-Fi and use my phone’s data network for my online banking needs. It's not impossible to hack into a cellular network, but it's a lot harder than spoofing a public Wi-Fi- network, so the risk is much lower. 

However, Hatter, a self-described "tinfoil-hat guy," says he doesn’t use any banking apps. Period.

Hatter points to a 2019 study where security experts looked at 14 Android and iPhone bank apps with over 500,000 downloads each. The researchers found that attackers could access user data on 13 of the apps; in 76% of cases, the hackers could get in without physically accessing a person’s phone. Other studies have shown banking apps using years-old code with known vulnerabilities.

“When using an app, you don't really have any idea what's going on behind the scenes,” Hatter adds. “You have to trust it’s configured correctly.”

If I’m determined to use public Wi-Fi and/or a banking app, both Hatter and Tan recommend I use a VPN, or virtual private network. VPNs encrypt the data I’m sending over a network, meaning my information is more secure.

(Money’s VPN of choice is ExpressVPN, but do your own research to find a credible option that works for you.)

THE BOTTOM LINE

(but please don't tell me you scrolled past all of my hard work)

I should not check my bank account while connected to a public wifi network because it’s not secure. (Oops.)

Protection is all about having a layered approach. Hatter says if he needs to check his bank account online, he’ll use not only his cellular network but also a VPN. Ideally, he prefers to access his bank through the web browser on his laptop, where he can see in the URL bar that the connection is secure.

These sorts of barriers make hacking a bank account harder. And the harder it is, the more likely it is that a fraudster will give up on trying to steal my money.

“There’s not some magic bullet that's going to make you invulnerable, but you can make yourself a very, very difficult target,” Hatter says.

VIA GIPHY

RECEIPT OF THE WEEK

check out this wild celebrity purchase

VIA INSTAGRAM

When Teresa Giudice, one of the main characters on The Real Housewives of New Jersey, got married earlier this month, she did so in true over-the-top Jersey fashion. Giudice’s hairstylist told Us Weekly that the reality star wore $7,000 worth of hair extensions held back by 1,500 bobby pins. Congrats to the happy couple, and congrats to the internet for making such good memes.

INTERNET GOLD

five things I'm loving online right now

1	I can’t stop thinking about this party invitation from author J.R.R. Tolkien advertising “Carriages at midnight. Ambulances at 2 a.m. Wheelbarrows at 5 a.m. Hearses at daybreak.” Also, it led me to learn about the Inklings, a writers’ group that Tolkien and C.S. Lewis used to be members of. The Inklings used to swap manuscripts, debate literature and — most importantly — drink beers in Oxford, England.
2	Research confirms what we knew all along: Dogs do have individual personalities.
3	Is an AmEx black card worth its $5,000 annual fee? This reddit thread dives into the pros and cons of using its concierge services for an international trip.
4	I love this story from Rest of World about the overseas authors who are pumping out hundreds of chapters of werewolf romance a day. The platforms (which are making money off the writers) even have guides to teach people about the best way to write lupine fiction, including instructions on how “the werewolf plot is a great foundation on which to layer other popular themes – like ‘Werewolf and CEO,’ ‘Werewolf and Mafia,’ and ‘Werewolf and a dragon or other paranormal creature.’” Now all that Jonas Brothers fanfiction I wrote as a teenager suddenly doesn’t seem so weird.
5	Get this girl a guinea pig, stat!

401(K)9 CONTRIBUTION

send me cute pictures of your pets, please

VIA Scholar Esther

Meet Bailey, a pup who thinks you must be barking mad to use a mobile banking app on public Wi-Fi.

See you next week.
 

 
P.S. Do you check your bank app on public wireless networks? What’s the most you would pay for an elaborate hairstyle? Does your pet have an odd personality quirk? Tell me everything at julia@money.com or @SuperJulia on Twitter.

This newsletter is free because Money earns a commission when you click or make purchases from the links in this email and on our site. We also receive compensation for some of the products and services featured in this message. Offers may be subject to change without notice. Learn more about how we make money.

Privacy Policy • Advertise With Us • We're Hiring!

To stop receiving these emails, unsubscribe or manage your email preferences.

Copyright ©2022 Money Group, LLC. All rights reserved.

Metro Office Park Calle 1, Building 7 Suite 204, Guaynabo, Puerto Rico 00968, USA