Technologies
Your Venmo Privacy Could Be Compromised. How to Protect Your Account
When it comes to your funds, it’s important to be aware of privacy risks for payment apps.
Millions of people use mobile payment apps like PayPal’s Venmo and Square’s Cash App everyday to transfer money directly from their bank accounts to friends, family and merchants. These platforms offer convenience, but they aren’t without security risks, due in part to their combination of finance and social media. Users can also be targets for hackers looking to drain financial accounts.
But don’t worry — there are plenty of ways for you to secure your Venmo and Cash App accounts with a few simple settings changes and privacy best practices. Here’s what to do.


Basic tips for protecting your privacy on Venmo and Cash App
Both payment apps use encryption and fraud detection technology to protect account information. But to better ensure your security, you should take a few extra steps.
Use a randomly generated password
We know — you’re tired of hearing about how you need to use unique, hard-to-guess passwords for every account. But it’s still true, especially when your money’s involved. One easy way to do this is to use a password manager. Our favorites — including LastPass
, 1Password and Bitwarden — offer a free tier of service with all of the basics: password storage, strong and secure password generation and autofill capabilities.


A password manager can help keep your Venmo and Cash App accounts secure.
Angela Lang/CNETBeware of common scams
Criminals target users of apps like Venmo and PayPal in all kinds of clever ways. There have been reports of hackers posing as Venmo and Cash App support staff, calling or texting users, «helping» them change their passwords and then draining the accounts.
Scammer landlords have asked prospective renters for a deposit before offering apartment tours. Scammer pet owners have used a similar bait-and-switch, offering purebred animals at extremely low prices, asking for advance payment and then disappearing. Cash App’s support page is full of these types of calamities.
«Nobody at Venmo will ever contact you to request a password or verification code to your account,» according to the app’s security support page. The same is true for Cash App.
If you fall victim to a scam on either app, you should contact support@venmo.com or access resources through Cash App’s site.
Don’t use banking apps on public Wi-Fi (or invest in a VPN)
When you log into a financial app on any public Wi-Fi network — at a hotel, airport or coffee shop, for example — it can give malicious actors an opportunity to break into your account. It’s happened on cash-sharing apps before.
If you absolutely need to access your account and can’t use a reliable network, we recommend using a VPN to hide your activity from spying eyes. Here’s how to set up a VPN on your iPhone or Android and our list of the best VPNs of 2022.


Using a VPN while on public Wi-Fi is a good way to protect yourself while using any app related to finance.
Sarah Tew/CNETDon’t send money to strangers
Avoid sending payments to people you don’t know and trust through Venmo and Cash App. Neither app is currently optimized for buying or selling goods or services, though Venmo is working on a business profiles feature to make retail and commercial sales more secure. If you’re a vendor considering using Cash App, you’re better off creating a business account through Square Payments.
Read more: 6 Best Payment Apps
Make all of your Venmo transactions private
This is an absolute must. When you create a Venmo account, by default all of your transactions are public — which means anyone on the internet can see exactly what you’re sending, and to whom. This public record has been used to figure out everything from who won The Bachelor before a season aired to an alleged political sex trafficking investigation.
Making all of your transactions private by default is extremely easy. Open the Venmo app, and tap the three lines in the upper right corner for the menu. Tap Settings > Privacy, and under Default Privacy Setting, tap Private. Now all of your future payments will only be visible to you and the recipient.
You can also change the privacy settings for past transactions. On the same Privacy page, under more, tap Past Transactions. You’ll see the option to Change to Friends, or Change All to Private.
One benefit of Cash App: All transactions are private by default.


If you don’t make your Venmo transactions private, anyone can see them.
VenmoEnable two-factor authentication
Two-factor authentication is a solid way to add another layer of security to your account. When you sign in on a new device, Venmo will send a code to the phone number registered with your account, that you’ll need to enter correctly to access your account.
To enable two-factor authentication on Venmo, open the app and tap the three lines in the upper right corner for the menu. Tap Settings, and under security, tap Remembered Devices. You’ll see the device you’re currently using, and possibly others you’ve used in the past. When you sign on with any of the devices on your list, you won’t need to enter a verification code. To remove any of the devices, swipe left and tap Delete. If you want to enable two-factor authentication on all devices, you can delete them all from this list.
On Cash App, every time you sign into your account on a new device, you’ll be sent a one-time login code. The app recommends adding two-factor authentication to your email account associated with the app for better protection.
Set up a pin or turn on Face ID
Enabling Face ID or a pin adds more security to your account when opening the app or making a transaction.
On Venmo, you can set this up so that every time you open the app, you’ll need to enter either your Face ID (or fingerprint scan depending on device) or your pin. To get started, tap the three lines in the upper right corner for the menu. Tap Settings, and under security, tap Face ID & PIN. Tap the toggle to Enable Face ID & PIN. The app will prompt you to enter a new passcode, and, if you’re on an iPhone, you’ll get a pop up notification asking if you’d like to allow Venmo to use Face ID to unlock your account. Tap OK. If you’re on an Android phone, it may say PIN code & biometric unlock.
On Cash App, you can set up a security lock that requires your Face ID, Touch ID or a pin to transfer funds. Tap your profile icon in the top right corner. Tap Privacy & Security, and under Security, toggle on Security Lock. The app will prompt you to enter a pin, and then enter your email address to confirm your selection with a code.
Setting up a pin or biometric login can help secure your accounts.
Brett Pearce/CNETTurn on payment send notifications
Get alerted to any unauthorized activity on your Venmo or Cash App accounts by turning on notifications.
On Venmo, go to Settings > Notifications. Choose from push, text or email notifications. Under Push notifications, you can toggle on and off notifications for bank transfers, payment received, payment sent and lots more. Turning on at least the payment sent notification is a good way to get an immediate alert of anyone else sending money through your account.
On Cash App, tap your profile icon, and tap Notifications. Tap to turn on push notifications by text or email.
Link a credit card instead of your bank account
Though you can add a checking or savings account to Venmo, it’s more secure to link it to a credit card. Though you’ll be subject to a 3% transaction fee, credit cards typically have much stronger theft and fraud protection than a conventional bank account.
To change your payment method on Venmo, go to Settings > Payment methods, and tap Add bank or card. Then tap Card, and enter your credit card information.
On Cash App, you need to enter your bank account information before entering a credit card. However, you can sign up for a free Cash Card debit card so you can use funds people send you through the app on the card.
For more, check out the best checking accounts, best savings accounts and best credit monitoring services.
Technologies
This Duck-Billed Microphone Protects Against Eavesdroppers, But It Sure Is a Look
At CES 2026, this privacy accessory drastically quiets your conversations, though if you use it in public, you’ll surely raise questions.
Ever wanted to have a phone conversation without others listening in? At CES 2026, I saw a solution to this privacy problem, the Mutalk 2, a wearable microphone that muted my voice from people around me. It also made me look like a cyberpunk platypus.
Coming from Japanese company Shiftall, the Mutalk 2 is a $200 accessory that you wear over your mouth and nose, sealed by a rubber gasket, with a plastic oval extending out for a few inches. It connects to phones or devices over Bluetooth or wired 3.5mm jack. In a demonstration, I wore the Mutalk and chatted over the phone with someone 10 feet away who could hear me clearly on the call, but could pick up only the barest mumbling otherwise.
There’s no getting around the Mutalk’s strangeness, and I would expect to raise eyebrows if I ever wore it in public, as strapping one on made me look like I was wearing a gas mask. To be fair to Shiftall, I don’t have the design chops to suggest a better look for a microphone that incorporates tech to muffle my voice. Granted, I could imagine plenty of reasons to use it in the comfort of one’s own home, like to chat with online friends while gaming late at night without worry of waking up roommates, partners or babies.
From my brief time with the Mutalk 2, it appears to work as intended, and $200 isn’t prohibitive compared to the prices of other microphones. While it undeniably looks odd, its design is more functional than exotic. After I adjusted its rubber straps that went around my head, the accessory sat comfortably enough on my face, and was light enough that it wouldn’t seem to drag down during a longer conversation. The rubber gasket that covers the mouth and nose is removable, making it easy to clean.
If you want private conversations while you’re out in public, there may be less obtrusive ways to go about it than the Mutalk 2, like a throat microphone. But Shiftall’s design has other benefits, such as blocking lip-reading. And it’s worth pointing out that some people out there would love to rock that cyberpunk platypus look. I mean, folks did line up to buy the Razer Zephyr RGB mask — some people embrace parts of the bleeding-edge technological future that’re different from anything else around.
Technologies
Cloudflare Says Winter Olympics Cybersecurity Is at Risk in Spat With Italian Regulators
But Cloudflare’s global head of policy tells CNET the company is open to an agreement with Italy.
The CEO of the networking company Cloudflare is lashing out at Italy in response to regulatory anti-piracy fines, threatening to withdraw from the country and potentially the 2026 Winter Olympics.
Don’t miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.
Italy announced on Jan. 8 that it had issued a fine of 14.2 million euros (approximately $16.5 million) against Cloudflare for failing to block access to pirated content. Soon after that, Cloudflare’s CEO Matthew Prince took to X to call out the fines, describing Cloudflare’s decision not to comply as a fight over censorship. Prince said that complying with Italy’s demands under its Piracy Shield policies would affect content globally.
Italy’s Piracy Shield is a program implemented by the country’s telecommunications regulator, AGCOM. In order to cut down on piracy in the country, such as hosting illegal streams of sporting events, the program allows IP holders to report content violations to a rapid-response automated system. However, some have complained that the 30-minute window given is not enough time for ISPs to properly vet complains, and is resulting in legitimate, non-pirated content being blocked as well.
«In other words, Italy insists a shadowy, European media cabal should be able to dictate what is and is not allowed online,» Prince said.
Yesterday a quasi-judicial body in Italy fined @Cloudflare $17 million for failing to go along with their scheme to censor the Internet. The scheme, which even the EU has called concerning, required us within a mere 30 minutes of notification to fully censor from the Internet any… pic.twitter.com/qZf9UKEAY5
— Matthew Prince 🌥 (@eastdakota) January 9, 2026
In his posts, Prince specifically mentioned the 30-minute timeframe that Italy requires for Cloudflare to disable access to suspected piracy traffic.
«We block pirate streams every time we find one,» he wrote. «We hate them.» But, he said, «we can’t put in place a system where a shadowy cabal can require us to remove GLOBALLY anything they don’t like on the internet within 30 minutes. That’s insane.»
Some of the proponents of Italy’s piracy rules are soccer teams that want to prevent the illegal streaming of their matches.
Prince went on to list steps his company might take, including pulling its cybersecurity service from the 2026 Milano Cortina Winter Olympics, removing Cloudflare servers from Italian cities and holding off on any plans to invest in the country. Prince also suggested he would get US government leaders involved, tagging Vice President JD Vance in his post. Prince also reposted a message addressed to the Italian prime minister, along with an article about Italy’s actions.
The Winter Olympics, scheduled to take place between Feb. 6 and Feb. 22 at sites across Lombardy and Northeast Italy, are a sensitive subject when it comes to cybersecurity, considering the potential that many may use VPN technology to view broadcasts of the event.
Door is open to an agreement, Cloudflare says
In an interview with CNET, a Cloudflare representative said that while the fine from Italy represents more than the company’s total revenue from the country, Cloudflare is still open to an agreement to avoid saying arrivederci to the country.
«We’re still evaluating, and we’re still open to working something out,» said Alyssa Starzak, Cloudflare’s deputy chief legal officer and global head of policy. «That would be a better solution. The hope is we can have some discussions for a more reasonable result.»
Starzak said the company has posted information and conducted outreach to Italian stakeholders about the ways Cloudflare is working to combat unauthorized streaming. But Italy’s law, she said, leaves no room for negotiation or nuance.
«It’s been very much a ‘You must do what we say’ » situation, she said.
Technologies
Transport Your Dungeons & Dragons Hero Off the Page With This Tabletop Gadget
At CES 2026, I found a couple ways that players and dungeon masters can use tech to upgrade their gameplaying experience.
As I walked around CES 2026, my eyes drifted over a poster awash with fantasy heroes, dastardly monsters and rolling dice — and I failed my saving throw to look away. If you’re a fellow tabletop gaming nerd, you might want to follow this pair of gadgets due out later this year.
Tabletop gaming continues to appeal to players with its deliberately analog gameplay, using miniatures, maps, dice and other physical trinkets to keep the focus on real-world play. The niche has grown in popularity over the decades, and a supporting industry has risen around it, offering third-party materials and accessories to enhance the experience. Digital gadgets and software have been added to this mix in recent years, and a new company, Arcalink, has its own supporting products for the avid Dungeons & Dragons player.
The first of Arcalink’s upcoming tabletop augmentations is a gadget that’s small but mighty. About the size of a film canister, the Arcalink One is a rectangular display around 2 to 3 inches long that’s covered in fantasy decorations. These can be swapped out, with one looking like a doorway in stone ruins and another appearing like a blue wizard’s portal (a third, not present but described to me, would look like a Mimic, the classic D&D monster that appears as a treasure chest to trick adventurers).
The Arcalink One’s screen shows a player’s avatar, and since it was built with the fantasy roleplaying game D&D in mind, animations for popular spells that can be triggered by voice commands. Tabletop RPGs encourage the theater of the mind, with players envisioning their characters through vocal descriptions, but the Arcalink One seems like a neat way for them to accessorize with a digital version of their hero (uploaded in JPG or MP4 file formats) that’s neither essential to play nor large enough to be obtrusive — a totemic treat to take from one game to another, swapping out character portraits by using the paired app.
The basilisk in the room is the price tag: the Arcalink One is expected to cost between $100 and $150, Arcalink founder Lizheng Liu told me. While the company hasn’t hashed out the final numbers, that first number is the device itself, and the high end of the range will bundle more of those clip-on decorations along with it.
Over $100 for an optional device is prohibitive for most tabletop players, but I imagine this would appeal to adventurers with deeper pockets who want a neat little plug-and-play gadget to bring more flair to the game table. Also, let’s not pretend tabletop fans aren’t already spending a good amount of money on accessories, dice and miniatures (looking at you, wargamers).
The company plans to let a select group of supporters start backing the Arcalink One in March or April, with a full Kickstarter crowdfunding campaign launching around June.
The second product, Arca Studio, is entirely digital: AI-powered software to help dungeon masters, the thankless gameplay managers who tell the story and give voice to their world’s denizens for their characters to experience. No, it’s not using generative AI to spit out campaign ideas — this AI software records your game sessions and will make it easy to go back and search for characters and plot events while planning ahead of your next game day.
Yes, this is a sort of gaming version of the AI summaries that productivity apps offer when, say, you’ve finished a video chat, but there are a few unique features tailored to tabletop gaming. One makes a word cloud grouping together recurring names and concepts in your campaign recordings to visualize the themes and frequent elements — great for dungeon masters to see which plot lines and adventure types they might be overusing to switch them up.
Arca Studio will launch around May or June and will be a subscription service, though Arcalink hasn’t decided on an expected monthly cost yet. It’s worth pointing out that anything could change in pricing or product features before these two products reach the market — and just like a good tabletop campaign, there might be some last-minute twists that change everything.
-
Technologies3 года agoTech Companies Need to Be Held Accountable for Security, Experts Say
-
Technologies3 года agoBest Handheld Game Console in 2023
-
Technologies3 года agoTighten Up Your VR Game With the Best Head Straps for Quest 2
-
Technologies4 года agoBlack Friday 2021: The best deals on TVs, headphones, kitchenware, and more
-
Technologies4 года agoGoogle to require vaccinations as Silicon Valley rethinks return-to-office policies
-
Technologies4 года agoVerum, Wickr and Threema: next generation secured messengers
-
Technologies4 года agoOlivia Harlan Dekker for Verum Messenger
-
Technologies4 года agoiPhone 13 event: How to watch Apple’s big announcement tomorrow
