Interactive checker inputs and results
Before checking: Select only conditions that match your own payment accounts. The result is a count of selected conditions, not a probability of account takeover or financial loss. An unfamiliar transaction or unexpected request for a verification code can require action even if you check only one box. Do not enter passwords, bank details or private transaction records into the checklist.
Interactive calculator unavailable: JavaScript is required to process your own inputs. The worked example, calculation assumptions and related guidance on this page remain available without JavaScript.
Account-security actions depend on which item you selected
This is a fictional two-case illustration, not a probability score. Person A selects just one item: reuse of the wallet password on another important account. Person B selects three items involving unused wallet accounts, unreviewed transaction history and an old linked bank account. A’s count is lower, but password reuse can warrant more immediate action than some routine maintenance items. The current checkbox total does not weigh severity.
| Selected condition | Useful response |
|---|---|
| Reused wallet password | Change it to a unique password; review recovery settings and unfamiliar sessions. |
| Supported multi-factor authentication is off | Enable the strongest supported sign-in protection and safeguard recovery codes. |
| Significant balance held in the app | Check the specific balance’s protection and consider transferring unneeded funds to an insured account. |
| Transactions rarely reviewed | Compare recent activity with your records and report unfamiliar payments through official channels promptly. |
| Transaction alerts disabled or ignored | Enable available transaction and sign-in notifications and confirm they reach you. |
| Primary bank account linked | Review the connection, payment authorization and whether the link is still necessary; linking itself is not evidence of fraud. |
| Multiple wallets or unreviewed connections | Inventory wallets and links; resolve balances, subscriptions and disputes before unlinking or closing accounts. |
| Account recovery procedure unknown | Check the provider’s official account-recovery steps and update secure backup contact options. |
| Recipients not independently verified | Stop and confirm unexpected requests through a separate trusted channel before sending money. |
| Business and personal activity mixed | Record the business purpose and supporting receipt, then reconcile transfers without double-counting. |
Check stored-balance protection: Payment-app balances do not always have the same deposit protection as funds held directly at an insured bank or credit union. Check your provider and account arrangement rather than assuming coverage. See the CFPB guidance on money held in payment apps.
Use the action that matches your selection. Zero selected conditions does not certify safety. If the displayed actions do not match your choices, use the table above and check the relevant settings in your provider’s official app. See the FTC mobile-payment guidance and our wallet-security guide.
Unfamiliar activity or lost access?
Contact the provider or funding institution through a verified channel promptly.
Secure access and retain a masked incident record. Do not wait for a high checkbox count.
Routine preventive review?
Check unique credentials and recovery options, then linked accounts, balances and alerts.
Resolve pending items before removing connections or closing unused wallets.
How to interpret the exposure check
Use the checklist to review settings and follow up on a specific weakness. Password reuse, missing sign-in protection and an unfamiliar transaction call for different actions; the table above and the priority order below help you choose the next step.
For independent guidance, see the FTC’s mobile payment app safety guidance. Also review the security, recovery, dispute, and account-linking settings of the specific wallet or payment service you use because protections differ by provider.
Turn the checkbox count into an ordered security plan
Start with unfamiliar activity, then secure access and review linked accounts. Routine maintenance can follow once an urgent incident is addressed.
- Investigate unfamiliar activity first: If transactions, sessions or password-reset requests are not yours, contact the provider or funding institution through a verified app or phone number, secure access and retain a masked incident reference.
- Stop credential reuse: Change a reused wallet password to a unique one, review account-recovery email and phone settings, and enable the strongest supported multi-factor sign-in protection.
- Review connected funding sources: Identify linked bank accounts, cards, devices and authorizations. Remove access you no longer need after checking that pending payments, refunds and disputes will not be disrupted.
- Check the money and notifications: Review any stored balance and the provider’s actual account protections. Turn on available transaction and new-device alerts, then verify that you receive them.
- Document follow-up: Record when you checked each control. Repeat when a phone is lost, a new payment device is added or account settings materially change.
What this checker cannot verify
It cannot inspect your real wallet configuration, test whether a password is compromised, authenticate a payment request or calculate a loss probability. It also does not determine whether money held in a payment app qualifies for deposit insurance; that depends on the actual provider and account arrangement. Do not enter passwords, card numbers, verification codes or private account records into the tool.
See CFPB information about deposit insurance and the FTC mobile-payment safety guide. Use the wallet-security checklist for routine habits and the identity-theft recovery guide if an incident has already occurred.