With a public API, Venmo’s default privacy settings expose private user data

zelle big banks venmo

Those who use Venmo as their primary money-transfer app, may want to consider changing their privacy settings. After a security researcher analyzed over 200 million Venmo transactions back in 2017, it became clear the app exposes a large amount of private details about its users, The Guardian reports.

The project was created by Berlin-based researcher Hang Do Thi Duc, who highlighted all of her findings via a website called “Public by Default.” On the site, she explains how she was able to learn an ‘alarming amount’ about Venmo’s users by pulling a total of 207,984, 218 transactions all via the app’s public application programming interface (API) — which can be accessed by anyone.

Even though Venmo does allow you to choose what is or isn’t public, all transactions are public by default — which some users may not realize. To protect your information, you can choose to make any future transactions visible by only the sender and recipient — that way, they won’t show up on the public feed. There’s also the option to make all past transactions private as well.

Using the logged data via the API, Do Thi Duc was able to piece together the lives of five different Venmo users identified as: ‘The Cannabis Retailer,’ ‘The Corn Dealer,’ ‘The Lovers,’ ‘The YOLOist,’ and ‘The All Americans.’ Each one includes stories of who they are with specific details she was able to find simply by sifting through their transactions — including exactly how many transactions were carried out by each person in 2017. While she was also able to see full names, she did not publish that identifying information.

“This Venmo user — a young woman with a Greek last name — had 2,033 transactions in eight months’ time. And through her Venmo transactions emerges an unhealthy portrait. She loves Coca Cola (280 transactions) and pizza (209 transactions), and often goes for coffee with the same three friends. She also likes to eat a lot of sweets, especially donuts,” she writes about ‘The YOLOist.’

On the site, Do Thi Duc explains the project will hopefully shed light on the fact that companies should be putting user data protection first. While Venmo’s public feed seems harmless — and even a source of entertainment for some — we don’t truly realize how much information we’re sharing. This includes your first and last name, transaction history, and blatantly revealing where and with whom you’re spending your time by listing who it is the money is going to.

Gaming

Minecraft Earth hands-on preview: The next big AR craze Is coming

Minecraft Earth is a new mobile augmented reality game from Microsoft that has Pokémon Go dead in its sites. The cute monster collect-them-all started the genre, but Minecraft Earth hopes to redefine it.
Movies & TV

These are the best movies on Hulu right now (May 2019)

From dramas to blockbusters, Hulu offers some great films to its subscribers. Check out the best movies on Hulu, whether you're into charming adventure tales or gruesome horror stories.
Mobile

These 100 best iPhone apps will turn your phone into a jack-of-all-trades

The iPhone is the most popular smartphone in the world, and we want to bring out the best in yours. Behold our comprehensive list of the best iPhone apps, from time-saving productivity tools to fun apps you won’t be able to put down.
Social Media

Instagram’s new Explore grid tempts you to open your wallet

Instagram has made some changes to its Explore tab that might tempt you into the occasional shopping spree. It's also planning to add Stories to the grid, mixing them up with the existing photos and videos.
Gaming

Get ready to slay spiders and skeletons in real life with Minecraft Earth

Minecraft Earth is the new augmented reality mobile game that uses the Minecraft engine. We have everything you need to know including the release date, features, price, phone compatibility, and more.
Mobile

Grab it as soon as it pops up: The OnePlus 7 Pro is now available for sale

The OnePlus 7 Pro has been revealed, and it's a monster of a phone with a stunning redesign, a pop-up selfie camera, powerful flagship specs, and a price that's hundreds of dollars less than the competition.
Mobile

The Realme X is so cheap and so good that it defies the rules of economics

The Realme X has a 48-megapixel camera, an in-display fingerprint sensor, an AMOLED screen, and a Snapdragon 710 processor, yet it costs from $220. We've tried out the phone to see if it's too good to be true.
Mobile

Mad U.K. retailer slashes 99% off Google Pixel 3a price for a few lucky buyers

The Google Pixel 3 and Pixel 3 XL are considered to be two of the best Android smartphones, but it looks like Google could be prepping a midrange line. Say hello to the Pixel 3a and Pixel 3a XL.
Mobile

How to use recovery mode to fix your Android phone or tablet

If you’re having a problem you can’t seem to resolve with your Android device, or maybe you want to update it or wipe the cache, recovery mode could be what you’re looking for. Here's how to get your Android phone into recovery mode.
Home Theater

Why you can’t buy Car Thing, Spotify’s first hardware device

Spotify created a voice-activated, in-car device that lets you listen to music and podcasts. But Car Thing, as it is known, is not for sale. Instead, it will be used to gather data from a limited set of customers.
Social Media

Be the master of your own Insta-verse with multiple Instagram accounts

Whether you own a small business or have separate Instagram accounts for your five cats, we'll walk you through the process of switching between your multiple accounts on your Apple or Android devices.
Mobile

Can Apple or Samsung steal the OnePlus 7 Pro's flagship killer title?

OnePlus has long been the go-to for flagship specs under a flagship price. But now Apple and Samsung have challengers in the arena, and they want the Flagship Killer crown for themselves. Who wins? We found out.
Deals

Turn your Apple tablet into a laptop with one of these iPad keyboard cases

A keyboard case serves to both protect your iPad and give you a set of laptop keys. You don’t have to shell out tons of cash for a good one, either; if you’re looking for a way to turn your iPad into a 2-in-1 laptop, check these deals…
Mobile

Google Pixel 4 will reportedly ditch physical buttons and display notch

The Google Pixel 4 will reportedly feature massive design changes, including the removal of clickable power and volume keys in favor of capacitive touch areas. The smartphone is also said to be dropping the display notch.