How to Use Online Banking on Your Phone Safely

Online banking on a phone is, when set up properly, safer than online banking on a desktop computer. The phone has fingerprint or face unlock; the bank app is reviewed by Apple or Google before it appears in the store; and a banking transaction over a cellular connection is encrypted end-to-end. The risk isn't the technology — it's a thief impersonating your bank, or a scam call convincing you to authorise the transfer yourself. Here's how to set up banking on your phone, three settings to turn on before your first transfer, and what to do if a transaction looks wrong.

Installing the real banking app

The most common bank-related scam isn't a hacker breaking into your account; it's a fake app posing as your bank in the app store, harvesting your username and password when you sign in. Three rules:

1. Search the app store, then look at three details. The developer name should be the bank itself (e.g., "JPMorgan Chase & Co." for Chase, "Wells Fargo Bank, N.A." for Wells Fargo). The number of ratings should be in the millions, not the dozens. The release date should be years ago, not last month.
2. Cross-check by going to your bank's actual website on the phone's browser. Real banks have a "Get the app" button that links to the legitimate app in the store.
3. Don't install a banking app from a link in a text message or email, even if the message looks like it's from your bank.

Your first login

Open the app. Tap "Log in" — not "Sign up", since you already have an account at the bank. Enter your bank username and password (the same ones you'd use on your bank's website). The bank may text or call you with a one-time code to confirm; enter it.

After your first login, the app will offer to enable Face ID or fingerprint unlock for subsequent visits. Turn this on. From then on, opening the app and looking at it (or touching the fingerprint sensor) signs you in without typing.

Three settings to turn on before your first transfer

Inside the banking app, find Settings or Security and turn on:

• Notification for every transaction over a small amount (e.g., over US$5 or whichever threshold you prefer). You'll get a phone notification when any debit or transfer goes through. Catches fraud in seconds, not weeks.
• Two-factor authentication for transfers. Even if someone gets your username and password, they can't move money without a code sent to your phone number. This is the most important setting.
• Daily transfer limit. Most banks let you set a maximum daily transfer or Zelle limit. Set it to whatever you'd realistically need in a day — typically US$500 or US$1,000. If you ever need more, the bank can lift it temporarily over the phone.

Sending money to another person

Most US banks support Zelle, a system for sending money between bank accounts using only an email address or phone number. Zelle is fast and free — and irreversible. Once a Zelle payment is sent, you cannot get it back. Treat every Zelle payment like handing over cash.

Send Zelle only to people you have actually met in person. Never Zelle a stranger, even if they claim to be from your bank or the government — covered in our scam guide in detail.

For larger transfers (paying a contractor, helping a family member with a down payment), an ACH transfer or a wire is safer because banks can sometimes reverse them. Ask your bank's customer service to walk you through the first large transfer.

Setting up transaction alerts

Beyond the in-app notifications above, set up text-message alerts for:

• Any login from a new device or new location.
• Any change to your account email, phone number, or address.
• Any large transaction (over a threshold you set).

These alerts arrive at the moment something happens — not days later — and are the single most effective fraud-detection tool consumers have.

Spotting a banking scam

The most common scam pretending to be your bank:

"This is Chase fraud department — we've detected an unauthorised transaction. To protect your account, please transfer your balance to a safe account I'll give you."

This is always a scam. Your real bank will never ask you to move money. Their fraud department might call to ask whether you made a specific transaction — and they'll be content with a yes/no answer, after which they'll hang up and reverse the suspicious charge themselves. They will never ask you to send a code, log in, or move money during a phone call.

If you suspect the call is real but want to be safe: hang up, find the bank's number on the back of your card, and call back. A real fraud agent won't take offence.

If a transaction looks wrong

1. Take a screenshot of the transaction (hold the side button and volume-up button briefly on iPhone, or power and volume-down on Android).
2. Call your bank's fraud line immediately. The number is on the back of your debit or credit card. For most banks, fraud lines are 24/7.
3. Don't engage with anyone who calls you about it. If your bank really detects fraud, you contact them, not the other way around.
4. Save all related screenshots and messages until the issue is resolved.

Frequently asked questions

Written by David Chen. Last verified 12 June 2026.