Financial Data Security: The One Question That Stops Most Fraud

A few days before a doctor's appointment, a text arrives. Please put your card details into this app so we have them on file, to make paying easier. Paying was already easy: the card is in the phone, tap and go.

So what does the surgery actually gain by holding the number? Maybe it has been left chasing unpaid bills. What the patient loses is not maybe at all. There is now one more place his card details sit, one more system that can be breached, run by people he has never met and protected to a standard he cannot see. And if a fraudulent charge turns up later, sorting it out is slower and messier when he handed the details over himself.

The doctor is not a crook. He has simply been talked into helping another company collect data it has no business holding. That is what almost all financial fraud looks like up close. Not a break-in. A polite request, at a moment when security is the last thing on your mind, and you saying yes.

The Ask Always Comes the Same Way

Phishing is someone pretending to be a business or authority you trust so that you hand over information or money. It opens small: your name, then your date of birth, then your address, each correct detail making the next request feel safer. Where do they get the first ones? Usually a breach at a company that collected more than it needed. An electricity provider rarely needs your date of birth, and yet many hold it, and when it leaks, that is the thread a fraudster pulls.

The tell is nearly always manufactured urgency. Confirm now, click now, call now, or your account is suspended. A real bank, a real tax office, a real utility can wait for you to ring them back. Anyone who cannot wait is telling you what they are.

Apple Pay Does the Right Thing in Hardware

One of the biggest single sources of card fraud is your number being captured somewhere and reused. Apple Pay and wallets like it close that off, and it is worth knowing exactly how:

• Tokenisation. The merchant never receives your real card number, only a device-specific token plus a one-time code for that single payment, useless anywhere else.
• Biometric authentication. Every payment needs Face ID or a fingerprint, so a stolen phone is not a stolen card.
• A device-specific number. Your card is given a unique number tied to that one device, not the number printed on the plastic.
• The Secure Enclave. The payment data lives on a separate security chip, walled off from the operating system and from every app on the phone.
• No tracking. Apple does not log your purchases or pass your transaction history to anyone.
• Real-time alerts. A notification for every payment, so an unauthorised charge is visible within seconds, not on next month's statement.

If a shop you paid is breached next year, there is nothing of yours in the leak. It is the "would I hand them the physical card?" test, answered permanently, in silicon.

Budgeting Apps and Downloaded Spreadsheets Both Break the Rule

There are two usual ways people try to track their money, and both walk straight into what this article has been warning about.

A budgeting app. You hand it your internet banking username and password. It, or more often a third-party data company you have never heard of sitting quietly behind it, then logs in as you and pulls your entire banking history. The one thing you should never do, sold to you as the headline feature.

A budgeting spreadsheet off the internet. A spreadsheet is not a document, it is a program. The macro that makes a "smart" template total itself and colour its own cells is the same feature that lets a file read your other files, send data out, or quietly install something. Office now blocks macros in downloaded files by default, which helps, but the block is one right-click away, and someone determined to make the clever template work will make it. Anyone can build a hostile spreadsheet, name it "Ultimate Budget Planner 2026", and post it for free download; it looks identical to a helpful one, and once you enable the macros to make it work, the damage is done before you have seen a single number.

Where Does My Money Go does neither. It runs in your browser, so there is nothing to download and nothing that can carry a macro. We never ask for your banking credentials, and there is no third party between you and your bank. We only ever hold the financial data you choose to send us: a transaction file you export yourself, that you can delete whenever you like. Payments run through Stripe, which is PCI DSS compliant and handles card details so that we never hold your card number either.

It is not that our security is cleverer than everyone else's. It is that we deliberately built the product so there is almost nothing here to steal. The safest data is the data you were never asked for.