Keep your payment info safe (2024)

Encryption stores your data in a form that can be read only when your phone or tablet is unlocked. When you unlock your device, you decrypt your data. Encryption benefits include:

• If your device is stolen, encryption can add protection.
• On an encrypted device, most personal data is encrypted.

Many devices are encrypted by default. However, some devices may require you to turn on encryption in your device's settings.

To get the most protection for your data on an encrypted device, always require your PIN, pattern, or password to unlock your device when it starts.

If you think there’s been fraud or unauthorized activity on your payments profile, report it within 120 days of the transaction date.

"Phishing" and "spoofing" are fraudulent attempts to access your personal info.

• Phishing is when someone pretends to be someone else and asks you for personal info.
• Spoofing is when someone fakes the identity of the email sender so it seems more trustworthy.

If you get a suspicious email, don’t respond with the info it asks for.

• If the message claims to be from Google, report the email.
• If you think you've been scammed, learn what to do next.

Important: Google never asks you to send personal info like passwords, credit card numbers, or tax info through an email, text message, or phone call. If you get a message that says Google must verify your info, go directly to payments.google.com. If Google needs to verify your info, in the top right, there’s an alert that you can select with instructions.

Step 1. Check what info it asks for

If someone requests personal financial details or other sensitive info on Google Pay, it’s a scam. Never share sensitive info via email or over the phone. Examples of sensitive info include:

• Your passwords, passcodes, or password reset link
• PINs (personal identification numbers)
• Debit or credit card info
• Bank info, like account numbers
• Personal info, like address or Social Security Number

Google won't ask you to download an app to receive support or solve a problem.

If you're still not sure whether an email or message is suspicious, be careful and do not send money or personal info.

Step 2. Find the real sender of an email

1. In Gmail, next to "Reply,” click More Show original.
2. Make sure the "From" address and the "Reply-to" address match.
3. Check that the address on the "Message-id" also matches the "From" address domain.
4. If you don't use Gmail, ask your email host for details on how to verify a sender.

A virtual account number is a type of temporary alias for your actual account number. A virtual account number is created when you add a card using the Google Pay app, Google Wallet app, or your banking app. For example, when you pay in stores:

• Your virtual account number is shared with the merchant.
• Your actual account number isn't shared. This helps to keep your account info safe.

To locate the virtual account number:

1. Open the Google Wallet app .
2. At the top, tap the payment card you used for the purchase.
   • You may have to swipe from right to left to find it, then tap the card.
3. At the bottom, tap Details Virtual account number.

Tip: If you don't find "Virtual account number," you must set up the payment card for in-store payments.

Before you add cards to the Google Pay app or for in-store payments, you must set up a screen lock on your device. If you turn off the screen lock, Google Pay removes your virtual account number from your device for your protection.

To make most purchases, you must unlock your phone.

1. Follow the steps to find, lock, or erase your lost Android device.

   Tip:Erasing your device removes payment info, including credit and debit cards, from the device.

2. If you suspect that your Google Account has been hacked, follow the steps to Secure a hacked or compromised Google Account.