Keep your payment info safe

Encryption stores your data in a form that can be read only when your phone or tablet is unlocked. When you unlock your device, you decrypt your data. Encryption benefits include:

• If your device is stolen, encryption can add protection.
• On an encrypted device, most personal data is encrypted.

Many devices are encrypted by default. However, some devices may require you to turn on encryption in your device's settings.

To get the most protection for your data on an encrypted device, always require your PIN, pattern, or password to unlock your device when it starts.

If you think there’s been fraud or unauthorized activity on your payments profile, report it within 120 days of the transaction date.

Tip: An unauthorized charge is a transaction that you believe was made fraudulently. If you’d like to dispute a payment made with your Google Pay balance or money sent to a friend, learn how to dispute a payment.

"Phishing" and "spoofing" are fraudulent attempts to access your personal info.

• Phishing is when someone pretends to be someone else and asks you for personal info.
• Spoofing is when someone fakes the identity of the email sender so it seems more trustworthy.

If you get a suspicious email, don’t respond with the info it asks for.

• If the message claims to be from Google, report the email.
• If you think you've been scammed, learn what to do next.

Important: Google never asks you to send personal info like passwords, credit card numbers, or tax info through an email, text message, or phone call. If you get a message that says Google must verify your info, go directly to payments.google.com. If Google needs to verify your info, in the top right, there’s an alert that you can select with instructions.

Step 1. Check what info it asks for

If someone requests personal financial details or other sensitive info on Google Pay, it’s a scam. Never share sensitive info via email or over the phone. Examples of sensitive info include:

• Your passwords, passcodes, or password reset link
• PINs (personal identification numbers)
• Debit or credit card info
• Bank info, like account numbers
• Personal info, like address or Social Security Number

Google won't ask you to download an app to receive support or solve a problem.

If you're still not sure whether an email or message is suspicious, be careful and do not send money or personal info.

Step 2. Find the real sender of an email

1. In Gmail, next to "Reply,” click More Show original.
2. Make sure the "From" address and the "Reply-to" address match.
3. Check that the address on the "Message-id" also matches the "From" address domain.
4. If you don't use Gmail, ask your email host for details on how to verify a sender.

Built-in security

Suspicious payment notification

Your payment info and activity are stored securely with industry-leading encryption. To help protect you during transactions, Google Pay encrypts all of your payments.

A virtual account number is a type of temporary alias for your actual account number. A virtual account number is created when you add a card using the Google Pay app, Google Wallet app, or your banking app. For example, when you pay in stores:

• Your virtual account number is shared with the merchant.
• Your actual account number isn't shared. This helps to keep your account info safe.

To locate the virtual account number:

1. Open the Google Wallet app .
2. At the top, tap the payment card you used for the purchase.
   • You may have to swipe from right to left to find it, then tap the card.
3. At the bottom, tap Details Virtual account number.

Tip: If you don't find "Virtual account number," you must set up the payment card for in-store payments.

Before you add cards to the Google Pay app or for in-store payments, you must set up a screen lock on your device. If you turn off the screen lock, Google Pay removes your virtual account number from your device for your protection.

To make most purchases, you must unlock your phone.