Venmo did not provide an immediate comment to WIRED’s inquiry. However, in response to questions regarding the Waltz and Wiles accounts, spokesperson Erin Mackey stated, “Venmo is committed to maintaining customer privacy. Customers have the option to select their privacy settings for both individual transactions and friends lists. We offer a straightforward process for users who wish to make these private.”
Tara Lemieux, with a 35-year background in the US intelligence sector—including agencies like the National Security Agency and the Department of Homeland Security—emphasizes the significance of understanding data privacy when using third-party applications. “Everyone has the right to use applications they deem necessary,” Lemieux stated, underscoring the potential national risks posed by uninformed sharing or exploitation of information. She expressed concern that seemingly innocuous public transactions on Venmo could be analyzed by foreign intelligence services to identify patterns and potential points of leverage, such as familial transactions that could become vulnerabilities.
Lemieux remarked on the rapid technological advancements outpacing data management capabilities, pointing out the challenge of retracting publicly available information once shared. Mike Yeagley, a commercial data and security risk expert with over 15 years advising the US Department of Defense, also highlighted concerns regarding data privacy. He explained that understanding the “digital exhaust” from common app transactions is crucial at the national security level, as these details potentially expand the digital profiles of individuals—including those in high-level government positions.
Yeagley described adversaries as highly adept in data collection, emphasizing that even minor publicly shared information may be exploited strategically. Venmo clarified that its “contact syncing” feature, which linked phone contacts to the app, was phased out over two years ago. Presently, users must manually search for and add friends, who must accept the request, to create connections. Despite these measures, Venmo’s privacy policy notes that users’ networks remain visible unless privacy settings are actively modified. To conceal connections, users need to navigate to Settings > Privacy > Friends List and select Private.
This report includes contributions from Stephen Lurie.
