Venmo's Payments Were Public by Default for Years. The FTC Had Questions.
For years, Venmo's default setting broadcast who you paid, when, and often why — a public social feed built on top of a payment app, as if splitting a pizza bill were content. The FTC eventually decided that "bank-grade security" and "your transactions are private" were things a company should only say if they're true. In February 2018, it settled with Venmo's owner PayPal over exactly that gap.
A Payment App That Wanted to Be a Social Network
Venmo's public feed was a genuine growth engine — watching a stream of your friends' payment captions ("rent 🏠", "tacos 🌮") made the app feel alive in a way bank transfers never had. But the "public by default" design meant plenty of users didn't realize how visible their transaction history actually was, and Venmo layered in a contacts-based auto-friending feature that could surface connections users hadn't chosen to make public at all.
The FTC's Actual Complaint
The FTC's case wasn't just about the public feed — it alleged Venmo misrepresented how private users' settings actually were, misrepresented the strength of its security as "bank-grade," and misled users about how easily money credited to their Venmo balance could actually be withdrawn, when in practice funds could be frozen or held for review despite marketing that implied instant access. Taken together, the agency argued, Venmo told users a cleaner story about privacy, security, and liquidity than the product actually delivered.
A Settlement, Not a Fine
The FTC announced a proposed settlement on February 27, 2018, with final approval following on May 24, 2018. There was no civil penalty attached — instead, PayPal agreed to stop misrepresenting privacy controls, security levels, and fund-transfer restrictions, to give users clearer disclosures, and to submit to independent compliance assessments every two years for the following decade. It's the regulatory equivalent of being grounded with extra chores instead of paying a fine: no check gets written, but someone is now checking your homework for ten years.
Private by Default, Eventually
Venmo has since shifted its defaults and given users clearer controls over who sees their payment history — the version of the app you use today assumes less publicness than the one the FTC investigated. The "nice thing" here was never really the public feed itself; it was the ability to use a payment app without reading a settlement to find out what it had actually been doing with your data the whole time.
Filed from public reporting:
