Why money is a surveillance channel, not just a payment method
Financial visibility works through two different channels. One is a real-time transaction diary: a joint account or an authorized-user card shows every deposit, withdrawal, and purchase as it happens — where you were, what you bought, sometimes who you were with. The other is slower: a credit report, showing addresses and account history over time, not day-to-day movement. Shared with someone else — a joint account holder, a family member with card access, an ex who still knows your logins — either channel can become a way to track someone without any scanner or spyware, because the person watching usually has legitimate access.
Joint accounts and authorized-user cards show everything
If you share a checking account, every deposit, withdrawal, and card swipe is visible to every person on the account. Either owner generally has the same right to view activity, withdraw funds, or close the account outright, according to the CFPB, which notes that “in most circumstances, either person on a joint checking account can withdraw money from and close the account.”
Authorized-user credit cards work in reverse: the primary cardholder’s statement shows every purchase made on an authorized user’s card, by merchant name, date, and amount, mailed or emailed monthly as part of how the account works — the ordinary mechanics of shared finances, which is why it’s easy to overlook as a privacy risk.
If you’re planning around a shared account and a controlling partner, read Safety first: before you remove anything first — closing a joint account, or being removed from it, can alert the other person.
P2P apps: Venmo’s privacy settings, and why they matter
Peer-to-peer (P2P) apps add a social feed on top of a running transaction history. On Venmo, every payment has a privacy setting, and by default that can make transactions visible well beyond the two people involved. Per Venmo’s support documentation on managing privacy settings, there are three options: “Public: Anyone on the internet may be able to see the transaction,” “Friends only: The transaction will only be shared with your Venmo friends and with the other participant’s Venmo friends,” and “Private: We will not share the transaction anywhere other than in your personal transactions feed under the Me tab and with the other participant.” Dollar amounts stay hidden either way, but names, notes, and timestamps are shared beyond the two of you whenever a payment is Public or Friends. Venmo defers to whichever side chose the more restrictive setting.
To check or change this: Me → Settings gear → Privacy, where a default-audience setting governs future payments, and a separate Past Transactions control switches your existing history to private in bulk — treat this as one-way, since Venmo doesn’t present it as reversible.
Two more settings live in the same menu: payment notes/Venmoji have their own visibility control, per Venmo’s page on customizing payments, and your friends list can be visible to other users, friends only, or private, per Venmo’s support page on friends. These controls are independent, so check all of them; menus vary on other P2P apps.
Credit reports reveal addresses and account activity — not day-to-day movement
A credit report is a different kind of trail than a bank or P2P statement: it doesn’t show where you went today, what you bought, or who you were with. Per the CFPB’s list of consumer reporting companies, it contains your current and past residential addresses, payment history on accounts as reported by the creditors who furnish it — not every account in your name, only the ones a creditor chooses to report — and a record of who has checked your report (hard and soft inquiries). That’s a slower, coarser trail: a new address, a new account, an inquiry from a lender you don’t recognize. It’s a second channel worth watching, but not a location diary the way a shared account or P2P feed is.
Businesses that legitimately pull your report include lenders, employers doing background screening, and landlords, per the same CFPB document. A card issuer specifically “can look at your full credit report when you apply for a credit card or if you’re a customer,” and a company you’re not a customer of must have your permission before it can pull your credit — that page speaks to card issuers specifically rather than every permissible purpose under the Fair Credit Reporting Act, but the underlying principle is why an ex or family member generally can’t legitimately pull your report just because they know your details. The more realistic risk is coerced or fraudulent debt opened in your name, which shows up on your report rather than pulled from it — covered below.
Freezing your credit and setting a fraud alert — both are free
A credit freeze is the strongest tool against someone opening new accounts in your name, and it costs nothing. According to the FTC: “When a credit freeze is in place, nobody can open a new credit account in your name” — including you, until you lift it. “Anyone can freeze their credit report, for any reason,” free at all three nationwide bureaus — Equifax, Experian, and TransUnion.
A fraud alert is lighter-weight: it tells businesses to verify your identity before opening new credit, but — unlike a freeze — it doesn’t block anyone from viewing your report. An initial alert lasts one year and needs to be placed with only one bureau, which must notify the other two; an extended alert, for identity-theft-report filers, lasts seven years.
Reviewing the reports themselves matters too: since the COVID-19 pandemic, all three nationwide credit reporting companies allow free weekly requests, per the CFPB — worth doing periodically to catch a new address or an inquiry you didn’t authorize.
Financial abuse: what it is, and where the law stands
Controlling access to money is a form of domestic violence in its own right. NNEDV’s Financial Abuse Fact Sheet defines it as “behavior that seeks to control a person’s ability to acquire, use, or maintain economic resources and threatens their self-sufficiency and financial autonomy,” including “controlling how money is spent; withholding money or basic living resources; giving a partner an ‘allowance’; stealing money, credit, property, or identity from a partner.” The same fact sheet cites older research on scale: “In a 2012 Cornell study, over 30% of responding domestic violence services reported that more than a quarter of their clients were prohibited from opening a bank account or had their credit score lowered because of economic abuse.”
Federal law has its own definition of economic abuse, but it’s narrower than it sounds: 34 U.S.C. § 12291(a)(13) defines the term “in this subchapter, for the purpose of grants authorized under this subchapter” — it governs eligibility for certain federal grant programs, not protective orders. The definition itself is broad — “behavior that is coercive, deceptive, or unreasonably controls or restrains a person’s ability to acquire, use, or maintain economic resources to which they are entitled” — but that language doesn’t by itself create a protective-order remedy.
Some states recognize economic abuse directly in their protective-order statutes. Maine’s, for example, defines “economic abuse” and allows that in a final protection order, “the court may enter a finding of economic abuse” (Maine Revised Statutes, Title 19-A, §4102 and §4110). Whether your state’s law does the same varies widely — better raised with a local advocate or attorney than assumed.
One harm regulators have started examining but haven’t yet acted on: “coerced debt,” where an abuser forces someone to take out credit or loans, or opens accounts in their name. The CFPB has acknowledged this directly: “Abusers often use coerced debt as a tool of control, forcing their partner or other family members to take out credit cards or loans through threats, physical violence, or manipulation. They may secretly open accounts in survivors’ names, force them to sign financial documents, or run up charges on existing accounts.” The CFPB opened an advance notice of proposed rulemaking in December 2024 on coerced debt in credit reporting; the comment period closed in April 2025 and no proposed rule has followed — the item remains at the pre-rule stage on the federal government’s own rulemaking tracker (reginfo.gov, RIN 3170-AB36). Credit reporting still doesn’t automatically distinguish coerced debt from debt someone took on themselves; in practice that generally means disputing each account individually.
Safer banking steps advocates recommend when separating
If you’re planning to separate from someone who has had access to your finances, NNEDV’s financial-safety-planning guidance recommends, for people preparing to leave: “Consider taking at least half of any joint funds immediately upon leaving, or 75% if you’re leaving with children,” while documenting expenditures, since “you may be asked to account for expenditures at a later date.” The same guidance recommends opening “a separate bank account” and changing “all direct deposits and account Personal Identification Numbers (PINs)” once you’ve left. NNEDV recommends a separate account rather than specifying a different bank; a different institution is a reasonable extra step, but a new bank alone doesn’t cut off every shared access point, so check statement delivery, recovery contacts, and linked apps too. If you’re not yet able to leave, NNEDV suggests — only if it’s safe — putting small amounts of extra income into “a private, separate account or hiding place.”
NNEDV’s broader guidance to “change all usernames and passwords on all online accounts (banking, email, etc.)” applies to financial apps too — see Securing your accounts when someone knows you for how to do that safely.
A few other things worth considering, at your own pace:
- Open a separate account, ideally at a different institution, reducing the chance of a shared login or joint statement reaching someone you don’t want to see it.
- Review your credit report for coerced or fraudulent accounts before you need to rely on your credit. Catching this early gives you more time to dispute it while you still have documentation.
- Remove yourself, or the other person, as an authorized user, if it’s safe to do so. As primary cardholder, removing them stops their future purchases from reaching your statement; as authorized user, removing yourself stops your purchases from appearing on theirs. Either way, this can notify the other person — think through the timing.
Before you touch any shared account or card, revisit Safety first: before you remove anything — closing or changing a shared financial account can be one of the most detectable actions you take. If you’re gathering records of financial abuse or coerced debt for a future legal filing, see Evidence and help for how to preserve documentation safely first.
No credit freeze, privacy setting, or new account erases a financial history that already exists on paper or in someone else’s memory. But freezing your credit, tightening app-level privacy settings, and separating your day-to-day banking from a shared history are free, concrete steps that close off the easiest ways someone keeps watching.