Everyday Privacy

Privacy Settings for Payment Apps: Venmo, Cash App, Zelle

By the RedactZero Team · September 21, 2026 · 9 min read

The short version

Venmo is the only major US payment app with a social feed, and for most of its life it set every payment and every friends list to public by default. A feed entry shows who paid whom, when, and the note, never the amount. New Venmo accounts created after the May 2026 redesign start at friends-only, but older accounts keep their old settings. Set payments to Private, hide past transactions, make your friends list private, and stop syncing contacts. Cash App, Zelle, PayPal, and Apple Cash have no public feed, but each still hands your real name and a contact detail to the person on the other side.

What actually leaks from a payment feed

A Venmo payment set to Public or Friends shares three things: the payment note, the names of the sender and recipient, and the timestamp. Venmo's own help pages confirm the dollar amount is never shown. That sounds harmless until you realize the note and the names are the part that tells a story.

Twelve months of notes reveal your rent, your roommate, your landlord, your dealer, your ex, your therapist, and which bar you were at last Friday. Names and timestamps show who you spend time with and when. Anyone building a picture of you, whether a stalker, a scammer, or a curious coworker, gets it without asking. Venmo's help pages describe Public as visible to "anyone on the internet", which is the literal scope.

There is one saving grace built into the app. Venmo says it always applies the more restrictive setting between the two people in a payment. If you are Private and your friend is Public, the payment stays private for both of you.

Why Venmo is the app to worry about

Venmo launched with a social feed as its core feature and defaulted new accounts to public sharing for roughly 17 years. Regulators and researchers have documented the consequences repeatedly since 2017. No other mainstream US payment app publishes your activity to strangers, which is why most of this guide is about Venmo.

The Federal Trade Commission got there first. On February 27, 2018, the FTC announced a settlement with PayPal over Venmo. The complaint alleged Venmo misled users about its privacy controls: unless a consumer changed two separate settings, some transactions could still be shared publicly, and the other participant in a payment could retroactively make a private transaction public. The order, finalized in May 2018, bars Venmo from misrepresenting what its privacy settings do and requires outside compliance assessments every two years for a decade.

The scale was documented the same year. Privacy researcher Hang Do Thi Duc used Venmo's public API, which needed no login, to download every public transaction from 2017. The total was 207,984,218 payments, each carrying names, dates, and messages. In June 2019, student Dan Salmon showed nothing had changed by scraping 7 million more transactions over six months, according to TechCrunch.

Your friends list is the bigger leak

Even people who set every payment to Private have been exposed through their friends list, which shows everyone the app has connected you to. Venmo now lets you set that list to public, friends only, or private, but that option only exists because reporters found the President of the United States through it.

In May 2021, BuzzFeed News located Joe Biden's Venmo account in under ten minutes. His payments were private. His friends list was not, and at the time there was no setting to hide it. From that one list the reporters identified nearly a dozen family members and mapped a web of White House officials and their own contacts. Venmo added a friends-list privacy setting after the story ran, and removed its global feed of strangers' payments that July.

The setting has not fixed the habit. In July 2024, Wired reviewed the public friends list of vice-presidential nominee JD Vance, which included political operatives, financiers, and tech executives. In late March 2025, Wired found that national security adviser Mike Waltz had a public list of 328 friends. CBS News reported the contacts included journalists, government officials, active and retired service members, and members of Congress. Both accounts went private only after reporters asked.

The reason these lists fill up is contact syncing. When you first install Venmo it asks for access to your phone contacts, then matches your address book to existing accounts and adds them as friends. You never chose to publish that graph. The app built it.

What Venmo changed in 2026

On May 11, 2026, PayPal announced a rebuilt Venmo app that is rolling out gradually through the year. Venmo confirmed to The Verge that new users' posts now default to friends-only during onboarding instead of public, and Engadget reported the full rollout is due by fall. That is the first change to the default since the app launched, and it only covers people signing up now.

Three caveats matter. First, Venmo has not said that existing accounts are switched, so if you signed up before 2026 your payments are still on whatever setting you last chose, which for most people is Public. Second, friends-only is not private: your friends' feeds still show your payments, and your friends include whoever contact sync added. Third, the friends feed itself still exists. The announcement talks about making it "even easier to manage privacy settings on individual transactions", not about turning the feed off.

Lock down Venmo in five minutes

Five settings close the Venmo leak for an existing account: the default for future payments, the visibility of past payments, the friends list, contact syncing, and whether you appear in other people's lists. The steps below follow Venmo's own help pages as of September 2026, so if a menu has moved, search the help center for the setting name.

  1. Default for future payments. Open the Me tab, tap the Settings gear, tap Privacy, and choose Private. Every payment you send from now on is visible only to you and the other person.
  2. Past transactions. In the same Privacy menu, find the option for past transactions and switch them all to Private. Venmo only lets you make past payments more private, never less, so this is a safe one-way move. You can also change any single payment by tapping its current privacy label.
  3. Friends list. Still under Privacy, open Friends List and set it to Private. Friends only is the middle option if you use the social side of the app.
  4. Contact sync. Revoke Venmo's access to your contacts in your phone's app permissions, then prune the friends the sync already added.
  5. Appearing in other lists. Venmo also lets you choose whether your profile shows up in other users' friends lists. Turn that off too, since your friends' lists may be public even when yours is not.

Venmo debit card, credit card, and merchant purchases are already private by default, so you do not need to touch those. If you want a broader sweep of your settings across apps, our privacy checklist for beginners covers the same routine for the rest of your phone.

How the other apps compare

Only Venmo runs a social feed. Cash App, PayPal, Zelle, and Apple Cash treat a payment as a private transaction between two people, which removes the biggest risk. What they share instead is your real name and a way to reach you, which is a smaller leak but a real one for anyone hiding from a specific person.

AppSocial feed of paymentsWhat the other party seesFindability control
VenmoYes; public by default before 2026, friends-only for new accounts since May 2026Name, username, note, timestampFriends list and profile visibility settings; contact sync optional
Cash AppNo public feedName and $Cashtag; may also show shared history and mutual contacts$Cashtag is public by design; contact upload optional; toggles under Security & privacy
PayPalNoName and the email or phone on your accountSearch privacy toggles for name, email, phone, username; QR and PayPal.Me still work
ZelleNoName as on your bank account, enrolled phone or email, messageNone beyond which phone or email you enroll
Apple CashNoSent through Messages or Wallet to a known contactLimited to people you already message

Source: Venmo help center (privacy settings), Cash App privacy notice and help center, PayPal help center (search privacy settings), U.S. Bank Zelle FAQ, Apple Support (Apple Cash), as read in September 2026.

Cash App and PayPal settings worth changing

Cash App and PayPal do not broadcast your payments, but both let strangers look you up unless you turn discoverability off. Cash App's $Cashtag is public by design and doubles as a payment link. PayPal lets anyone search for you by name, email, phone, or username until you switch those searches off.

On Cash App, tap your profile icon, then Security & privacy. Review whether you have uploaded your phone contacts, which Cash App's privacy notice says is optional and can be switched off at any time. The same notice says Cash App may show other customers your name, $Cashtag, your prior transaction history with them, when you joined, whether you are in their contacts, and how many of their contacts have also paid you. You cannot turn all of that off, but limiting contact upload and choosing a $Cashtag that is not your full name reduces what a stranger can match.

On PayPal, go to Profile, then Data and privacy, then Search privacy. PayPal's help page says that with all the toggles off, someone searching your name, email, or phone will not even see that an account exists. People who already have your email or phone can still pay you, and your QR code and PayPal.Me link keep working, so nothing breaks.

Zelle and Apple Cash: no feed, but still a name leak

Zelle and Apple Cash have nothing to lock down because they have no feed, no friends list, and no profile. The trade-off is that Zelle sends your legal name and a contact detail to every recipient, and Apple Cash runs through Messages, so the recipient is already someone with your number.

According to U.S. Bank's Zelle FAQ, a recipient sees your name as listed on your bank account, the phone number or email address you registered with Zelle, and any message you added. Nothing else is disclosed. You cannot substitute a nickname, and the name comes from the bank, not from you. If you pay a marketplace stranger or a landlord you do not trust, that person now holds your real name plus a working email or phone.

The practical fix is to enroll Zelle with a contact detail you are willing to give out. A dedicated email alias works well; our guide to email aliases for privacy explains how to set one up. Apple's support page describes Apple Cash as "like any other private transaction between two people" and advises only sending to people you know, which is the right frame for Zelle too.

What a payment app setting cannot hide

Closing your feed stops strangers from browsing your life, but it does not make you anonymous to the people you pay. Every app above shows the other party at least your name, and most show a username, email, or phone. Those identifiers are the same ones that people-search sites use to link you to an address.

That link is the real risk for anyone with a stalker, an abusive ex, or a public-facing job. A username reused across Venmo, Instagram, and a forum is a thread someone can pull. A phone number given out in a Zelle payment can be typed into a reverse-lookup site that returns your home address and relatives. Our guide to masked phone numbers covers how to keep a separate number for payments and marketplace deals.

It is worth checking what those identifiers already lead to. RedactZero's free exposure scan checks an email against known breaches, looks for a username across public profiles, and lists the data brokers likely to hold a profile on you. Nothing you scan is stored. If a broker is listing your phone or address, the free, dated opt-out steps are in our removal guides.

Habits that keep the feed closed

Settings drift. Apps redesign menus, accounts get recreated, and a family member sets up a teen account with different defaults. A few habits keep a payment app quiet after you have locked it down, and they take less effort than the initial cleanup.

See what your payment identifiers already expose

Run a free scan on the email or username you use for payments to see which breaches and data brokers already have it - no account, nothing stored.

Run a free exposure scan

Frequently asked questions

Are Venmo transactions public by default?

For accounts created before the 2026 redesign, yes. Person-to-person payments were set to Public unless you changed the setting. Venmo told reporters in May 2026 that new accounts now default to friends-only during onboarding. Existing accounts keep whatever setting they already had, so check yours.

Can anyone see how much money I sent on Venmo?

No. Venmo's help pages say a Public or Friends payment shares the payment note, the names of the sender and recipient, and the timestamp. The dollar amount is never shown in the feed. The note and the names are usually the revealing part.

How do I make all my past Venmo payments private?

Open the Me tab, tap the Settings gear, tap Privacy, and look for the option to change your past transactions. Venmo lets you make past payments more private but never less private, so switching everything to Private is a one-way, safe move.

Is my Venmo friends list public?

It can be. Venmo lets you set your friends list to public, friends only, or private, and adult accounts have historically defaulted to public. Reporters used public friends lists to map the contacts of a president in 2021, a vice-presidential nominee in 2024, and a national security adviser in 2025.

Does Cash App have a public feed like Venmo?

No. Cash App does not publish your payments to a public feed. What is public is your $Cashtag, which creates a shareable payment link. Cash App's privacy notice also says it may show other users your name, $Cashtag, prior transaction history with them, join date, and mutual contacts.

What does someone see when I pay them with Zelle?

Your name exactly as it appears on your bank account, the phone number or email address you enrolled with Zelle, and any message you added. Zelle has no social feed, but it does hand your real name and a contact detail to every person you pay.

Can I use a payment app without giving out my phone number or email?

Partly. Venmo and Cash App let people pay you by username or $Cashtag, and PayPal lets you turn off search by name, email, and phone while still accepting payments through a QR code or PayPal.Me link. Zelle always exposes the phone or email you enrolled with.

Did Venmo change its privacy defaults in 2026?

Yes, for new accounts. PayPal announced a rebuilt Venmo app on May 11, 2026, and Venmo confirmed to The Verge that new users' posts default to friends-only during onboarding. Venmo has not said that existing accounts are switched, and the public feed of friends' payments still exists.

Sources: Venmo Help Center, "Manage your Venmo privacy settings" and "Changing Payment Privacy & Hiding Past Payments"; Federal Trade Commission press releases of February 27, 2018 and May 24, 2018 on the PayPal/Venmo settlement; Public By Default (Hang Do Thi Duc, 2018 analysis of 2017 Venmo public API data); TechCrunch, June 16, 2019 and July 20, 2021; BuzzFeed News, May 14, 2021; Electronic Frontier Foundation, July 21, 2021; Fortune, July 19, 2024 and CBS News, March 2025, both citing Wired; PayPal Newsroom, May 11, 2026; The Verge and Engadget, May 2026; Cash App Privacy Notice and Help Center; PayPal Help Center, "Search privacy settings"; U.S. Bank Zelle FAQ; Apple Support, "Send and receive money with Apple Cash".