Connect with us

Technology

Are bank text codes enough to protect you?

Published

on

Are bank text codes enough to protect you?

NEWYou can now listen to Fox News articles!

Bank security can feel confusing because every account seems to handle it differently. One bank sends a text. Another sends an email. Another asks you to approve a login inside its app. So when someone says, “Use stronger two-factor authentication,” it is fair to wonder what that actually means. 

Kyra from West Plains, Missouri, reached out to us asking:

I watched your podcast video where you talked about two-factor authentication and getting codes by email from your bank and other accounts. My accounts seem to do that automatically, as far as I know. Is that enough, or do I need to contact my bank to make sure it’s set up correctly

— Kyra from West Plains, Missouri

Kyra, this is a great question because a lot of people are in the same boat. They see a code pop up and assume they are fully protected. The truth is a little more complicated. Text or email codes are better than having only a password.

Advertisement

Text and email codes, however, are not always the strongest options. Scammers have found ways to steal codes, trick people into sharing them or take control of a phone number through a SIM swap scam. Once scammers control your number, they may receive the text codes needed to get into accounts that use SMS-based multi-factor authentication.

TOP MULTI-FACTOR AUTHENTICATION APPS TO PROTECT YOUR ACCOUNTS

Bank customers using text-message security codes may still face risks from SIM swap scams and phishing attacks. Cybersecurity experts recommend stronger login protection when available. (Anna Barclay/Getty Images)

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

What two-factor authentication actually does

Two-factor authentication, also called 2FA or multi-factor authentication, adds another step when you log in. Instead of relying only on your password, the account asks for something else to prove it is really you.

That “something else” might be a code sent by text, a code from an authenticator app, a security key or a prompt inside your bank’s mobile app. Two-factor authentication is one of the best ways to protect your accounts because it adds a second layer beyond your password. 

Advertisement

So, Kyra, if your bank already sends you a code, that is a good sign. It means some form of extra protection is turned on. But the next question is whether your bank offers a stronger option.

SIM SWAP SCAM DRAINED FLORIDA WOMAN’S BANK ACCOUNT IN MINUTES

Why text message codes are not the strongest choice

Text message codes are popular because they are easy to use. Most people know how to read a text and type in a code. That convenience comes with risk.

A SIM swap scam happens when a criminal tricks your phone carrier into moving your phone number to a device they control. Once that happens, your calls and texts may go to the scammer instead of you. The American Bankers Association warns that scammers may try to intercept two-factor authentication codes so they can access financial accounts.

Scammers can also call, text or email while pretending to be your bank. They may say there is fraud on your account and ask you to read back a code. That code may actually be the key they need to log in. Scammers often try to trick people into sharing verification codes because they need both the password and the code to break into an account.

Advertisement

BEWARE FAKE CREDIT CARD ACCOUNT RESTRICTION SCAMS

That is why the safest rule is simple: Never share a bank security code with anyone who contacts you. A real bank should not call and ask you to read back a login code.

Why an authenticator app is usually better

When your bank supports it, an authenticator app is usually a stronger choice than text messages. Apps such as Google Authenticator, Microsoft Authenticator, Authy and Duo Mobile generate a changing six-digit code on your phone.

The big advantage is that the code is created inside the app. It usually works even when you do not have cell service. It also does not depend on your phone number, which helps reduce the risk from SIM swap scams.

That said, authenticator apps are not magic. If you type a code into a fake banking website, a scammer may still capture it. One-time password authentication isn’t phishing-resistant. Still, authenticator apps remove some of the biggest weaknesses tied to text-message codes.

Advertisement

NEW PHISHING ATTACK USES REAL-TIME INTERCEPTION TO BYPASS 2FA 

Two-factor authentication adds a second layer of protection to online banking accounts, but not all methods offer the same level of security. Authenticator apps and passkeys are generally safer than text codes. (Kyle Ericksen/WWD/Penske Media via Getty Images)

The strongest option, if your bank offers it

Some banks and financial services give you stronger ways to prove it is really you when you log in. Two of the strongest options are hardware security keys and passkeys.

A hardware security key is a small physical device, often shaped like a USB stick, that you plug into your computer or tap against your phone to approve a login.

A passkey lets you sign in using your device, such as your phone or computer, often with Face ID, Touch ID, a fingerprint or a screen lock.

Advertisement

These options are harder for scammers to steal because they are designed to work only with the real website or app. That means a fake banking website usually cannot trick them the same way it can trick someone into typing in a text code.

For most people, the safest order is simple: use a security key or passkey if your bank supports it. If not, use an authenticator app. If text codes are the only option, keep them turned on because they are still better than using only a password.

How to check your bank’s security settings

You may not need to visit a branch. In most cases, you can check this from your bank’s official website or app.

Start from a computer if you can. Go directly to your bank’s official website by typing the web address yourself. Do not click a link from a text or email, even if it looks real.

Then look for a section with a name like:

Advertisement
  • Security
  • Login & Security
  • Privacy & Security
  • Two-Factor Authentication
  • Multi-Factor Authentication
  • 2-Step Verification

Once you are there, look for an option called Authenticator app. Some banks may use different wording, such as authentication app, one-time passcode app, TOTP, security app or third-party authenticator. If you see that option, follow the setup steps. Your bank will usually show a QR code on your computer screen. Open your authenticator app on your phone, tap Add account or the + button, then scan the QR code. The app will generate a six-digit code. Enter that code on your bank’s website to confirm setup.

Do not skip the backup codes

This part matters more than people realize. If your bank gives you backup codes, save them right away. Print them and store them somewhere safe, or place them in a secure password manager. These codes can help you get back into your account if your phone gets lost, damaged or replaced.

Also, make sure your bank has your current email address and phone number on file. If your recovery information is old, getting back into your account can become much harder.

If you share access with a spouse or trusted family member, ask your bank how additional users should set up their own secure login. Avoid sharing one password or one authenticator code when the bank offers separate user access.

What to do if your bank only offers text codes

Some banks may not offer a third-party authenticator app, but may let you approve logins inside the bank’s own mobile app. That can be stronger than a text message because the approval happens inside the banking app rather than through your phone number.

AMERICA’S MOST-USED PASSWORD IN 2025 REVEALED

Advertisement

If yours only offers text-message codes, do not turn them off. Text codes are still better than no second layer at all. However, you should ask your bank whether it supports a stronger option. You can call the number on the back of your debit or credit card, use secure messaging inside the bank’s app or visit a branch.

Ask this: “Do you support authenticator apps, passkeys, hardware security keys or app-based login approval for online banking?”

If the answer is no, keep text codes turned on. Then strengthen the parts you can control. Use a strong and unique bank password, and store it in a trusted password manager so you do not have to remember it or reuse it anywhere else. Check out the best expert-reviewed password managers of 2026 at CyberGuy.com.

In addition, ask your mobile carrier to add a port-out PIN, number transfer lock or account security PIN to help reduce SIM swap risk. Also, turn on account alerts for transfers, password changes and new device logins.

 HOW SIM SWAPPING LED TO A $1.8M CYBER FRAUD CASE

Advertisement

Security experts warn that scammers can intercept text verification codes or trick customers into sharing them. Customers should never provide login codes to unsolicited callers or texts. (Karl-Josef Hildenbrand/picture alliance via Getty Images)

Should Kyra contact her bank?

Yes, but she probably does not need to walk into a branch unless she prefers in-person help. Kyra should first log in to her bank’s official website or app and check the security settings. If she sees an authenticator app, passkey, security key or app-based approval option, she should consider using it. If she only sees text or email codes, she should keep them turned on and contact the bank to ask whether stronger login options are available.

She should also make sure her bank password is strong and unique, protect her email account with strong two-factor authentication and confirm that her account alerts are turned on.

WORLD PASSWORD DAY: CHECK IF YOUR PASSWORDS ARE SAFE

Kurt’s key takeaways

Kyra’s question gets to the heart of account security. Seeing a code arrive by text or email can feel reassuring. And yes, it is better than relying on a password alone. However, bank accounts deserve the strongest protection your bank offers. If you can move from text codes to an authenticator app, that is a smart upgrade. If your bank supports a passkey or security key, even better. And no matter which method you use, never give a security code to someone who calls, texts or emails you out of the blue.

Advertisement

Have you checked whether your bank still relies on text codes, and would you switch banks if yours refused to offer stronger login protection? Let us know by writing to us at CyberGuy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Valve is so behind on Steam Controller orders that some won’t ship until 2027

Published

on

Valve is so behind on Steam Controller orders that some won’t ship until 2027

Valve has some good news and bad news about Steam Controllers. The good news: if you make a reservation for a Steam Controller, the company will now show you one of three estimates of when you’ll be able to actually order your gamepad: by September 2026, by December 2026, or sometime in 2027. The bad news: any reservations made today “indicate a 2027 date for shipping,” Valve says.

“We have no plans to stop making Steam Controller,” according to Valve. “But as we look at the current demand compared to how many we know we can make by the end of the year, we want to manage expectations as much as we can with regards to when folks can expect to receive their order.”

Valve’s very good new Steam Controller went on sale in early May, and the initial rush led some people to run into frustrating problems with trying to check out ahead of the controllers eventually going out of stock. A few days later, the company announced that it would be implementing a reservations queue for interested buyers so they could get on a waitlist. If you’re on the waitlist, when you get notified that a Steam Controller is ready for you to buy, you have 72 hours to actually make the order.

“When we launched Steam Controller last month, we quickly saw that initial demand exceeded our expectations,” Valve says. “Switching to a reservation queue has (hopefully) cut down on the headaches on the customer side, and for us it’s also been helpful as we plan ahead and try to get as many out as quickly as we are able.”

All three of Valve’s big hardware products were delayed from a planned early 2026 launch because of the component crisis, Valve still hasn’t announced when the Steam Machine PC or Steam Frame VR headset might go on sale. However, just yesterday, Valve officially launched its big SteamOS 3.8 update with support for the Steam Machine. It’s also been importing a lot of hardware into the US as of late.

Advertisement
Continue Reading

Technology

McDonald’s AI drive-thru may take your next order

Published

on

McDonald’s AI drive-thru may take your next order

NEWYou can now listen to Fox News articles!

The next time you pull up to a McDonald’s drive-thru, the voice taking your order may not be human. McDonald’s is testing a new AI-powered system called ArchIQ at five U.S. locations. The company has not said where those restaurants are located. The voice assistant, nicknamed Archy, can take drive-thru orders and has shown it can handle both English and Spanish.

For anyone who has repeated “no pickles” into a speaker box more than once, this could sound helpful. However, if you remember McDonald’s last AI drive-thru experiment, you may also wonder whether your burger order could somehow turn into a bag full of surprise McNuggets.

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.

Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

WOULD YOU EAT AT A RESTAURANT RUN BY AI? 

Advertisement

McDonald’s is testing an AI drive-thru system called ArchIQ at five U.S. restaurants. (Kurt “CyberGuy” Knutsson)

 

What is McDonald’s AI drive-thru?

ArchIQ is McDonald’s new AI system for restaurants. It can take drive-thru orders and also help with operations behind the scenes.

In a post on X, McFranchisee, an anonymous McDonald’s franchisee account, said the system is currently in five test stores and has processed more than one million transactions. The account also said about 90% of orders were completed without a human stepping in. That number sounds promising. Still, McDonald’s has not confirmed a nationwide launch date. For now, this remains a limited test.

The system also appears to connect with a bigger McDonald’s plan called “McDonald’s > NEXT.” CEO Chris Kempczinski described the strategy as a way to bring in more customers and improve restaurant productivity. The plan also includes menu changes, restaurant redesigns, technology upgrades and more focus on hospitality.

 

Why McDonald’s is testing AI ordering

Drive-thrus can get chaotic fast. Someone changes an order after the total appears. A child calls out from the back seat. Road noise makes the speaker hard to hear. Then the driver remembers the extra sauce after everything has already gone through. That is the type of pressure McDonald’s wants AI to handle.

Advertisement

If ArchIQ works well, it could help restaurants move cars through the line faster. It may also reduce mistakes during busy hours. Workers could then focus more on preparing food, handling payments and helping customers who need a real person.

ArchIQ also appears to have a management role. In the same X post, McFranchisee described Archy as a tool that could alert managers to bottlenecks or other issues before they slow down operations. 

STARBUCKS USES CHATGPT TO SUGGEST DRINKS BASED ON MOOD AS EXPERT WARNS OF HIDDEN DOWNSIDES

The AI assistant, nicknamed Archy, can take drive-thru orders and may also help managers spot restaurant slowdowns. (McFranchisee)

 

McDonald’s tried AI drive-thru ordering before

This new test follows McDonald’s earlier AI drive-thru experiment with IBM. That program involved more than 100 restaurants. McDonald’s ended the test in 2024 after customers complained about order accuracy. Some mistakes also went viral, creating an embarrassing moment for McDonald’s and raising questions about whether the technology was ready for the drive-thru. Customers reported wrong items, strange quantities and other order mix-ups. That history is why this new test will get extra attention.

Advertisement

This time, McDonald’s is working with Google technology. McFranchisee also claimed every McDonald’s in the U.S. is getting Google Edge Cloud hardware in anticipation of the rollout. McDonald’s seems to believe the newer system can perform better than the last one. The real test will come when regular customers use it during real drive-thru rushes.

 

How McDonald’s AI drive-thru could help customers

If McDonald’s gets this right, the most obvious benefit is speed. An AI ordering system does not get tired during a long shift. It may also help more customers order in the language they prefer. That could make a busy drive-thru feel less frustrating, especially during breakfast or late-night hours.

The system may also ask clearer follow-up questions and catch missing details before the order reaches the kitchen. That would be a win for customers who want to get in, get their food and get on with the day.

 

The biggest problem with AI drive-thru orders

The biggest concern is accuracy. AI can still misunderstand people. That gets frustrating fast when you are trying to grab lunch between errands or get your kids fed from the back seat. A wrong order wastes time. It also puts workers in the position of fixing a mistake the machine made.

There is also the customer service side. Some people like hearing a real person at the speaker. Others may find an AI voice cold or annoying, especially if the system gets confused.

Advertisement

Then there is the privacy question. If an AI system takes your order, customers may wonder what gets collected, how long it is kept and who can access it. McDonald’s has not publicly explained those specifics for this current ArchIQ test.

ALEXA+ LETS YOU ORDER FOOD LIKE A REAL CONVERSATION

A drive-thru menu board stands outside a McDonald’s restaurant in Hercules, Calif., on Oct. 23, 2024, amid an E. coli outbreak linked to onions in Quarter Pounder sandwiches that has sickened dozens and killed one person across the U.S. (David Paul Morris/Bloomberg via Getty Images)

 

How to avoid AI drive-thru mistakes

Before you leave the drive-thru, take a moment to check the order screen. Make sure the items match what you said. Listen when the system repeats your order. Keep your receipt until you confirm the food is right.

Also, avoid sharing extra personal details at the speaker box. Your order should only require your food choices and payment.

Advertisement

If the AI gets confused, ask for a crew member. You do not need to keep going back and forth with a machine over fries.

 

What this means for you

For now, you probably will not notice a change at your local McDonald’s. The ArchIQ test appears limited to five U.S. restaurants, and the company has not said when it could expand.

Still, this gives customers a preview of where fast food may be heading. AI could soon play a bigger role in how restaurants take orders and manage the kitchen. That may speed up the line, though it could also make the experience feel less personal.

 

Watch the CyberGuy Live replay: Lock Down Your Phone in 30 Minutes

Your phone holds your email, passwords, photos, banking apps and personal data. In this free CyberGuy Live replay, Kurt the CyberGuy walks you step by step through simple phone security fixes you can do at your own pace. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Watch the replay and get our checklist here: CyberGuyLive.com

 

Kurt’s key takeaways

McDonald’s clearly wants AI to play a bigger role in its restaurants. From a business point of view, the idea makes sense. Shorter drive-thru lines could help franchisees and customers. Better restaurant data could also help managers fix problems faster. But I still want the human backup. Food orders can be messy because people are messy. We change our minds. We talk over each other. We forget the extra ketchup until the last second. AI may handle much of that one day. For now, I would treat it like any busy drive-thru interaction. Speak clearly. Check the order. Do not pull away until you know your food is right.

Advertisement

Would you trust an AI voice to take your McDonald’s order, or do you still want a real person on the other end of the speaker? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com. All rights reserved.

Continue Reading

Technology

Midjourney goes from generating cat images to full-body ultrasound scans

Published

on

Midjourney goes from generating cat images to full-body ultrasound scans

Midjourney CEO David Holz just showed off the company’s first hardware product and plans to build a San Francisco spa, which he admitted is a bit different from the “cat pictures” produced by its AI image generator. Dubbed The Midjourney Scanner, it’s an ultrasound-based full-body scanner that uses a ring of sensors to capture vertical slices of the inside of your body, looking at the composition of your muscle, fat, bone, and organs to start. Holz said ideally, you could do this once a year or every single day, as it “aims for image quality comparable to MRI in many ways.”

He mentioned that one way he’d like to use it would be to see how his body changes in response to diet and workout changes, saying, “I’m not the most measured man on Earth yet, you know, but maybe I want to have that daily [measurable information].” A set of job listings advertises the company’s goal as trying to “build and launch the world’s first full-body ultrasound CT scanner, ultimately bringing safe, fast, and high fidelity preventative scanning to billions via a magical spa experience.”

The Midjourney Scanner was developed in a partnership with ultrasound tech company Butterfly Network, which said it uses “40 Butterfly Ultrasound-on-Chip imaging modules per system.”

The scanning process starts with stepping onto a platform that drops down into the water on rails through a ring of thousands of transducers that create ultrasonic waves. It then records the ripples passing through your body to analyze them and create detailed 3D images. The scan takes about 60 seconds. Holz said about a dozen people have been scanned so far.

It starts by stepping into a shallow pool of golden light. You then begin to descend into the water. Your body passes through a ring of underwater sensors, each acting like a dolphin, using its echolocation. The sensors send ultrasonic sound waves through your body from every angle. With enough waves, and enough angles, we form an image of what’s happening inside your body.

It combines those sensors with two petaflops of processing power. But after watching the livestreamed reveal, I’m still unclear on what Midjourney’s AI image generation tech exactly has to do with the Midjourney Medical effort, beyond an alternative business for otherwise-unused AI compute.

Advertisement

Holz hopes to put 10 of the scanners into a Midjourney Spa location in San Francisco’s Union Square that will open before the end of 2027 and offered to scan the hands of attendees at its launch event. The Midjourney Spa will have a gym, saunas, and cold plunges to go along with the hot tub–equipped scanning rooms where visitors will get into the water to be scanned.

He did mention that various medical applications would require FDA clearances, but for now, Midjourney Medical says it’s working on “body composition maps” that don’t require the same level of clearance as diagnostic imaging. It also says the “library of scans” users create can be shared with doctors, AI health tools, or others, and that, “We take data privacy seriously — more details on our data policies will come as we get closer to launch.”

Holz suggested that eventually these scans could become better than an MRI, without radiation, powerful magnets, or other complicating factors, to get a look at what’s going on inside people’s bodies “real fast.” In response to a question, he imagined a future where the FDA had a class of devices to look at “weird” things and allowed people to “just try to get as much data as we can.”

Continue Reading
Advertisement

Trending