At Microsoft’s annual Build conference on Tuesday, the company announced a slew of new or expanded AI initiatives, including a super app, in-house reasoning models, a cybersecurity tool, and OpenClaw-esque AI agents. All this news added up to a clear message: Microsoft is positioned to be one of the biggest players in AI, and it’s finally acting like it.
Technology
How to protect yourself from the Venmo, Zelle and Cash App scam that can wipe out your savings in seconds
paymen
Imagine walking down the sidewalk and being confronted at gunpoint by a crook.
Open the payment app on your phone and transfer out your hard-earned cash, or take a bullet in the head. That’s one phone cash ripoff scenario of many playing out in real-life America.
Other cash app crimes are happening due to the vulnerability of an unlocked iPhone without the new Stolen Device Protection turned on in iOS. These are examples of how mobile payment apps can put your money and your life at risk.
Do you use mobile payment apps like Venmo, Zelle or Cash App to send and receive money? If so, you’re not alone. These peer-to-peer payment services now handle an estimated $1 trillion in payments. And with that much money involved, there are also now a lot of fraud and scams going on, according to Alvin Bragg, the Manhattan district attorney. He says these apps are exposing many people to scammers and thieves and are costing them a lot of their hard-earned cash.
CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS, AND EASY HOW-TO’S TO MAKE YOU SMARTER
Manhattan District Attorney Alvin Bragg (manhattanda.org)
In response, Bragg has written letters to the companies that own these apps, demanding they improve their security and protect their users from scams and thefts. His specific request is that they impose limits on transactions, require secondary verification of up to a day and better monitor unusual activity. He says he is requesting meetings with the companies to discuss these issues.
Venmo, Cash App and Zelle apps (Kurt “Cyberguy” Knutsson)
How an unlocked device can lead to financial disaster and personal harm
Bragg’s letters describe how these financial apps enable criminals to access unlocked devices and exploit them for financial gain and identity theft, saying,
“These crimes involve an unauthorized user gaining access to unlocked devices and then draining bank accounts of significant sums of money, making purchases with mobile financial applications, and using financial information from the applications to open new accounts.
“Offenders also take over the phone’s security by changing passwords, recovery accounts, and application settings. The ease with which offenders can collect five- and even six-figure windfalls in a matter of minutes is incentivizing a large number of individuals to commit these crimes, which are creating serious financial, and in some cases physical, harm to our residents.”
MANHATTAN DA ALVIN BRAGG CALLS FOR CASH APPS TO CRACK DOWN ON FRAUDSTERS
What are the mobile payment apps doing to prevent fraud?
The companies that own these apps have responded to Bragg’s comments and said that they are doing their best to provide a safe and reliable service to their customers. We reached out to all three companies. Here are their responses to us.
“PayPal and Venmo take the safety and security of our customers and their information very seriously. In addition to proactively leveraging sophisticated fraud detection tools, manual investigations, and partnering closely with law enforcement agencies to protect our customers against common scams, we have several options in place to enable enhanced layers of security and protection directly within our apps.” — PayPal and Venmo spokesperson
“Cash App continues to be committed to building trust with our customers and investing in areas that help build a safe and secure platform. We work proactively and diligently to safeguard our customer’s money and mitigate against the risk of fraud on our platform through a combination of preventative controls like multi-factor authentication, account transaction limits, fraud detection, and consumer education. We also partner with law enforcement agencies to detect and combat criminal activity.” — Cash App spokesperson
“We are aware of isolated criminal incidents described in the Manhattan District Attorney’s letter. Providing a safe and reliable service to consumers is the top priority of Early Warning Services, LLC, the network operator of Zelle®, and our 2,100 participating banks and credit unions. As a result of our continued efforts to build on Zelle’s strong foundation of security, less than one tenth of one percent of transactions are reported as fraud or scams, and that percentage keeps getting smaller. Our efforts include implementing industry-leading fraud and scam prevention measures for consumers like in-app safety notifications, and send limits and restrictions.” — Spokesperson for Early Warning Services, LLC, the network operator of Zelle
What’s the problem with mobile payment apps?
Bragg says that he is seeing a lot of cases where people have lost money or had their personal information stolen by using these apps. He said that this is happening because of the way these apps work on your phone or tablet. Here are three ways that crooks can cheat you or steal from you using these apps.
1) Phishing: This is when someone pretends to be someone else and sends you a message or email asking you to send money or give them your account details. For example, you might get a message from someone who says they are your friend, family member or a charity and they need your help urgently. Or you might get an email from someone who says they are your bank, the IRS or a mobile payment app and they need you to verify your account or update your information.
2) Spoofing: This is when someone creates a fake profile or account that looks like a real one and tries to fool you into sending money or accepting a payment. For example, you might get a payment request from someone who says they are selling something online, but their name, photo, or username is slightly different from the real seller. Or you might get a payment from someone who says they are a buyer, but they are actually using a fake check or a stolen credit card.
3) Device theft: This is when someone takes your phone or tablet and uses your mobile payment apps to take your money or make purchases without your permission. For example, someone might grab your phone while you are using it in public, or break into your car or home and take your device. Or someone might ask to use your phone for a legitimate reason, but then use it to access your mobile payment apps behind your back.
Woman on iPhone. (Kurt “Cyberguy” Knutsson)
MORE: STOLEN DEVICE PROTECTION IN LATEST IOS 17.3 UPDATE PROTECTS YOUR IPHONE EVEN MORE FROM CROOKS — THIS THIS ON ASAP
How can you protect yourself from mobile payment fraud?
Mobile payment apps have some security features to help protect you, but they are not enough, and you should not rely on them alone. You should also do these 10 things.
1) You should always access the payment app from the official app or website, and not from any third-party platforms or services.
2) Look at the security settings that the payment app offers and make sure they’re all set to the highest and most protective settings.
3) You should create a strong, unique, and complex password for each of your mobile payment apps and change it often. Consider using a password manager to generate and store complex passwords.
4) Enable two-factor authentication, which means that you need to enter a code or use your fingerprint or face to unlock your account to prevent unauthorized access. This way, even if someone knows your password, they can’t log in without your device or confirmation.
5) Lock your device and log out of your apps. You should always lock your phone with a password, PIN, pattern, fingerprint or face. Never share your password, PIN or security code with anyone. You should also log out of your mobile payment apps after each use and turn off the auto-login feature. This way, even if someone takes or borrows your device, they can’t access your mobile payment apps without your approval.
6) Verify the identity and legitimacy of the sender or receiver. You should always check the name, photo, username and contact information of the person or organization you are sending money to or receiving money from before accepting or sending any payment requests. You should also confirm the reason and amount of the transaction before you agree to it. If you are not sure or have any doubts, you should contact the person or organization directly through another way, such as a phone call, text message or email, but only if you know for sure that those forms of communication are legitimate. You should never send money or give your account details to anyone you don’t know or trust, or anyone who asks you to do so out of the blue.
7) Link your Venmo, Cash App and PayPal account to a credit card as opposed to a debit card, so you can dispute a charge from scammers more easily. Zelle does not allow credit card payments. However, keep in mind that linking a credit card to your payment app can provide additional protection in the event of fraud, but this can come with extra costs in terms of transaction fees.
8) Try not to keep a balance in your money-transferring apps. You have a much better chance of being helped by your bank or credit card company when it comes to fraud than you do from a money-transferring app.
9) Never click on links from unknown sources, especially when an email or text appears to have come from the payment App. Protect yourself from accidentally clicking malicious links by running antivirus software on your device. Get my picks for best antivirus software here.
10) Monitor your account activity and report any suspicious or unauthorized transactions. You should set up notifications from your payment app and your bank via text or email, and check your account activity regularly. Look for any signs of fraud, such as payments you didn’t make or receive, or changes to your account settings or information.
MORE: WATCH OUT FOR THIS ZELLE IMPOSTER SCAM ON FACEBOOK MARKETPLACE
What to do if you believe you have been scammed on Zelle, Cash App or Venmo
1) If you notice any suspicious or unauthorized transactions, report them to the payment app as soon as possible. You can contact their customer support team or use the report feature on the app or website to report any scams, phishing attempts or unauthorized transactions. You can also block or unfriend any users who are involved in scams.
2) Second, if you used your bank account or credit card to fund the transaction, contact your bank or credit card issuer to report the fraud and dispute the charge.
3) The third step is to change your password immediately to prevent further unauthorized transactions. Consider using a password manager to generate and store complex passwords.
4) Also, if you believe you have been scammed, you can file a complaint with the Federal Trade Commission (FTC) to report the fraudulent activity.
5) If you feel your personal data has been stolen, and you want a service that will walk you through every step of the reporting and recovery process, one of the best things you can do to protect yourself from this type of fraud is to subscribe to an identity theft protection company.
This service will monitor personal information like your home title, Social Security Number (SSN), phone number and email address and alert you if it is being sold on the dark web or being used to open an account. It can also assist you in freezing your bank and credit card accounts to prevent further unauthorized use by criminals.
One of the best parts of using some services is that they might include identity theft insurance of up to $1 million to cover losses and legal fees and a white glove fraud resolution team where a U.S.-based case manager helps you recover any losses. Get my review of best identity theft protection software here.
6) Lastly, always report the scammer. If you have any information about the scammer, such as their name, phone number or email address, report it to the app company and the authorities.
Kurt’s key takeaways
Mobile payment apps are convenient and useful, but they also come with some risks that you are now aware of. By following these tips, you can protect yourself from mobile payment fraud and enjoy the benefits of these apps safely and securely.
Do you think these payment apps are doing enough to protect you from scammers? Let us know by writing us at Cyberguy.com/Contact
For more of my tech tips & security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter
Ask Kurt a question or let us know what stories you’d like us to cover.
Answers to the most-asked CyberGuy questions:
Copyright 2024 CyberGuy.com. All rights reserved.
Technology
Microsoft Is Pulling the Plug on Publisher This Fall. These 8 Alternatives Prove You Don't Need It
Before Microsoft Publisher disappears forever, you should move your current and future creative projects to a new platform. These are the best alternatives I’ve tested, whether you just need basic design tools or a full-on creative suite.
NEWYou can now listen to Fox News articles!
You hear the phrase “dark web monitoring,” and it can feel unsettling. If a company is scanning shady corners of the internet for your information, are they exposing you even more?
That question comes up often. In fact, Joyce from Florida wrote in with a concern many people share:
“When companies scan the dark web for your data, doesn’t that put you at risk? Your information is now out there. Please explain what that really means.” Joyce, Fanning Springs, Fla.
Joyce, great question. A lot of people assume these services are pushing your data somewhere new. That isn’t what is happening. The short answer is simple. No, dark web monitoring does not put your information at risk. Let’s walk through what is really going on.
WHAT REALLY HAPPENS ON THE DARK WEB, AND HOW TO STAY SAFE
Dark web monitoring checks breach dumps, hacker forums and leaked databases for personal information that may already be exposed. (Annette Riedl/picture alliance via Getty Images)
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)
- Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com
What is dark web monitoring and how does it work
These services are not uploading your data anywhere. They are not spreading your information.
Instead, they are:
- Monitoring known data breach dumps, hacker forums and leaked databases
- Searching for matches to your information, like your email or phone number
- Alerting you if your data is already found there
Here is the key point to understand. Your information is already out there before they ever find it.
Does dark web monitoring expose your data? A simple way to think about it
The simple answer is no. Think of it like checking if your stolen credit card is being used. No one is putting your card out there.
A monitoring service watches for signs that your data is already in use, so you can shut it down quickly.
10 SIGNS YOUR PERSONAL DATA IS BEING SOLD ONLINE
How dark web monitoring works without exposing your information
Reputable services use secure methods to check for your data. They are designed to protect your information during the process.
These include:
- Hashed searches, where your data turns into unreadable code before checking
- Secure databases and APIs that compare data without exposing it
- Monitoring existing breach datasets instead of live personal accounts
They are not:
- Logging into your accounts
- Posting your information
- Interacting with criminals on your behalf
That distinction matters. They are observers, not participants.
Dark web monitoring can help users respond quickly by changing passwords, freezing credit or locking down affected accounts. (Kurt “CyberGuy” Knutsson)
When dark web monitoring could put your data at risk
While the concept itself is safe, the provider you choose matters. There can be a risk if:
- You use an unknown or untrusted service
- A company asks for sensitive documents without a clear reason
- The service itself has weak security and gets breached
That is why it is important to stick with well-known providers that have a strong track record.
BE AWARE OF EXTORTION SCAM EMAILS CLAIMING YOUR DATA IS STOLEN
Why dark web monitoring is actually helpful
Without monitoring, you might never know your data was exposed. That means:
- Your email and password could be circulating for months
- Someone could open accounts in your name
- Your information could be resold again and again
With monitoring, you get an early warning. That gives you time to change passwords, lock accounts and stop fraud before it spreads. In many cases, that early alert is the difference between a close call and a major financial hit.
Ways to stay safe from data breaches and identity theft
Even with monitoring, you should take simple steps to protect yourself.
1) Limit how much data is out there
Use a data removal service to reduce your exposure over time. A data removal service works to remove your personal data from data broker sites. That reduces how much of your information is circulating online in the first place. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com
2) Stick with trusted services
Choose an identity theft protection service with strong security practices and clear privacy policies. They monitor your personal information and alert you quickly if it appears in breaches or suspicious activity. They also include identity theft protection tools in one place. See my tips and best picks on Best Identity Theft Protection at Cyberguy.com
Data breach alerts can warn users when emails, phone numbers or passwords are found in leaked databases. (Kurt “CyberGuy” Knutsson)
3) Watch for alerts and act quickly
If you get a breach alert, change your password right away. Avoid reusing passwords across accounts. A password manager can help. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com
THE ONE THING SCAMMERS CHECK BEFORE TARGETING YOU ONLINE
4) Turn on two-factor authentication
Two-factor authentication (2FA) adds an extra layer of protection, even if your password is compromised.
5) Freeze your credit if needed
A credit freeze can stop criminals from opening new accounts in your name without your approval.
6) Monitor your financial accounts regularly
Check your bank and credit card statements often to catch suspicious activity early.
Kurt’s key takeaways
Dark web monitoring does not expose your data. It checks whether your data has already been exposed. Think of it as a radar system. It scans for danger so you can respond before things get worse. In a world where data breaches are common, that kind of early warning can make all the difference.
If your personal data was already out there right now, would you want to know or stay in the dark? Let us know by writing to us at Cyberguy.com
Sign up for my FREE CyberGuy Report
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Microsoft AI chief Mustafa Suleyman says there are three labs that matter — and he wants Microsoft to be the fourth.
For years, Microsoft’s AI business leaned hard on its early and exclusive partnership with OpenAI. But the drama-filled marriage slowly devolved into a situationship, and the pair effectively separated in late April (though Microsoft is still OpenAI’s primary cloud partner — for now). This year’s Build had the vibe of a freshly single divorcée posting a thirst trap on Instagram. “It’s always fun to be at developer conferences in times of great change,” Microsoft CEO Satya Nadella said onstage Tuesday, adding that events like this are about “coming to grips with the new opportunity.”
AI chief Mustafa Suleyman, in an interview with The Verge, put it even more bluntly.
“The goal is to prove that we can become one of the top four labs in the world,” Suleyman said. “There’s three labs that matter, Google DeepMind, OpenAI, and Anthropic. We are not one of them at the moment, and that’s always been my intention. It’s why I came here. I want to build the very best frontier models in the world, fully multimodal, and in order to do that, we have to prove that we can do everything that we need to from the ground up, and we’re not just going to take from others.”
One of Microsoft’s first steps at Build was indeed to play catch-up on AI models. Suleyman unveiled MAI-Thinking-1, the company’s first reasoning model, along with six other new models focused on image, voice, transcription, and coding. Microsoft said the medium-size MAI-Thinking-1 model, which will likely be marketed to primarily enterprise clients, is “built from scratch for serious math, coding, and real-world enterprise deployment.” Microsoft is years behind both OpenAI and Anthropic here; OpenAI began releasing reasoning models in the fall of 2024. But Suleyman emphasized its performance on benchmarks like coding and its price point, saying it was cheaper than OpenAI equivalents on some tasks — a big deal in the age of the AI money squeeze, which has inspired a lot of complaints with customers.
While Microsoft has had years to glean insights from OpenAI, Suleyman made sure to mention that its development did not involve any distillation, meaning that it wasn’t trained using a different company’s AI model. If MAI-Thinking-1 is good, Microsoft clearly doesn’t want people thinking it’s due to the influence of OpenAI.
Suleyman told The Verge that for Microsoft, “the pivotal moment was renegotiating our contract with OpenAI. That meant that we were allowed to train models at a larger scale and explicitly pursue superintelligence entirely with our own IP, with our own data, no distillation, training from scratch.”
Nadella also highlighted Microsoft’s recently launched AI cybersecurity tool MDASH, which he said brings together 100 AI agents to find exploitable bugs “better than any single model.” It was clearly a dig at Claude Mythos Preview, which Anthropic introduced in April to much fear and fanfare — and expanded access to just before Build. OpenAI has its own cybersecurity-focused system as well, and all three companies will likely use their offerings to jockey for position in the government and enterprise markets they desperately need to court.
Microsoft is in a more complex situation with AI agents. The popular open-source platform OpenClaw demonstrated a potential path forward for AI agents, and after OpenAI quickly hired its creator, Peter Steinberger, Microsoft (among other companies) is trying to catch up. One of its key strategies is making OpenClaw work well with Windows. At Build, Nadella said he was very committed to OpenClaw support, and Microsoft employees chatted with developers in the audience about how they were using it.
Steinberger himself made a surprise appearance to great audience reaction, taking the stage to boast about how OpenClaw had bolstered its security and earned user trust. “What I kept hearing was, ‘Peter, I love my Claw, but can I use it at work?’” Steinberger said. “You can totally run OpenClaw inside your company now, and we even made the harness itself a plug-in.” Steinberger said that whether someone trusts Copilot, Codex, or another company’s coding platform, users can now run OpenClaw on top of that via Windows.
But Microsoft is also promoting its own separate Copilot “super app” that integrates OpenClaw-esque agents. A super app is a major focal point for OpenAI right now — president Greg Brockman is leading development of one that will tie together ChatGPT, the Codex coding platform, and the Atlas web browser. Microsoft’s strategy is similar, bringing together a variety of existing Copilot AI assistants. Its agents, called “Autopilots,” are designed to act as a helpful user interface. Cassidy Williams, GitHub’s senior director of developer advocacy, called Copilot “your home base for development and operations on your computer,” demonstrating how multiple agents could perform tasks like app-building. (In an extra flourish, Williams demonstrated how she could approve or deny code changes by flashing her computer camera a thumbs-up or thumbs-down.)
Autopilots are designed specifically to appeal to business customers — Nadella called them “autonomous, long-running agents with full enterprise compliance.” The first one Microsoft will offer is “Scout,” billed as “your always-on personal agent,” but clients can build and personalize their own. The Autopilot agents should be able to look through an email inbox, join group chats in Teams, check a calendar, and send daily briefings, among other things. Accordingly, employees on stage at Build repeatedly emphasized Copilot’s security tools and guardrails — obviously aiming to calm enterprise clients who may have heard horror stories about tools like OpenClaw.
Suleyman made sure to emphasize, again and again, Microsoft’s “humanist superintelligence” as an “AI that prioritizes humanity first” — part of AI companies’ recent rebrand of AGI to make it sound less frightening in an era when people are pushing back against AI more than ever before.
Nvidia CEO Jensen Huang, another speaker known for working closely with OpenAI, appeared via video call to tout how Nvidia’s RTX Spark chip is fueling Microsoft’s AI agent goals. “I could be traveling and I’m on the phone and I can text my PC … and it would fire up the tools on the PC,” Huang said. “The idea that the PC evolved from a personal computer to a personal AI is just really exciting.”
Microsoft spent years betting on OpenAI, and in some ways, that’s left it behind in the AI race. But as OpenAI and other competitors turn to enterprise to finally make money, it’s got some obvious advantages. Microsoft already has a substantial client base and, compared with other AI companies, a reputation for safety and security. And like Google, it also has deep pockets, considerable computing resources, and a diversified revenue stream, meaning it can take big bets without a ton of risk.
Suleyman told The Verge, “There’s a lot of people who are either like chasing startup valuations or about to IPO, so we can operate with a little bit more humility and a little bit more long-term optimization.” He added, “We’ve got the money to be able to buy Anthropic [models] when we need to. We’ve got the optionality in Azure with 11,000 models, so people can use literally whatever they want whenever they want, but that buys us the time to do it right from the start.”
At the same time, there are a lot of unanswered questions here. Microsoft called out a lot of benchmark wins and advancements for its seven new models, but that doesn’t always translate to real-world adoption, and even a new model that pulls ahead for a week or two can quickly fall behind. AI super apps are a mostly yet-untested idea. And Microsoft is entering a crowded yet still largely underwhelming AI agent marketplace with a product that we haven’t seen in action. There’s still plenty of room for its promises to fall flat.
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.
-
Lifestyle14 minutes agoFirings at CBS’ ’60 Minutes’ reflect the fight for media control in the age of Trump
-
Technology22 minutes agoMicrosoft Is Pulling the Plug on Publisher This Fall. These 8 Alternatives Prove You Don't Need It
-
World29 minutes agoTrump expands Cuba sanctions beyond US companies in major crackdown on foreign enablers
-
Politics32 minutes agoBessent flips script on Dem senator with reminder about his son’s past ties to Epstein
-
Health44 minutes agoNew ways to prevent flu revealed in ‘accidental’ lab breakthrough, study finds
-
Sports47 minutes agoRussell Wilson announces retirement from NFL after 14 seasons
-
Technology52 minutes agoDark web monitoring: does it put your data at risk?
-
Business59 minutes agoIn a first for the country, voters in Monterey Park ban data centers
