Connect with us

Technology

Your kids may be treating video games like banks and playing with real money. The government has questions

Published

on

Your kids may be treating video games like banks and playing with real money. The government has questions

A federal agency announced it’s monitoring video games that include in-app purchases, digital currencies and external marketplaces often used by children.

Games that include these features can effectively operate as banks of sorts but aren’t subject to the same types of regulations or protections, according to a Consumer Financial Protection Bureau report released last week. The agency also questioned whether children or parents were aware of the vast amount of data gaming companies collect.

“For several years, the most popular video games have included immersive virtual worlds that offer the storage and exchange of valuable assets,” CFPB wrote. “Gaming companies have created digital marketplaces that facilitate the buying, selling, and trading of these assets with limited consumer protections, which has led to potentially harmful practices for players including financial losses due to theft and scams.”

For years, video games like the mega-hit “Fortnite” have allowed users to make microtransactions — small, optional fees players can pay to obtain items or other features. In many cases, users must purchase in-game currencies bought with real dollars — similar to tokens purchased at brick-and-mortar spots like Dave & Buster’s or Chuck E. Cheese.

CFPD reported that video games like Fortnite could be children’s introduction to banking. (Neilson Barnard/Getty Images)

Advertisement

GOATS, GOOGLE AND GAMES: THE FUTURE IMPACT OF A TECH GIANT’S PUSH TO TRAIN AI TO PLAY VIDEO GAMES

CFPB warned that digital currencies, purchased items and other assets can amount to a “considerable value” in terms of real money. But those closed markets aren’t subject to regulations meant to protect asset holders. 

“Banking and payment services that facilitate the storage and exchange of valuable assets generally provide consumer protections, including recourse after unauthorized transactions,” CFPB wrote in its report. “Yet operators of gaming and virtual worlds typically emphasize a ‘buyer beware’ approach.”

The agency was particularly worried about children, who may be using these markets without their parents knowing.

“For many young people today, gaming may be their introduction to financial activity,” CFPB wrote. “For example, gaming provides young people the opportunity to learn about earning currency, managing assets, and making purchases.”

Advertisement

A CFPB report warned that video games with features like in-app purchases and digital currencies behave like banks but aren’t subject to the same regulations. (Jakub Porzycki/NurPhoto via Getty Images)

NOW THAT ARTIFICIAL INTELLIGENCE CAN CLONE VOICES, VIDEO GAME ACTORS MUST WEIGH THEIR OPTIONS

“Gaming companies may view young players as an opportunity to create lifelong consumers early,” the report continued.

Because players can accumulate assets in these video games worth considerable sums of real money, gamers could face a significant financial loss if their accounts are hacked or if they fall prey to scammers.

Those risks have increased as the value of gaming assets has risen, according to CFPB. But players might have limited recourse since traditional banking and payment system protections don’t apply.

Advertisement

“In complaints to the [Federal Trade Commission] and CFPB, several players reported hacking attempts, account theft, scams, unauthorized transactions, and losing access to game currencies and virtual items, but they received limited recourse from gaming companies,” the bureau wrote. Gaming companies often put “the burden on individual players to avoid these scams and phishing attempts.”

CFPB warned that many video games collect a massive amount of data, a fact parents of young players may be unaware of. (Frazer Harrison/Getty Images)

Meanwhile, publishers can also collect significant information about their users, including location data, social media data and behavioral interactions, “such as how a player responds to personalized incentives,” according to the CFPB report.

“There is risk that gamers may be harmed when their data is sold, bought, and traded between companies, including for purposes outside of game play,” the report continued. “Additionally, the vast accumulation of data collected from consumers by gaming companies raises questions as to whether privacy rules are being adhered to and whether consumers, especially young ones and their parents, are fully aware of how their data is being collected and used across the industry.”

Advertisement

Ultimately, CFPB didn’t indicate it was taking action against the video game industry, instead noting that it’s “monitoring” the situation.

Technology

Anker’s last-gen sleep buds are nearly 40 percent off ahead of daylight saving time

Published

on

Anker’s last-gen sleep buds are nearly 40 percent off ahead of daylight saving time

Bad news: most Americans are about to lose an hour of sleep next week. Good news: if you have trouble falling (or staying asleep), Newegg is currently selling Anker’s Soundcore Sleep A20 earbuds for $113.99 ($66 off) when you use coupon code MMSF88 at checkout, which drops them to just $6 shy of their lowest price to date.

A couple of us here at The Verge are fans of Anker’s last-gen sleep buds, which do a good job of muffling disruptive noises (including snoring). They’re lightweight and comfortable enough to wear overnight, even while sleeping on your side, with multiple ear tips and wings for a personalized fit. In fact, in his review, my colleague Thomas Ricker said that they improved his average sleep time by nearly 30 minutes within a two-week period.

What’s even more convenient is that they offer a variety of sleep-focused features to help you rest better. For example, you can use them to play a range of relaxing sounds, from meditation exercises and nature clips to white noise. You can use them as a regular pair of Bluetooth earbuds, too, just in case you prefer to listen to audiobooks or your own curated sleep playlist. They even come with adjustable EQ as well, though we wouldn’t recommend using them as your primary earbuds for music, given that they can’t match the audio quality you’d get from a pair of midrange earbuds from Apple, Sony, or Bose.

In addition, the Sleep A20 offer up to 14 hours of battery life and sleep tracking, providing insights into how long and how well you’ve slept via a companion app that also details your sleep positions and movements. The newer Soundcore Sleep A30 feature active noise cancellation, which is more effective at masking sounds than the A20’s passive isolation, but Anker’s last-gen earbuds remain a decent, budget-friendly option that can help you comfortably tune out most nighttime distractions for nearly half the price.

Continue Reading

Technology

Figure data breach exposes nearly 1M accounts

Published

on

Figure data breach exposes nearly 1M accounts

NEWYou can now listen to Fox News articles!

If you have applied for a loan online, you probably shared more than you realized. Your name. Your email. Your date of birth. Maybe even your home address and phone number. Now imagine all of that sitting on a dark web forum.

Advertisement

That is the reality for nearly 1 million people after hackers breached Figure Technology Solutions, a blockchain-focused fintech lender.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

What happened in the Figure data breach

Figure Technology Solutions, founded in 2018, uses the Provenance blockchain for lending, borrowing and securities trading. The company says it has unlocked more than $22 billion in home equity through partnerships with banks, credit unions, fintechs and home improvement companies. However, behind the scenes, attackers were working on a very different angle.

GOOGLE DROPPED DARK WEB MONITORING: SHOULD YOU CARE?
 

Nearly 1 million accounts were exposed after hackers breached fintech lender Figure Technology Solutions in a social engineering attack. (Felix Zahn/Photothek via Getty Images)

Advertisement

According to breach notification data shared by Have I Been Pwned, information from 967,200 accounts was exposed. The leaked data included more than 900,000 unique email addresses along with names, phone numbers, physical addresses and dates of birth. That is a gold mine for identity thieves. Figure says the incident stemmed from a social engineering attack. What that means in simple terms is that someone inside the company was tricked into handing over access.

“We recently identified that an employee was socially engineered, and that allowed an actor to download a limited number of files through their account,” a Figure Technology Solutions spokesperson told CyberGuy in a statement. “We acted quickly to block the activity and retained a forensic firm to investigate what files were affected. We understand the importance of these matters and are communicating with partners and those impacted as appropriate. We are also implementing additional safeguards and training to further strengthen our defenses. We are offering complimentary credit monitoring to all individuals who receive a notice. We continuously monitor accounts and have strong safeguards in place to protect customers’ funds and accounts.”

Social engineering is the real weapon

When people hear the word blockchain, they think secure and untouchable. But attackers did not break cryptography. They targeted a human being. Groups like ShinyHunters specialize in this playbook. They reportedly claimed responsibility for the breach and, according to BleepingComputer, posted 2.5GB of data allegedly tied to thousands of loan applicants.

In recent weeks, the same group has claimed breaches involving companies like Canada Goose, Panera Bread and SoundCloud. Not every case is connected. Still, security researchers have observed a troubling pattern. Attackers impersonate IT support. They call employees. They create urgency. Then they direct victims to fake login portals that look nearly identical to real ones.

Once employees enter credentials and even multi-factor authentication codes, attackers gain access to single sign-on systems tied to major platforms like Microsoft and Google. From there, one compromised account can unlock a web of connected tools and internal systems.

Advertisement

PANERA BREAD DATA BREACH EXPOSES 5.1M CUSTOMERS
 

Security researchers say the Figure data leak underscores how social engineering bypasses even blockchain-based platforms. (Maxim Konankov/NurPhoto via Getty Images)

Why this matters to you

If your information was part of the Figure data breach, criminals now have enough detail to craft convincing phishing emails or phone scams. They can reference your real name. They can cite your address. They can pretend to be a lender or bank calling about your application.

Even if you never applied for a loan with Figure, this incident highlights something bigger. No platform is immune to human error. And social engineering works because it targets trust, not technology.

Advertisement

The bigger lesson about blockchain and trust

Figure markets itself as blockchain native. Blockchain can provide transparency and strong cryptographic security. However, none of that protects against a well-crafted phone call.

Security failures often happen at the human layer. That is where attackers focus their energy. As more financial services move online, the attack surface grows. Loan applications, identity verification tools and cloud-based systems create convenience. They also create new targets.

How to protect yourself after the Figure data breach

You cannot control how companies secure their systems. You can control how you respond. Start by checking whether your email address appears in the exposed dataset, then take the steps below to lock down your accounts.

SUBSTACK DATA BREACH EXPOSES EMAILS AND PHONE NUMBERS
 

Advertisement

Figure says an employee was tricked into granting access, allowing attackers to download sensitive customer data. (Luke MacGregor/Bloomberg via Getty Images)

Check if your email was exposed

To see if your email address was affected, visit https://haveibeenpwned.com/. Enter your email address to find out whether your information appears in the leak. When finished, return here and begin Step 1 below.

Take these steps immediately

  1. Change any exposed passwords right away. Do not leave a known leaked password in place. Update it everywhere you used it. Use a password manager to create strong, unique passwords for every account. Check out the best expert-reviewed password managers of 2026 at Cyberguy.com
  2. Turn on multi-factor authentication wherever possible.
  3. Never share login codes with anyone, even if they claim to be IT support.
  4. Install strong antivirus software to help block phishing links, malicious downloads and ransomware that often follow major breaches. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
  5. Consider a data removal service to reduce your personal information on data broker sites, which scammers often combine with breached data. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
  6. Place a free fraud alert or credit freeze with the major credit bureaus.
  7. Monitor your bank and credit card statements weekly for suspicious activity.

Also, be cautious of unexpected calls about your accounts. If someone pressures you to act immediately, hang up and call the company directly using a number from its official website.

Kurt’s key takeaways

The Figure data breach is a reminder that technology alone cannot protect sensitive information. A single employee tricked into revealing credentials can expose hundreds of thousands of people. That is not a blockchain failure. It is a trust failure. If your data was involved, take action now. Even if it was not, treat this as a wake-up call. Your personal information has value. Criminals know it. Companies should know it too.

If one phone call can unlock nearly a million records, are companies investing enough in training people, or are they still betting everything on technology alone? Let us know by writing to us at Cyberguy.com

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Advertisement

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide – free when you join my CYBERGUY.COM newsletter.

Copyright 2026 CyberGuy.com. All rights reserved.

Related Article

Google dropped dark web monitoring: Should you care?
Advertisement
Continue Reading

Technology

Apple’s website leaks MacBook ‘Neo,’ which could be its new cheaper laptop

Published

on

Apple’s website leaks MacBook ‘Neo,’ which could be its new cheaper laptop

During Apple’s week-long product launch event on Tuesday, a listing for the “MacBook Neo (Model A3404)” appeared on a regulatory compliance page on Apple’s website under its line-up of 2026 MacBooks. First spotted by MacRumors, the listing appears to be an accident and has since been removed, but may have been a leaked reference to a rumored entry-level MacBook. Unfortunately, it didn’t include any additional details beyond the device’s name and model number.

The lower price and an “entirely new design” could help the new MacBook appeal to students and casual users, competing with Chromebooks and low-cost Windows laptops. A more affordable MacBook could be especially appealing after Apple announced the M5 MacBook Air on Tuesday, which has a higher starting price than last year’s Air.

Continue Reading

Trending