The Financial Consumer Agency of Canada (FCAC) reminds Canadians to be aware of the possible risks of disclosing their online banking and credit card information to anyone, including financial aggregation services.
Financial aggregation services allow users who have different types of accounts (such as bank accounts, brokerage accounts and credit cards) with more than one financial institution to keep track of all of their financial transactions at a single website or application. Aggregation services are offered by some financial institutions and independent companies.
To use a financial aggregation service, consumers provide their user IDs and passwords for the online banking, credit card and other financial accounts they want to consolidate, so that the aggregation service can access these accounts to gather their financial information.
Before using an account aggregation service, consumers should find out what the consequences might be if they provide another party with access to their online banking information. Consumers should carefully review each financial institution's online banking user agreement to determine potential consequences for using an account aggregation service, and contact their financial institution if they have any questions.
Consumers should be aware that if they disclose their online banking information to any other party, including financial aggregators, they may risk losing their protection against unauthorized transactions. Some financial institutions' user agreements clearly state that users will be responsible for unauthorized transactions if they provide other parties, including financial aggregators, with their passwords and account information.
FCAC reminds consumers that it is their responsibility to:
Consumers are currently protected from fraudulent credit card and banking transactions should their accounts be compromised. However, by disclosing their user IDs and passwords to a financial aggregator, in some cases consumers may be going against their financial institutions' user agreements and risk being held responsible for any losses that are a result of unauthorized transactions.