Articles

Artificial intelligence (AI) tools such as ChatGPT, Microsoft Copilot, Google Gemini, and other AI-powered applications can help with writing, research, brainstorming, and everyday questions. While these tools can be useful, they should be used with the same caution you would apply to any online service.

A simple rule to remember is: Do not enter information into an AI tool that you would not want stored, reviewed, or shared outside its intended audience.

Privacy protections vary by platform and account type. The safest approach is to limit what information you share from the beginning.

When AI Conversations Become Data Security Risks

Artificial intelligence has quickly become a valuable tool for everyday tasks, but several real-world incidents have highlighted the risks of sharing sensitive information with AI platforms. In 2023, Samsung employees unintentionally disclosed confidential company information by entering proprietary source code and internal meeting notes into ChatGPT while using the tool to assist with their work. Although the information wasn't stolen through a traditional cyberattack, the incident raised concerns about how sensitive business information is stored, processed, and potentially retained by third-party AI services.

Other incidents have demonstrated that even information users believe to be private can become exposed. In 2025, more than 370,000 conversations with xAI's Grok chatbot were reportedly indexed by search engines after users generated shareable links, making discussions containing personal information and other sensitive details publicly searchable. That same year, security researchers discovered an unsecured DeepSeek database containing chat histories, API keys, and other confidential information. Together, these examples serve as an important reminder that information shared with AI tools may not always remain private, making it essential to understand how these platforms handle data and exercise caution when entering sensitive information.

Information You Should Never Share

Passwords and Login Information

Never enter passwords, PINs, security codes, account recovery information, multifactor authentication codes, or answers to security questions into an AI chatbot or online AI service.

AI tools are not password managers and should never be used to store or manage login credentials.

Financial Information

Avoid sharing:

• Bank account numbers
• Routing numbers
• Credit or debit card information
• Online banking usernames
• Account balances
• Recent transaction histories
• Tax documents
• Pay stubs
• Images of checks
• Wire transfer instructions
• Mobile banking screenshots

You can still ask financial questions by using fictional examples, rounded numbers, or generalized scenarios rather than your actual information.

Social Security Numbers and Identification

Never share:

• Social Security numbers
• Driver's licenses
• Passports
• Birth certificates
• Insurance cards
• Other government-issued identification

If you need help understanding a document, remove names, account numbers, addresses, signatures, photographs, barcodes, and other identifying information before uploading it.

Personal Information

Avoid sharing information that could be used to identify, locate, or impersonate you, including:

• Full name combined with date of birth
• Home address
• Telephone number
• Travel plans
• Daily schedules
• Family information

Be cautious when uploading photographs, as images may unintentionally reveal addresses, identification badges, license plates, computer screens, or other private details.

Confidential Business or Client Information

Do not enter confidential workplace information into a public or personal AI account unless your organization has specifically approved its use.

Examples include:

• Client information
• Internal financial reports
• Contracts
• Employee records
• Business plans
• Private emails
• Computer code
• Security procedures
• Other nonpublic information

Always follow your employer's AI, privacy, and information security policies.

Medical, Legal, or Other Sensitive Records

Avoid uploading complete medical records, legal documents, insurance records, or other sensitive files.

Remove identifying details whenever possible and remember that AI responses may be incomplete, outdated, or inaccurate.

Information Belonging to Others

Do not share another person's private information without their permission.

Review emails, résumés, meeting notes, photographs, spreadsheets, and other documents carefully before uploading them.

Unpublished Ideas and Original Work

Think carefully before entering inventions, original research, business strategies, manuscripts, designs, source code, or other confidential intellectual property.

Whenever possible, describe the issue generally rather than sharing the entire project.

Beware of AI-Enabled Scams and Impersonation

Criminals increasingly use artificial intelligence to create convincing emails, text messages, voice recordings, phone calls, images, and videos designed to impersonate trusted individuals or organizations.

These scams may appear to come from:

• Your bank
• A family member
• A coworker
• A government agency
• A trusted business

Be especially cautious if a caller, email, text message, or video appears to be from your bank and requests:

• Passwords
• Authentication codes
• Account information
• Wire transfers
• Debit card information
• Sensitive personal information

Never rely solely on caller ID, email appearance, or a familiar-sounding voice. Always verify requests through a trusted phone number or communication channel before taking action.

If you have any doubts about a communication claiming to be from your bank, contact the bank directly using a trusted phone number.

AI Is Not Financial Advice

AI tools can provide educational information and general guidance, but they should not be relied upon as the sole source of financial, investment, lending, insurance, tax, legal, or medical advice.

Always verify important information through trusted sources and consult qualified professionals before making significant financial decisions.

Verify Important Information

AI systems can make mistakes. They may provide incorrect, incomplete, outdated, or misleading information while appearing highly confident.

Before acting on AI-generated information, independently verify details related to:

• Financial transactions
• Investments
• Taxes
• Legal matters
• Healthcare
• Online security
• Identity protection

When in doubt, consult a trusted professional or authoritative source.

Safer Ways to Use AI

Before submitting a prompt or uploading a file:

• Remove names, account numbers, addresses, and identifying details.
• Use fictional examples or rounded numbers whenever possible.
• Share only the minimum information necessary to answer your question.
• Confirm that you are using the legitimate website or application.
• Review the platform's privacy and data-control settings.
• Consider whether you would be comfortable if the information became public.

Privacy settings may provide additional protection, but they do not make it safe to share confidential information.

Choosing More Secure AI Tools

Not all AI platforms offer the same privacy and security protections. Before using an AI tool, consider how your information is collected, stored, shared, and protected.

For questions involving sensitive personal, financial, healthcare, or business information, look for AI services that provide:

• Clear privacy policies and data-use disclosures
• Options to limit or disable the use of conversations for model training
• Encryption of information during transmission and storage
• Strong authentication and account security features
• Compliance with recognized privacy and security standards
• Business or enterprise offerings designed to better protect customer information

Before sharing information with any AI service:

• Review the provider's privacy policy.
• Understand how your information may be collected, stored, or used.
• Determine whether your information may be retained.
• Share only the minimum information necessary.
• Remove or anonymize personal information whenever possible.

Remember that no AI service should be treated as a secure repository for passwords, Social Security numbers, account credentials, financial account information, or other highly sensitive data.

Consider AI Tools Provided by Trusted Organizations

Whenever possible, consider using AI tools provided by organizations you already know and trust, such as employers, healthcare providers, software providers, educational institutions, or financial institutions.

Some organizations offer AI services within controlled environments that may provide stronger privacy protections than publicly available AI platforms.

Even when using a trusted platform, continue to follow this principle: Only share the information necessary to accomplish your task.

Protect Your AI Accounts

If you create accounts with AI service providers:

• Use strong, unique passwords.
• Enable multifactor authentication whenever available.
• Keep your devices and applications up to date.
• Log out of shared or public computers.
• Review account settings and security options regularly.

Many online account compromises occur because accounts are inadequately protected rather than because of weaknesses in the AI platform itself.

Common AI Red Flags

Be cautious if an AI tool, website, email, or online service:

• Requests passwords or multifactor authentication codes.
• Pressures you to act immediately.
• Requests complete financial account information.
• Asks for wire transfers, gift cards, or cryptocurrency payments.
• Claims to represent your bank but directs you to an unfamiliar website.
• Encourages you to bypass normal security procedures.
• Attempts to create urgency or fear to influence your actions.

If You Suspect Fraud

If you believe you have shared sensitive banking information with an unauthorized individual, website, application, or AI service, contact your bank immediately so appropriate protective measures can be considered. Early reporting can help reduce the risk of fraud and unauthorized account activity.

Your bank will never ask you to provide your online banking password, multifactor authentication code, or debit card PIN through email, text message, social media, or an AI chatbot.

Pause Before You Prompt

Before pressing Enter, ask yourself:

"Would I be comfortable sharing this information with someone outside my household or organization?"

If the answer is no or even maybe, remove the sensitive details, use a fictional example, or choose a more secure way to communicate.

AI can be a valuable tool, but taking a moment to think before you prompt can help protect your identity, finances, personal information, and the people who trust you with their information.

Need Assistance?

For account security concerns, suspected fraud, or questions about protecting your personal information, please contact Baker Boyer using the contact information listed on our website, account statements, or official banking communications.

Important Notice

Baker Boyer does not endorse or guarantee any specific AI product, service, or platform. Customers are responsible for reviewing the privacy, security, and terms of use of any AI platform before sharing information. This information is provided for educational purposes only and should not be considered financial, legal, tax, investment, cybersecurity, or other professional advice. Customers should consult appropriate professionals regarding their individual circumstances.