Venmo implements a major privacy measure, setting new users' posts to “friends only” by default during onboarding; in 2021, a reporter found Joe Biden's Venmo
Context & Ripple Effects
Venmo’s privacy posture has been under scrutiny since reporting in 2021 showed that Joe Biden’s account and social connections could be readily located. The company then added controls over friends-list visibility, while its earlier public-by-default transaction-history design had been defended as a social feature.
Making friends-only the onboarding default extends that shift from optional controls to a default-setting decision, reducing the need for new users to discover and change privacy settings themselves.
First-order effects
- New Venmo users’ payment posts will be limited to their friends by default during onboarding, rather than being exposed more broadly by default.
- Venmo reduces the immediate discoverability of new users’ payment activity and social graph through its default product configuration.
Second-order effects
- The change weakens the value of Venmo’s public activity feed as a built-in social-discovery surface, potentially pushing the product to rely more on explicit friend connections for engagement.
- It raises the practical bar for other social-payment products that retain open-by-default activity settings, because privacy controls are more consequential when they are the default rather than an opt-in.
Third-order effects
- If default-private onboarding becomes standard across consumer financial apps, public social layers around payments may become a more limited, opt-in feature rather than a core default behavior.
- The episode reinforces that privacy risk in payment products extends beyond transaction data to relationship data; product design will increasingly be judged on both forms of exposure.
The trend: Consumer finance apps are moving from user-managed privacy controls toward privacy-protective defaults, especially where payment activity can reveal social networks.