Researcher shows Venmo transactions, which are public under default user settings, reveal details including real names, comments, and dates through a public API
A researcher has analysed millions of public transactions to prove just how much the app reveals about our life and habits
Context & Ripple Effects
This story is the opening move in a privacy arc that runs for years. A researcher pulls millions of transactions through Venmo's public-by-default transaction history and shows the API exposes real names, comments, and dates — enough to reconstruct users' lives and habits. Venmo's response at the time is that sharing is fun and the private option is clearly marked, leaving the default doing the exposing.
The pattern this report sets repeats: after a reporter found Joe Biden's account, Venmo let users hide their friends list, then removed the global feed of strangers' payments entirely, before finally making new accounts friends-only by default in onboarding. The 2018 research is the proof-of-concept that every later fix responds to.
First-order effects
- Any Venmo user on default settings has their real names, payment comments, and transaction dates exposed to anyone querying the public API — no hack required.
- Venmo must defend a design choice rather than a breach: its 'sharing is fun' stance makes the company, not an attacker, the named party responsible for the exposure.
Second-order effects
- Press scrutiny escalates each time a high-profile account is found through these surfaces, forcing incremental controls — first friends-list visibility, then killing the global feed of payments between strangers.
- Rival payment apps face the same question about social features layered onto financial data, since the researcher's method works against any service that treats transactions as shareable content.
Third-order effects
- If the arc holds, social-payments products converge on privacy-by-default: the public feed and public API that defined Venmo's early identity get dismantled piece by piece, ending with friends-only defaults set during onboarding.
- Regulators and platform designers treat default settings, not user opt-outs, as the unit of privacy accountability — a standard the 'clearly marked option' defense can no longer satisfy.
The trend: Consumer payment apps built as social networks are steadily retreating from public-by-default design toward private defaults, with researchers' API demonstrations forcing each step.