SoFi

Protecting yourself against credit card hackers — criminals that engage in credit card fraud and identity theft — is a vital part of using your credit card responsibly. Understanding how credit card hacking works and the many ways thieves can gain access to your personal financial information can help you protect both your physical credit card and your digital credit card account information.

Read on to learn how to protect your credit card from hackers, as well as what to do if your credit card is hacked.

What It Means for a Credit Card To Be Hacked

A credit card hack occurs anytime your credit card or credit card account number falls into the wrong hands. That information is then used fraudulently to make purchases and/or to engage in identity theft.

Credit card theft can entail everything from stealing your wallet to hacking into large databases holding hundreds of thousands of credit card numbers.

Ways Credit Cards Can Be Hacked

Thieves use a variety of ways to get their hands on your credit card information. The biggest money scams in the U.S. are now done digitally through email, text messages, or fake websites. But there are still plenty of old-fashioned scammers who use snail mail, phone calls, and in-person ruses.

Here are some of the most common forms of both types of fraud:

•   Lost or stolen wallet containing credit cards. An old but still common trick for credit card thieves is to steal the physical card, then use it and the information it contains to make fraudulent purchases. In addition, if other personal information is included in your stolen wallet, such as your address and even your Social Security number, thieves can use your identifying information to set up other fraudulent credit accounts.

•   Phishing. Another common credit card hacking method is for a thief to attempt to get ahold of your credit card information through a phone call, text message, or email in which they impersonate a legitimate institution. For instance, a phishing email that appears as if it’s from your banking institution may entice you to click a link that takes you to a page where you’re then asked to enter your account information.

•   Dumpster diving. Criminals search through trash to find discarded statements, receipts, and other documents that contain your credit card number and identifying information such as your name and address. They then use that information to make fraudulent purchases or engage in identity theft.

•   Data breaches. Professional hackers can break into large retail, bank, financial, healthcare, social media, and other websites and steal reams of personal information that often include credit card and other personal financial information from thousands of users. The usual aim is to resell that data on the dark web. From there, criminal buyers use the data to commit credit card fraud and identity theft. If your data is on file at a breached site, you’re at risk.

•   Credit card skimmers. Thieves also can use gadgets that can extract your credit card information when you swipe it to pay or to withdraw money from an ATM. These most commonly are found at gas stations or on outside ATMs, though they’re becoming less common with the introduction of chip technology.

•   Inside jobs. Unscrupulous wait staff, store clerks, health-care billing workers, and others with access to credit card data may take a photo or otherwise copy your card information and use it to make fraudulent purchases. On a larger scale, sometimes these workers are part of a criminal ring that helps access financial data from thousands of individuals that’s then sold on the dark web.

•   Public Wi-Fi networks. Your credit card also may be vulnerable to a credit card hack if you use a public internet connection, which is why it’s important to follow cybersecurity tips. If someone is monitoring the network and you enter any sensitive information, such as your account information, a thief may be able to swipe it.

Protecting Your Physical Card

Although digital credit card theft is more common than ever, plenty of old-fashioned thieves are still out there and would like to get their hands on your physical card. So, it makes sense to stay diligent. Taking these steps can help:

•   Don’t reveal your physical card. Avoid giving your physical card to anyone, and never post photos on social media with your credit card showing.

•   Black out the security code on the back of your card. Instead, you can file it in your password manager or another safe place. If your card is stolen, it’s harder for thieves to use the account information for online purchases if they don’t have your security code.

•   Don’t sign your card. You can limit fraudulent in-person purchases if your stolen card is unsigned. You can write “See ID” in the blank area, then show your ID to store clerks in lieu of a signature. When a thief is asked for ID, they won’t be able to provide it, potentially preventing the transaction from going through.

•   Use a protective sleeve or wallet. These RFID-blocking layers can prevent your card from being read by a technical device.

•   Report lost or stolen cards immediately. If your card is compromised, make sure to alert your credit card issuer immediately. They will then close your card and issue a new one immediately. This is also a good idea if you’re notified that you’ve been part of a data breach.

Recommended: Does Applying For a Credit Card Hurt Your Credit Score

Protecting Your Credit Card Account Information

In addition to your physical card, you need to protect your credit card data as well. Big credit card data hacks can mean your personal financial details and credit card account information are vulnerable. But there are steps you can take to protect yourself:

•   Only use reputable shopping sites. Often, fraudulent sites are set up as a ruse to collect credit card information. When you shop online, always buy from trusted merchants.

•   Avoid using your credit card when you’re on public WiFi. It can be easy for criminals to pick up your data when you’re using public internet networks. As such, you’ll want to avoid entering any personal or sensitive information while you’re using these networks, even if you’re on your own personal device.

•   Check your account frequently. Don’t just wait for your statement to arrive in your email every month. Get in the habit of regularly monitoring your credit card activity online, especially if you find your credit card keeps getting hacked. If you find a suspicious charge, report it immediately.

•   Be wary of phishing scams. You may get an authentic-looking email, text, or phone call asking for your credit card information. This may be a completely cold call or a data thief looking to fill in information they may not have for you, such as your expiration date or CVV security code. Never give your information to anyone asking for it. Banks, credit card companies, retailers, and other reputable places only take your information if you contact them.

•   Use smart passwords. Use strong passwords that include lowercase and capital letters, numbers, and symbols. Change your passwords frequently and remember that if it’s easy for you to remember, it’s probably easy for a thief to figure out. Password manager software can help you generate and keep track of strong passwords.

•   Sign up for two-factor authentication. With two-factor authentication, a one-time code is texted or voiced to your phone when you log into a financial account. This helps to ensure the account holder is the one logging on. Other types of secure authentication, such as face ID, are used by some organizations.

Recommended: Tips for Using a Credit Card Responsibly

Steps to Take When Your Credit Card is Compromised

If you think you were a victim of credit card fraud and/or identity theft, it’s important to act fast. The Fair Credit Billing Act (FCBA) limits your financial responsibility for credit card fraud to up to $50, so you won’t be on the hook for more than that in the case of bogus credit card charges that have led you to request a credit card refund. Even better, many major credit card issuers offer zero-dollar liability protection.

But if the thieves go on to use your personal information to commit other types of financial fraud, you may be liable. Acting fast will also help minimize the onerous work involved in untangling identity theft.

Here’s what to do if what to do if your credit card is hacked, or you see suspicious charges on your statement or other signs of fraudulent activity:

Contact Your Credit Card Company

As soon as you spot anything, call your credit card company. Tell them you think your card and card information is vulnerable and request a new card with a new account number. Most credit card issuers will comply right away (unlike if you were falsely disputing a credit card charge). However, you may be without a credit card for a bit while you wait for the new one to arrive.

Sign Up for Fraud Alerts

If you’ve received a letter or other notification that your personal data may have been compromised, you can place a fraud alert at all three credit bureaus — Equifax®, Experian®, and TransUnion® — that may be monitoring your account. This stops unauthorized individuals from accessing your account information for a year, at which point you can request for it to be renewed.

Freeze Your Credit

A stronger step than setting up a fraud alert is to freeze your credit. When you ask for a freeze, the three top credit reporting agencies will make sure no one can ask for your credit report without your approval. The downside: A freeze can make it more cumbersome for you to legitimately apply for new credit.

File a Police Report

If you’re a victim of credit card fraud, you may need to file a police report. You may need that documentation as you move through different steps to report identity theft and other fraud as you try to recoup your losses. Your credit card issuer can help you determine if a police report is necessary. You can also report the fraud to the Federal Trade Commission on its website.

Recommended: When Are Credit Card Payments Due

Credit Card Security and Fraud Protection

There are a number of steps that credit card companies can take to increase credit card security and curb credit card hacks. For instance, some credit cards have two-factor authentication to protect access to your account.

Credit card companies can also offer the option to freeze your card immediately. You often can do so through their website or via their app if you notice suspicious charges or other activity.

And, as mentioned previously, some credit card issuers offer a zero-liability policy. As long as you report unauthorized or erroneous card transactions no later than, say, 60 days after the first statement on which the problem occurred, the card issuer won’t hold you liable for any fraudulent charges.

The Takeaway

Credit card hacks can be costly, onerous, and time-consuming. But you can take steps to avoid hacks by protecting both your physical card and your online credit card information.

Whether you're looking to build credit, apply for a new credit card, or save money with the cards you have, it's important to understand the options that are best for you. Learn more about credit cards by exploring this credit card guide.

FAQ

How can I protect my credit card from being hacked?

You can fight credit card hacking by checking your account regularly for any suspicious charges, being mindful of phishing scams, shopping online with caution, and keeping your physical card and your digital card information safe. If anything were to happen, make sure to report any suspicious activity as soon as possible and to use credit freezes and fraud alerts when necessary.

Can a hacker steal my credit card information?

Yes. Credit card hacks include stealing your physical card or credit card information and making fraudulent purchases directly with your account. Or thieves may use your stolen personal information to set up a new fraudulent account in your name. Credit card hacks also happen when thieves steal financial information from databases at large retailers, financial institutions, and other businesses.

Can hackers use a credit card without a CVV?

Yes, although it can be more difficult for hackers to use a credit card without a CVV. The CVV number is often requested in transactions that don’t occur in-person as an additional layer of security to ensure that the person actually has the physical card.

Photo credit: iStock/Talaj

Financial Tips & Strategies: The tips provided on this website are of a general nature and do not take into account your specific objectives, financial situation, and needs. You should always consider their appropriateness given your own circumstances.

Third-Party Brand Mentions: No brands, products, or companies mentioned are affiliated with SoFi, nor do they endorse or sponsor this article. Third-party trademarks referenced herein are property of their respective owners.

SOCC-Q224-1883563-V1

As its name indicates, a profit and loss statement (P&L) shows a company’s profits and losses — i.e. revenue vs. expenses and other costs — over a certain period of time, like a quarter or year.

A profit and loss statement is also called an “income statement,” is one of a business’s most important accounting tools, as it provides important insights into operations, and the company’s ability to generate income and manage losses — with an eye toward profitability.

Investors can also use the P&L to assess certain aspects of company performance and compare it to other companies in the same industry.

What Is a Profit and Loss Statement?

A profit and loss report shows how much revenue a company earned over a specific period, and then subtracts how much money was spent, which results in a net profit (or loss). It’s the final line in the calculation, commonly known as the bottom line.

While a profit and loss statement provides contextual insight into a company’s financials, these figures only tell us what has happened in the past, and not what will happen in the future. Given that, this information alone is not able to determine whether a company is a “good” investment, but it’s one of the many pieces of information needed to value a stock.

Other Key Documents

In addition to filing a P&L report, companies will also file a balance sheet, cash flow statement, and statement of shareholders’ equity. Filings are made quarterly (called 10-Q filings) and annually (10-K filings) with the Securities and Exchange Commission (SEC), and are publicly available. Investors can find this information by searching for the company within the SEC’s EDGAR database.

Although having a basic overview of how to read a profit and loss statement can be helpful, it’s important to bear in mind that different companies and industries may include breakout different line items in their P&L report.

Generally speaking, it’s useful to think of each of the accounting statements as individual pieces in an overall puzzle. For example, you might compare a company’s P&L to its balance sheet, which is a snapshot of a company’s assets and liabilities for a specific date.

The balance sheet alone won’t indicate whether the company is operating at a profit, and a profit and loss statement may not provide an accurate picture into a company’s indebtedness. But together, both statements provide important context for further analysis.

What Is a P&L Statement Used For?

Profit and loss statements are a particularly useful tool for looking into the operations of a company and identifying important trends in that business, often providing insights into where (and maybe why) a company is making or losing money. For example:

•   Where is most of the revenue being spent?

•   Are there expenses that could be trimmed?

•   Are gross sales covering the cost of production?

The P&L report is also useful when used to compare two or more time periods, or when comparing companies within the same industry.

An Aid to Analysis

As with almost any accounting report, the P&L can spark important questions. What changed from last year (or last quarter)? What has improved? What has not? In particular, has the company been able to decrease expenses or increase revenue in order to secure more profit?

Most important, the P&L report may provide additional clues as to the financial inner workings of the company. It can help identify problem areas as well as growth opportunities.

For example: Perhaps a company is profitable in one period but not the next, because of an increase in research and development (R&D) costs. This is valuable information, as it may indicate a crucial investment for a new product — which can lead to an evaluation of this investment and a more sophisticated analysis.

Is this a wise use of capital, and will it pay off in terms of a new product’s success? Could the money be better spent elsewhere, or is there a more efficient way to develop the new product line?

💡 Recommended: Comparing Operating Income and EBITDA

How to Read a P&L

When learning how to read a profit and loss statement, investors should know that they generally follow a similar format.

Each begins, at the top of the page, with total revenue. This is how much money a company earned through sales. Next, costs and expenses are subtracted. Finally, at the bottom of the page, is the company’s bottom line: profit or loss.

Although a company’s “top line” revenue is a compelling figure, a company’s bottom line is typically a better indicator of whether it will be an enduring, successful business.

To illustrate the point, consider a simple example of two companies. The first company posted revenue of $10,000,000 last year, but incurred the same amount in expenses (– $10,000,000). They had high revenue, but earned no profit.

The second business earned $1,000,000, but incurred $700,000 in expenses — resulting in a $300,000 profit. The second company brought in less revenue, but was more profitable than the first.

Recommended: How to Buy Stocks: A Step-by-Step Guide

Understanding Each Section of the P&L

To really make sense of a P&L, you need to understand what each line item stands for and its relevance to the company’s overall operations.

Revenue (or sales)

To recap, one would find the total revenue at the top. This number is also called gross sales and it’s usually broken out by source. (A gross figure is one calculated before expenses are taken out.)

Net Revenue

On certain sales, a company may ultimately receive a modified amount. For example, items that are returned or are discounted must be accounted for. Therefore, the next line in the statement may include a figure that represents what a company actually expects to collect on overall sales, i.e. net revenue. (Net refers to a figure after the necessary deductions are made.) This is a more accurate picture of what incoming cash flow looks like.

Cost of Goods Sold (COGS)

Moving down the statement, direct costs or cost of goods sold usually comes next. This is what the company spent directly on the production of goods or services that were sold during that period. For example, if a company produces shoes, it would include money spent on supplies, labor, packaging, and shipping (but not rent, for example, as that’s not a direct cost).

Gross Profit

After COGS is subtracted from revenue, there may be a line titled gross profit or gross margin. This indicates the profit made on the goods sold before operating expenses.

Operating Expenses

Operating expenses include everything the company spent money on to stay in business: from IT to sales and marketing expenses to facilities costs and so on. These categories are often broken out into subcategories for specific expenses within each (for example, employee expenses might include payroll and benefits).

Total operating expenses are deducted from gross profit to get net operating income.

Net Operating Income

Net operating income, also known as EBITDA (earnings before interest, taxes, depreciation, and amortization are taken out), is a crucial part of the income statement. It reveals how much the company has after all the expenses are covered. If the number is positive, the company is able to cover the cost of doing business; if it’s negative, it means the company is operating at a loss. While that’s not uncommon, spending more than you earn is typically a red flag calling for some adjustments.

Interest Income and Expense

Interest income is money earned in interest-bearing bank accounts or other investment vehicles. Interest expense is the cost of borrowing money and paying a rate of interest on that debt. These numbers may or may not be combined into one figure.

Recommended: ETFs vs. Mutual Funds: Learning the Difference

Depreciation and Amortization

Depreciation is defined as the reduction in the value of an asset with the passage of time, due in particular to wear and tear (e.g. the depreciating value of computer systems or vehicles). Businesses are able to treat this depreciation as an expense.

Amortization is the distribution of a business expense over time (e.g. the ongoing cost of a certain software program over a few years).

Tax

Finally, any tax the company paid is also deducted. Typically, this is the last deduction before the final line in the statement: the net profit or the bottom line.

The bottom line represents the net profit or the net loss, and answers the question: During this accounting period, was this company able to turn a profit, or did they operate at a loss?

Note that profit is just one way to evaluate a company and its stock — and it’s not the same as cash on hand. To understand how much actual cash a company has in the bank, you have to read the cash-flow statement.

💡 Quick Tip: It’s smart to invest in a range of assets so that you’re not overly reliant on any one company or market to do well. For example, by investing in different sectors you can add diversification to your portfolio, which may help mitigate some risk factors over time.

Earnings Per Share

A profit and loss statement may also include an earnings per share (EPS) calculation. This is a representation of how much money each shareholder would receive if all net profit was paid out. EPS is calculated by dividing the total net profit by the number of shares a company has outstanding.

The EPS is a hypothetical calculation used by investors to assess the amount of profit created by a company. Do companies actually distribute total earnings? Not generally. Companies will typically keep some or all profits, and may make some payments to shareholders in the form of dividend payments. (The profit and loss statement may also include information on dividend payments.)

A large or a growing EPS is generally preferable but yet again, this metric alone is not sufficient in deciding whether a stock is a good investment. EPS should also be compared to the price of that stock. A company could boast a robust EPS, for example, but if the cost of the stock is relatively expensive, it might not be a good value.

For a deeper look into the correlation between earnings and price, investors can consider the price-to-earnings (P/E) ratio, which divides the price of a stock by the EPS.

The Takeaway

A profit and loss statement can give an investor a look at a company’s bottom line in terms of earnings — and also allows them to compare statements from companies in the same industry, as well as statements from the same company over different time periods. Learning how to read a profit and loss statement can be an important part of researching a company in which one might want to invest.

Invest in what matters most to you with SoFi Active Invest. In a self-directed account provided by SoFi Securities, you can trade stocks, exchange-traded funds (ETFs), mutual funds, alternative funds, options, and more — all while paying $0 commission on every trade. Other fees may apply. Whether you want to trade after-hours or manage your portfolio using real-time stock insights and analyst ratings, you can invest your way in SoFi's easy-to-use mobile app.