Venmo


Venmo is a mobile payment service owned by PayPal. Venmo account holders can transfer funds to others via a mobile phone app; both the sender and receiver have to live in the U.S. It handled $12 billion in transactions in the first quarter of 2018. Venmo was launched in 2009 targeting the use case of friends splitting bills, e.g. for movies, dinner, rent, tickets, etc.
By default, Venmo publishes every peer-to-peer transaction, a feature which was shown by researchers to reveal sensitive details about users' lives in some situations.
In 2018, the company settled with the FTC about several privacy and security violations related to this and other features, and made changes to the corresponding settings, but it continued to attract criticism for exposing users to privacy risks.
Since 2008, cash transfers using Venmo have not been instantaneous and could be canceled after an initial transfer is sent. Like traditional wire transfers, they can take one to three business days to become final.
In January 2018, PayPal rolled out an instant transfer feature on Venmo, allowing users to deposit funds to their debit cards typically within 30 minutes. A fee is deducted from the amount for each transfer; 1% or $10, whichever is less. The standard bank transfer is available for no fee.

Product

Users can create an account via a mobile app or website and provide basic information and bank account information. One must have a valid email address and an American mobile phone number to use Venmo. Recipients of transactions can be found via phone number, Venmo username, or email.
Users have a Venmo balance that is used for their transactions. They can link their bank accounts, debit cards, or credit cards, to their Venmo account; alternatively users can order a Venmo MasterCard and pay through it. Paying with a bank account or debit card is free, but payments via credit card have a 3% fee for each transaction. Some credit card providers may charge cash advance fees for Venmo payments. If a user does not have enough funds in the account when making a transaction, it will automatically withdraw the necessary funds from the registered bank account or card.
Users get rewards into their accounts when Venmo is used with selected merchants. Through Venmo Rewards Program, they can use these by bank account transfer or debit card and merchants in-app.
When users first create an account, total transactions cannot exceed $299.99 until their identity is verified. After their identity has been verified, users can send up to $2,999.99 in each seven day period.

Venmo MasterCard

In 2018, Venmo released a new physical debit card available for users. The card runs on the MasterCard network and offers ATM access and overdraft protection. It can be used anywhere that accepts MasterCard, and it enables up to $400 in daily ATM withdrawals, though transactions at non-MoneyPass ATMs come with at least $2.50 in withdrawal fees.
In addition, the service offers a reload function, which, when enabled, takes money from a user's linked checking account in $10 increments if their Venmo balance drops too low to cover a purchase. Customers could be subject to fees or other consequences from their bank if they overdraft that account. Card purchases show up in a user's Venmo transaction history, and the card can be canceled from within the app. These features make the card similar to a traditional bank debit card, but adds the ability to directly track spending in-app.

Social component and privacy concerns

Venmo includes social networking interaction; it was created so friends could quickly split bills, whether that is for movies, dinner, rent, tickets, etc. When a user makes a transaction, the transaction details are shared on the user's "news feed" and to the user's network of friends. This mimics that of a social media feed. There is a "world wide" Venmo feed, a "friends only" feed, and then personal feed. Venmo encourages social interaction on the application through comments using jokes or emojis and/or likes. Early on, Venmo required new users to sign up through Facebook, which made it easy to find peers they wanted to pay and also provided Venmo with free marketing. For users not friends on Facebook, the application allowed the opportunity to search by username and phone number. Profiles are personalized with profile pictures, usernames and Venmo transaction history. The transactions can be made private, but most users keep the default and do not change the privacy settings. Venmo does not have either buyer or seller protection.
Venmo includes three social feeds: a public feed, a friends feed, and a private feed. By default, all Venmo transactions are shared publicly. Anyone who opens the app to the public feed, including people who do not themselves use Venmo, can see these publicly shared posts. The privacy settings can be changed so that all posts are either shared only with a user's Venmo contacts, or even kept private. If posts are shared only with contacts, they still appear in a friends feed, whereas private transactions are only visible to the two parties involved in the transaction. If two users involved in a single transaction have differing privacy settings, Venmo applies the more restrictive level. Users can override their overall preference for any individual transaction, including after the transaction has been made.
A 2018 study analyzed over 200 million public transactions and found that Venmo "reveals a massive amount of private details about users' lives by default". The same year, the company reached a settlement with the FTC after the FTC had accused Venmo of "misleading" users about the privacy settings changes required to make transactions completely private. In 2019, another researcher downloaded and analyzed seven million transactions, concluding that although Venmo had made some minor improvements limiting mass-scraping, the data still put users at risk for various forms of cyberattacks.
In 2019, Mozilla and the Electronic Frontier Foundation wrote an open letter "to express our deep concern about Venmo's disregard for the importance of user privacy, and to call on Venmo to make two critical changes to its privacy settings: make transactions private by default, and give users privacy settings for their friend lists".
Each transaction includes a description of what the payment is for in text, emoji, or both. This description is required to complete the transaction, but Venmo does not enforce content requirements. Venmo recommends emoji when a common expense is entered as the description. Overall, 30% of Venmo transactions include at least one emoji.
Regardless of a transaction's privacy, only the two people involved in a transaction can see the transaction's amount. Transactions are persistent within the feed and scroll infinitely. A previous transaction may be difficult to revisit if a user or their contacts have many transactions.
Venmo's social model has attracted attention from researchers. A research group from University of Washington observes that the social feed in Venmo differs from other social networks in that activity is driven by financial transactions. A user could make a trivial transaction to make a post, but only one participant in their studies reported ever doing this. Further, neither reading the feed nor sharing a transaction memo publicly or with friends is necessary to send or receive money.
On Venmo, people transact with both friends and businesses via the app. Analysis of public transactions identifies a spectrum of use patterns, from regular users who create transactions for a variety of expenses, to niche users who use Venmo with a small cluster of friends to pay for just a few things.

Security

Venmo has claimed that its security is bank-grade, and that personal and financial data are encrypted and protected on secure servers to guard against any unauthorized transactions. However, journalists, security researchers, the California Department of Business Oversight and the Federal Trade Commission have all disputed these claims.
In February 2018, the FTC settled with Venmo, after an investigation uncovered false representations about "bank grade" security and failures to comply with the Gramm-Leach-Bliley Safeguards Rule and Privacy Rule. Under the settlement, Venmo will be required to undergo third-party audits every two years for the next ten years. The FTC also complained that Venmo "misled consumers about the extent to which they could control the privacy of their transactions" and misrepresented the availability of funds for withdrawal.
Venmo states that customers need not worry about their security or privacy, and encourages users to set up a PIN to increase security. On July 17, 2018, The Guardian published an article showing that Venmo is insecure because privacy protection is not set by default. According to the researcher who found this privacy issue, Venmo publishes all transactions along with names openly into the World Wide Web.
The Better Business Bureau has reported that some scammers exploit the cancellation period to appear to pay, but ultimately avoid paying for an item.
In November 2018, The Wall Street Journal reported that Venmo, in the first quarter of 2018, had suffered $40 million in operating losses—nearly 40% more than it had budgeted for—due to "a wave of payments fraud".

History

Venmo was founded by Andrew Kortina and Iqram Magdon-Ismail, who met as freshman roommates at the University of Pennsylvania. According to Kortina, the duo were initially inspired to create a transaction solution while, in the process of helping start a friend's yogurt shop, they "realized how horrible traditional point of sales software was". At a local jazz show, Kortina and Magdon-Ismail conceived the idea of instantly buying an MP3 of the show via text message. Finally, the idea was cemented when Magdon-Ismail forgot his wallet during a trip to visit Kortina. The process of settling their debt was a considerable inconvenience, especially compared to the possibility of mobile phone-based transactions. Shortly after, they began working on a way to send money through mobile phones. Their original prototype sent money through text messages, but they eventually transitioned from text messages to a smartphone app.
In May 2010, the company raised $1.2 million of seed money in a financing round led by RRE Ventures.
In 2012, the company was acquired by Braintree for $26.2 million.
In December 2013, PayPal acquired Braintree for $800 million.
Prior to October 2015, Venmo prohibited merchants from accepting Venmo payments.
On January 27, 2016, PayPal announced that Venmo was working with select merchants who would accept Venmo as payment. Initial launch partners included Munchery and Gametime. All merchants that accept PayPal can now accept Venmo. As of May 2018, Venmo's merchant product did not permit "selling goods or services in person"; however, research into mobile payment trends among mom-and-pop restaurants in New York City that month revealed a grey market use case whereby some Chinese takeouts and food trucks used personal Venmo QR codes to accept payments from customers. This QR payment behavior was similar to that used via Chinese mobile applications WeChat and Alipay within these same establishments.