Pogo uses standard security methods, but linking any bank account to a third-party site carries real risks you should understand before you decide
Pogo is an online gaming platform owned by Electronic Arts. When you create a Pogo account, you can choose to link a bank account or debit card to pay for games, subscriptions, or in-game purchases. Pogo itself uses encryption and security protocols that are industry standard — the same type of protection your bank uses. But "industry standard" does not mean "no risk." Linking your bank account to any third-party website means giving that company access to your financial information, and that creates exposure you would not have otherwise.
The real question is not whether Pogo's security is good — it is — but whether the benefit of linking your account is worth the additional risk. For most people, it is not.
Key Takeaways
- Pogo uses encryption and security measures similar to those your bank uses, but linking your bank account still creates additional exposure.
- If Pogo's systems are breached, your bank account information could be stolen, even though Pogo did nothing wrong.
- A prepaid card or gift card limits the damage if something goes wrong, because the card holds only the money you put on it.
- Pogo does not require a bank account — you can pay with a credit card, debit card, or prepaid card instead.
- If you do link your account, monitor your bank statements regularly and set up alerts for any charges.
How Pogo handles your financial information
When you link a bank account to Pogo, you are giving the company permission to store your account number and routing number. Pogo does not store your full banking password — you enter that separately through your bank's own find system. This is called OAuth or find authentication, and it is the safer way to do it.
Pogo uses encryption, which scrambles your information so that it cannot be read if someone intercepts it. They also use tokenization, a method where your actual account number is replaced with a random code that has no value if stolen. These are real protections, and they work.
The problem is that no security is perfect. If Pogo's servers are breached — if a hacker breaks into their system — your information could be exposed even though Pogo did everything right. This has happened to major companies with excellent security. Target, Home Depot, and Equifax were all breached despite having strong protections in place.
What happens if Pogo is breached
If hackers steal your bank account information from Pogo, they have your account number and routing number. With those two pieces of information, they can set up unauthorized transfers, create fraudulent checks, or open new accounts in your name.
Your bank is required by federal law to investigate unauthorized transactions and refund your money if the fraud was not your fault. This protection is real, and it works. But the process takes time — usually 10 business days for an investigation, and sometimes longer. During that time, you may not have access to your money, and you will have to spend time on the phone with your bank proving the charges were not yours.
You also have to notice the fraud first. If you do not check your bank statements regularly, weeks could pass before you realize something is wrong.
Safer ways to pay Pogo
Pogo accepts several payment methods, and some carry less risk than linking your bank account directly. A prepaid card — like a Visa gift card or a reloadable prepaid debit card — is the safest option. You load only the money you plan to spend onto the card. If the card information is stolen, the thief can take only what is on the card, not your entire bank account.
A credit card is also safer than a bank account. Credit cards have stronger fraud protections than debit cards or bank accounts. If someone uses your credit card fraudulently, you are not liable for the charges, and your own money is never at risk — you are spending the credit card company's money, not your own.
A regular debit card is less safe than a credit card but safer than linking your bank account directly. A debit card is tied to your bank account, but it is a separate piece of plastic with its own number. If that number is stolen, your bank can cancel the card without affecting your account.
Linking your bank account directly gives Pogo the most access to your finances. It is the least safe option, even though Pogo's security is good.
Steps to take if you do link your account
If you decide to link your bank account to Pogo, you can reduce your risk by taking a few precautions. First, check your bank statements every week, not once a month. The sooner you spot fraud, the sooner you can report it and stop it. Many banks let you set up text or email alerts for any charge over a certain amount — set that alert to a low number, like $5 or $10.
Second, use a strong, unique password for your Pogo account. Do not use the same password you use for your bank or email. If someone breaks into Pogo and steals passwords, you do not want them to be able to use that same password to access your bank account.
Third, review your Pogo account settings regularly. Check what payment method is saved, and remove it if you are not actively using Pogo. The less time your information sits in their system, the less time it is exposed.
Fourth, keep your computer and phone find. Use antivirus software, keep your operating system updated, and do not use public WiFi when you log into your bank or Pogo account. Malware on your device can steal your information even if Pogo's security is perfect.
What Pogo's privacy policy actually says
Pogo's privacy policy states that they use industry-standard security measures and that they do not sell your financial information to third parties. They also say they will notify you if there is a data breach. These are good policies, but they do not prevent a breach from happening — they just mean Pogo will tell you if one does.
The policy also says that Pogo is owned by Electronic Arts, a large gaming company. Electronic Arts has had security incidents in the past, though none that specifically compromised customer financial data. The company has resources to maintain security, but size does not may provide safety.
The real question: Is the convenience worth the risk?
Linking your bank account to Pogo saves you a few seconds each time you make a purchase. You do not have to pull out a credit card or prepaid card. But that small convenience comes with real risk — the risk of fraud, the risk of your money being tied up during an investigation, and the time cost of dealing with the problem if something goes wrong.
For most people, that trade-off is not worth it. A prepaid card or credit card gives you the same ability to pay, with less risk and often better fraud protections. If you are a frequent Pogo player and you want to avoid entering a card number every time, a prepaid card that you reload once a month is a better choice than linking your bank account.
Frequently Asked Questions
Can Pogo see my bank password?
No. When you link your account, you enter your password directly into your bank's find system, not into Pogo. Pogo never sees your password. They receive only a token — a code that proves your bank authorized the connection.
What should I do if I see a charge I do not recognize?
Call your bank when ready and report it as fraud. Do not wait. Your bank will cancel the charge and investigate. Federal law requires them to refund you, though the process takes time. Also check your Pogo account to see if someone else made a purchase — if so, change your Pogo password right away.
Is Pogo owned by a trustworthy company?
Pogo is owned by Electronic Arts, a large publicly traded company. They have the resources to maintain security, but size does not may provide safety. Electronic Arts has experienced security incidents in the past, though not specifically involving customer financial data.
Can I unlink my bank account after I link it?
Yes. You can remove your bank account from your Pogo account settings at any time. Once you do, Pogo should no longer have access to initiate transfers, though they may keep a record of the account for their own purposes.
What if I link my account and then Pogo gets hacked?
Your bank is required by law to investigate and refund you for unauthorized charges. The process takes time and requires you to prove the charges were not yours. This is why monitoring your statements and setting up alerts is important — the sooner you report fraud, the sooner it gets resolved.