Why Xoom Account Security Matters

Your Xoom account is connected to your financial information, bank accounts, and personal identity details. If compromised, an attacker could initiate unauthorized transfers, steal your personal data, or use your account for fraudulent activity. Taking a proactive approach to security is essential — and fortunately, most of the best practices are simple to implement.

Use a Strong, Unique Password

This is foundational but frequently overlooked. Your Xoom password should:

  • Be at least 12 characters long
  • Include a mix of uppercase and lowercase letters, numbers, and symbols
  • Be completely unique to Xoom — never reused from another site
  • Not include obvious personal information (birthdays, names, etc.)

Consider using a reputable password manager (such as Bitwarden, 1Password, or similar) to generate and store strong passwords securely.

Enable Two-Factor Authentication (2FA)

Xoom supports two-factor authentication, which requires a second form of verification when logging in. This means that even if someone obtains your password, they still can't access your account without the second factor. Enable 2FA in your account security settings and opt for an authenticator app over SMS where possible, as SMS-based 2FA can be vulnerable to SIM-swapping attacks.

Recognize and Avoid Xoom-Related Scams

Scammers frequently impersonate Xoom to steal login credentials or trick people into sending money. Common scam tactics include:

  • Phishing emails: Fake emails that look like official Xoom communications, containing links to fake login pages designed to steal your credentials.
  • Phone scams: Callers claiming to be Xoom support who ask for your password, one-time codes, or banking details.
  • Fake transfer receipts: Scammers sending forged Xoom transaction confirmation screenshots to claim payment was made.
  • Overpayment scams: Someone "accidentally" sends you money and asks you to return part of it — the original transfer is later reversed.

Key rule: Xoom will never ask for your password, full card number, or one-time verification code via phone or email.

Verify You're on the Real Xoom Website

Before entering any login information, always confirm:

  1. The URL is exactly xoom.com or www.xoom.com
  2. There is a padlock icon in the browser address bar (HTTPS)
  3. You haven't arrived at the page via a link in an unsolicited email or text message

Bookmark the official Xoom site and always navigate directly from your bookmark rather than following links.

Monitor Your Account Regularly

Make it a habit to check your Xoom transaction history regularly. Look out for:

  • Transfers you didn't initiate
  • Changes to your profile, email, or linked accounts you didn't make
  • Login notifications from unfamiliar devices or locations

If you notice anything suspicious, change your password immediately and contact Xoom support through the official Help Center.

Keep Your Contact Information Updated

Xoom uses your email address and phone number to send security alerts, transfer notifications, and account recovery options. Ensure these are current so you receive all account activity notifications in real time.

What to Do If Your Account Is Compromised

  1. Change your Xoom password immediately.
  2. Change the password of the email account linked to Xoom.
  3. Contact Xoom support directly at xoom.com to report unauthorized activity.
  4. Notify your bank if any linked payment methods may have been exposed.
  5. File a report with the FTC at reportfraud.ftc.gov if you've been a victim of fraud.