By Jeanne Sahadi, CNN
(CNN) — If you’re financially pressed, confused about money, or just want a little free help figuring out how to improve your cash flow, you may be tempted to use AI.
But you should know how to protect yourself before chatting about your finances with any AI tool (eg, ChatGPT, Copilot, Gemini, or Claude) so you don’t allow your sensitive personal information to be inadvertently exposed to others, including some who might use it to harm you. Also, you can’t count on AI to instruct you to protect your privacy – although depending on the wording of your prompt, it might.
For instance, earlier this month the popular podcaster and author Mel Robbins encouraged her followers on Instagram to try AI – and specifically Microsoft Copilot – to help them get control over their money. (In her video caption, she said she’d partnered with Microsoft Copilot.)
In the comments section to her post, Robbins offered a suggested prompt to use, which included the sentence: “I’ll share documents like bank statements, debt statements, bills, and income info when you ask.”
Neither her post nor her prompt included recommendations to redact sensitive information. (More on why you should do that below.)
A spokesperson for Robbins’ office said in an email that Copilot offered privacy warnings once a person put in Robbins’ exact prompt and shared the text of the replies they got when doing so. But when CNN used Robbins’ prompt in the free version of Copilot it got slightly different replies and nothing like the privacy warning the spokesperson had shared. (When asked why, a Microsoft spokesperson said “responses will vary even when the questions are the same or similar. Copilot, like other conversational AI assistants, adapts to the flow of the conversation, tone, and context.”)
In response to many followers’ criticisms of her original prompt, Robbins last Friday acknowledged their concerns and thanked them for the feedback in the comments section. She also amended her suggested prompt by replacing the sentence about uploading financial statements with this one: “Always remind me to remove personal information.”
Better prompt, better replies
That made a huge difference.
When CNN used Robbins’ amended prompt, every Copilot reply during the exchange included privacy warnings, with the first being the most extensive: “First, a quick safety thing: Please don’t share any personal information like your full name, account numbers, addresses, employer details, or anything that could identify you. If you copy numbers from a statement, remove names, account IDs, and exact dates.”
What to know
Indeed, your bank statement, W-2, tax return, credit card statement and other financial documents can reveal those items and more, including your phone number, email, income, debts, bank routing numbers, employee ID number, taxpayer ID number and Social Security number.
Uploading unredacted information like that carries several risks. “There’s a chance it could be hacked, leaked or breached,” said Rachel Tobac, CEO of SocialProof Security, a “friendly” hacker company.
Should that happen, you’re at risk for identity theft, account takeover or someone draining your bank account, according to Tobac, who has lent her expertise to teams working on security, privacy and abuse prevention at most of the major AI providers.
Put differently, “The privacy risk comes from the fact that AI memorizes stuff,” said Gang Wang, an associate computer science professor at the University of Illinois’ Grainger College of Engineering.
For instance, he said, “If your documents are part of AI’s training data – there is a risk that information will be induced by a special p