SoFi Terms of Use

SoFi · agreement dated September 17, 2026 · Official agreement

Read the agreement

5 of 200 cards in Security & Safeguards

Security & Safeguards · Restriction or exception

You protect your log-in credentials and accept the risk of unauthorized access

When you create an account you agree to use a complex, secure and private username and password and to protect your log-in credentials. You agree to accept the risk of unauthorized access and use of your account if your credentials are guessed, stolen or intercepted, or if SoFi's system is breached or used without proper authorization. If you learn of unauthorized use of your password or account, you must contact SoFi immediately using contact information on the SoFi Site. The Agreement states that SoFi is not responsible for any unauthorized access to or use of your account.

Details
Who
you (the user)
Condition
credentials guessed, stolen, intercepted, or SoFi's system breached

Supporting quotations

You agree to accept the risk of unauthorized access and use of your account if your credentials are guessed, stolen, intercepted, or if SoFi’s system is breached or used without proper authorization.
If you learn of any unauthorized use of your password or account, you must contact us immediately (using contact information on our SoFi Site).
SoFi is not responsible for any unauthorized access to or use of your account.

Qualifications & exceptions

  • The risk you accept covers guessed, stolen or intercepted credentials and a breach or unauthorized use of SoFi's system.
  • You must contact SoFi immediately after learning of unauthorized use of your password or account.

Not stated here

  • The text does not say whether any other document or law limits this statement that SoFi is not responsible for unauthorized access.

Cross-references

  • contrast (model-proposed): SoFi has no liability for unauthorized transfers made with your passcode before you notify it — One term says SoFi is not responsible for any unauthorized access to or use of your account. A later term says SoFi has no liability for unauthorized payments or transfers made with your passcode before you notify it and it has had a reasonable opportunity to act. The second is conditioned on timing of notice; the Agreement does not say how the two fit together.

Security & Safeguards · Company commitment

SoFi commits to reasonable security measures and says its systems are not 100% secure

SoFi's obligation is to use reasonable information security measures. You acknowledge and agree that SoFi's systems are not 100% secure against every possible attack.

Details
Who
SoFi
What it covers
information security measures

Supporting quotations

SoFi’s obligation is to use reasonable information security measures, and you acknowledge and agree that SoFi’s systems are not 100% secure against every possible attack.

Qualifications & exceptions

  • The stated obligation is reasonable information security measures, not a guarantee against every attack.

Security & Safeguards · Procedure

SoFi may text you two-factor codes; they support but do not guarantee account security

SoFi may send you two-factor authentication code messages by SMS. This is intended to support secure access but is not guaranteed to provide account security. You can cancel the SMS service at any time by texting STOP to the short code; SoFi then sends a confirmation message and you receive no more SMS messages, and you can join again by signing up as you did the first time. You can reply HELP or get help at 1-855-456-SOFI (7634). You might incur message and data fees, and you will receive at least one message per authentication attempt. The Agreement points to SoFi's privacy policy for privacy questions.

Details
Who
SoFi
What it does
text STOP to the short code to cancel
Why
two-factor authentication to support secure access

Supporting quotations

SoFi SMS Two-Factor Authentication Program
SoFi may send you a two-factor authentication code messages. This is intended to support your secure access but is not guaranteed to provide you account security.
You can cancel the SMS service at any time. Just text “STOP” to the short code.
After this, you will no longer receive SMS messages from us.
You might incur message and data fees for any messages sent to you from us and to us from you. You will receive at least one message per authentication attempt.

Qualifications & exceptions

  • Cancelling the SMS service by texting STOP ends all SMS messages from SoFi, as the text states.
  • You will receive at least one message per authentication attempt.

Security & Safeguards · Restriction or exception

SoFi has no liability for unauthorized transfers made with your passcode before you notify it

SoFi will have no liability to you for any unauthorized payment or transfer made using your passcode that occurs before you have notified SoFi of possible unauthorized use and SoFi has had a reasonable opportunity to act on that notice. SoFi may suspend or cancel your passcode even without notice from you if it suspects the passcode is being used in an unauthorized or fraudulent manner.

Details
Who
SoFi
Condition
before you notify SoFi and it has had a reasonable opportunity to act

Supporting quotations

SoFi will have no liability to you for any unauthorized payment or transfer made using your passcode that occurs before you have notified us of possible unauthorized use and we have had a reasonable opportunity to act on that notice.
SoFi may suspend or cancel your passcode even without receiving such notice from you, if we suspect your passcode is being used in an unauthorized or fraudulent manner.

Qualifications & exceptions

  • The no-liability statement covers unauthorized payments or transfers occurring before your notice and SoFi's reasonable opportunity to act on it.

Not stated here

  • The text does not say how this statement relates to any separate rules for particular accounts or products.

Cross-references

  • contrast (model-proposed): You protect your log-in credentials and accept the risk of unauthorized access — One term says SoFi is not responsible for any unauthorized access to or use of your account. A later term says SoFi has no liability for unauthorized payments or transfers made with your passcode before you notify it and it has had a reasonable opportunity to act. The second is conditioned on timing of notice; the Agreement does not say how the two fit together.

Security & Safeguards · Restriction or exception

You are responsible for your transmissions, must not impersonate anyone, and unauthorized entry or misuse is prohibited

You agree that you are solely responsible for your actions and the contents of your transmissions through the SoFi Site, that you will not impersonate any person or entity or falsely state or misrepresent your identity or affiliation, and that you possess the legal right and ability to enter into these Terms of Use and the License and to use the SoFi Site. Unauthorized use of the SoFi Site, including unauthorized entry into SoFi's systems, misuse of passwords or misuse of any information posted on a site, is strictly prohibited.

Details
Who
you (the user)

Supporting quotations

(i) You are solely responsible for your actions and the contents of your transmissions through the SoFi Site. (ii) You will not impersonate any person or entity or falsely state or otherwise misrepresent your identity or affiliation with a person or entity. (iii) You possess the legal right and ability to enter into these Terms of Use and the License and to use the SoFi Site.
Unauthorized use of this SoFi Site, including but not limited to unauthorized entry into SoFi’s systems, misuse of passwords, or misuse of any information posted on a site, is strictly prohibited.

Qualifications & exceptions

  • The prohibition lists unauthorized entry into SoFi's systems, misuse of passwords and misuse of posted information as examples ("including but not limited to").
Also annotated in the same passage (1)