Privacy & Security FAQs
We thoroughly train our employees to protect your personal information.
- Whenever you contact us (by phone, online and through our mobile apps) we protect your data and accounts by asking you for information that only you should know.
- We may confirm your identity with a single-use security code during the login process.
- We use technologies such as firewalls (which protect systems from intrusion) and encryption (scrambling of information).
- We continually review and enhance our security tools and procedures.
Visit our Security Center on the desktop site for more information on how to protect your identity.
You can always opt out of marketing emails by selecting the unsubscribe link at the bottom of the email.
In addition, you can manage your preferences through your Ally Auto or Bank online profile. If you don’t have an online profile, you can:
- Call 1-800-204-2197 and have your account number available. Our menu will prompt you through your choices.
- Visit ally.com/privacy and select Manage My Privacy Preferences. You’ll need to have your account number available.
We’ve streamlined the process for logging in to your bank accounts. You can now enter your username and password on a single screen and no longer need to verify a trusted image (formerly called the SafeKeys image). As always, you can be confident that your bank accounts are secure. We’ll still send you a security code to make sure it’s you when we need additional verification.
We use multiple levels of security to help protect your information. We use 128-bit Secure Sockets Layer (SSL) encryption for all communications between your browser and our servers that contain your personal information.
Here’s how you can tell communications are encrypted:
- Look for the padlock icon located at the top or bottom of your browser window
- Look for the https:// in the web address
Use these tips to protect your information online:
- Don’t use a password or password hint question that someone you know could guess
- Never write down your password or disclose it to anyone else
- Always log out when you’ve finished with Ally Online Services
- Always exit or close your browser after you log out
Visit our Security Center for more information on how to protect yourself online.
If you suspect you might be a victim of identity theft or financial fraud, contact our fraud hotline at 1-833-226-1520. For more information on how to deal with fraud and identity theft, visit our Security Center.
Once you log in to online banking, choose Email. Depending on the types of accounts you have, you may have to select the correct destination for your request to help us route your message to the correct Customer Care Associate.
If you're unsure if an email or text message is really from Ally, forward the suspicious message to email@example.com and we’ll investigate.
To protect yourself from phishing emails you should never respond to emails requesting sensitive or confidential information, such as passwords, usernames, Social Security numbers, etc. Instead of clicking on links in emails, we advise you type website addresses directly into your browser. This will help further protect you from fraudulent links and phishing attempts. Never open an email attachment unless it comes from a trusted source.
Visit our Security Center for more information on how to protect yourself online and offline.
No. VoIP (Voice over Internet Protocol) numbers like Google Voice™ connect a phone number to an IP address instead of to an actual phone. Because someone else could access your VoIP line anywhere, from any device, we don't allow them to be used for multi-factor authentication. We need to verify that it's you from a specific phone in your possession.
Short for malicious software, malware gets installed on your computer or mobile device without your consent and is most commonly used to steal your information and login credentials, which can lead to identity theft and financial crime.
There are two ways we use OBA on third party websites and mobile apps that are not affiliated with Ally.
Ally has adopted the use of the AdChoices Icon (also known as the Advertising Option Icon) on our interest-based advertising (excluding ads appearing on platforms that do not accept the icon). You can click the AdChoices Icon to learn more and control whether or not you receive this type of advertising from participating companies.
We also use device information, particularly in mobile advertising, to help deliver our ads and measure ad campaign effectiveness. Ally and the companies we work with won’t collect any personally identifiable information (PII) but may collect your device information when you visit one of our sites or see our ads. Compiling and comparing this information creates a unique ID for individual devices and can be "matched" to the same information on other sites or mobile applications. Some companies we work with are also able to associate related devices into households based on common characteristics, such as IP addresses.
The following numbers are all valid phone numbers for Ally Bank:
We use a variety of technologies, including cookies, to collect information about your online/mobile activity when you visit our website. Cookies are small text files that a website server stores on your computer or device. They're typically used to remember your account login preferences, monitor website traffic, provide customer support like live chat and help us better customize our site for your individual preferences.
We may also use Flash® objects (sometimes called "Local Shared Objects") as part of our online authentication to help us recognize your computer when you come back to our site. We do not use Flash objects for any online behavioral advertising purpose.
Yes. Ally Bank offers its bank customers Webroot® SecureAnywhere™ — an anti-virus, anti-malware software that detects, removes and protects devices from malicious software — free of charge on up to 3 devices.
Go to ally.com/webroot and select Log in to Download. Once you log in to your online banking account, you’ll be directed to the download page where a license key will be presented to you.
Yes, you can disable cookies by making the appropriate selection from your browser options to inform you when cookies are set or to prevent cookies from being set. However, if you choose to disable or delete cookies, you may limit the functionality we can provide when you visit our site.
No. We do not respond to web browser "Do Not Track" signals at this time. To prevent Ally or third parties from tracking, you can access your browser settings and disable or delete your cookies.
While VPNs can be useful, anti-fraud protection comes first. That’s why Ally and many other financial firms don’t allow VPN login. To access your profile, we recommend waiting until you can move off of VPN and use a secure, private WiFi network.
There are several ways to review and update your preferences:
- Visit ally.com/privacy and select Manage My Privacy Preferences. You'll need to have your account number available
- Ally Bank and Auto customers can log in to update. Select Profile and Privacy Preferences
- Call 1-800-204-2197 and have your account number available. Our menu will prompt you through your choices
No. We'll never ask for your nonpublic personal information in an email or in a chat session. Emails and chat sessions that appear to be from Ally requesting nonpublic personal information are phishing for your information. Do not provide any personal information. Forward the email to firstname.lastname@example.org or end your chat session.
To learn more about protecting yourself online, visit the Security Center.
Look for the https:// in the web address before you enter your username and password. It’s OK for a home page to begin with “http,” but you should always make sure you're on an "https" page before logging in.
You can also read security details of sites by selecting the padlock icon located at the top or bottom of your browser window. View the security certificate and make sure it matches the site.
Visit our Security Center for more information on how to protect yourself online.
We'll ask for a security code any time we need to verify your identity — it's just one more way we safeguard your account. We'll send a six-digit code in a text or voice call (whichever you choose at the time of sending) and you'll enter the code to finish logging in. Codes should arrive within a few seconds, but you can always re-send if needed.