Keeping Your Account Safe

Why this matters

There are two very different ways money can disappear from an investment account: the firm holding it fails, or someone else gets into it. The first is rare and partly covered by a protection program. The second is far more common, and preventing it is mostly up to you.

If a brokerage firm fails: SIPC

SIPC, the Securities Investor Protection Corporation, protects customers of member brokerage firms if the firm fails and customer assets are missing. Its protection is limited to $500,000 per customer, which includes a $250,000 limit for cash.¹²

The source for everything in this table is SIPC itself.¹ SIPC is different from the FDIC, which insures bank deposits.³ Before opening an account, it's worth confirming the firm is a SIPC member and looking it up on BrokerCheck.⁴

The more common threat: account takeovers

An account takeover happens when a criminal gets control of your account, usually by getting hold of your login details. Common tricks include fake websites for well-known firms, sometimes promoted with paid online ads, which capture your username and password when you try to log in.⁵ Once inside, a fraudster may lock you out, move money, steal personal information, or place trades, including buying shares as part of a pump-and-dump scheme.⁵

Many attempts start with a message. Phishing uses email, smishing uses text messages, and vishing uses phone calls, each pretending to come from a company you trust.⁶

Sam gets a text: "Unusual activity detected on your brokerage account. Your account is locked. Verify now: [link]." The firm's name is spelled correctly and the message feels urgent.

What Sam might do	Why it matters
Tap the link and log in	If the site is fake, Sam has just handed over their login
Ignore the link and open the firm's app directly	If there's really a problem, it will show there, safely
Call the number on the firm's official website	Not the number in the message, which could be the scammer's

Sam is fictional. The rule is simple: never log in or share codes through a link, number, or person that contacted you first.

Practical steps

1. Turn on two-factor authentication. Two-factor authentication requires a second code or confirmation, sent to your phone or email or shown in an authenticator app, before anyone can log in from an unrecognized device.⁵
2. Turn on account alerts. Alerts for logins, trades, withdrawals, and changes to your contact details are one of the easiest ways to spot fraud early.⁵
3. Use a unique, strong password for each financial account, ideally with a password manager.
4. Go to the firm directly. Type the web address yourself or use the official app, rather than following links in messages or ads.
5. Never share one-time codes. A legitimate firm won't ask you to read out a code it just sent you.
6. Review statements. Check trade confirmations and monthly statements for anything you don't recognize.

Key takeaways

• SIPC helps if a member brokerage firm fails, up to $500,000 per customer including $250,000 in cash. It doesn't cover market losses or bad advice.
• Account takeovers often start with fake messages, websites, or ads that capture your login.
• Two-factor authentication and account alerts are among the most effective protections.
• Never log in or share codes through a link, number, or person that contacted you first.

Check your understanding

An email that looks like it's from your brokerage firm asks you to confirm your login through a link. What should you do?

1. Ignore the link and check your account through the official app or a web address you type yourself.
2. Use the link, since the logo, the sender's name, and the formatting all match your firm's emails.
3. Reply with your username only, never your password, so the firm can look up your account.

Which situation would SIPC protection most likely apply to?

1. Your stocks fell 30% in a market crash and haven't recovered.
2. A broker recommended an investment that turned out badly and lost most of its value.
3. Your SIPC-member brokerage firm failed and some customer securities were missing.

What's next

That covers the core of how investing works in practice. The last lesson in this module, Margin and Short Selling, is optional. It explains two tools, borrowing to invest and betting on a fall, that magnify risk, so you can recognize them even if you never use them.