What you should never give an AI tool

The principle underneath the list

Treat anything you type into an AI tool the way you would treat something said in a room whose other occupants you cannot see. It may be stored. It may be reviewed by a person for quality or safety. It may sit in an account that is one weak password away from someone else.

None of that makes these tools unsafe to use. It makes them unsafe to use carelessly, which is a different and much more manageable problem. Nearly everything useful you might want help with can be described without the sensitive part.

The list

Never put any of the following into a chat window:

• Account numbers, card numbers and bank routing numbers
• Your Social Security number, or anyone else’s
• Passwords, PINs, security answers or one-time codes
• Unredacted statements, invoices or benefit letters
• Tax returns, in whole or in part
• Photographs or scans of documents
• Policy, member or medical record numbers
• Your full name together with your address and date of birth
• Anyone else’s private information, including your family’s

Why each one matters

Account and card numbers

These are the direct route to your money, and unlike a password they cannot be changed on a whim. Replacing a compromised account is days of administration and a reissued card for every automatic payment attached to it.

Your Social Security number

It is the single most valuable identifier you hold, it is permanent in practice, and it unlocks credit in your name. There is no financial question that requires it. Not one.

Passwords and one-time codes

A legitimate tool will never need them, which makes any request for them a signal in itself. One-time codes deserve their own mention: they are frequently the last barrier a scammer needs, and they are designed to be shared under pressure.

Unredacted statements and tax returns

These are the worst case, because a single document usually contains several of the items above at once—names, addresses, account numbers, employers, sometimes dependents. One paste can expose more than a year of individual mistakes.

Other people’s information

This one is easy to overlook. A caregiving question, a question about a parent’s accounts, a question about a partner’s benefits—each can carry someone else’s details into a system they never agreed to. They did not choose your risk tolerance.

How to redact in under a minute

The good news is that redaction costs almost nothing and rarely reduces the quality of the answer.

• Type figures out yourself rather than pasting a document.
• Round them. “Around $400 a month” is enough for almost every question.
• Replace names with a letter or a role: Provider A, my sister, the bank, my employer.
• Remove dates that pin down a specific event, unless the date is the question.
• Describe the document instead of showing it: “a utility bill with three line items I do not understand.”
• Reread it once before you send. That single reread catches most of it.

A worked example. Instead of pasting a benefits letter, this does the same job:

The tool has everything it needs. It has nothing it could lose.

Your settings are worth two minutes

Most tools have controls for chat history and for whether your conversations may be used to improve the service. Those settings differ by tool and change over time, so check yours directly rather than trusting any summary—including this one.

While you are there, two habits worth adopting: start a new conversation for anything sensitive rather than continuing an old one, and delete conversations you no longer need. Both reduce how much sits in one place.

If you have already pasted something

Almost everyone has, and the sky does not fall. Take it in proportion to what it was.

• A password: change it now, and anywhere else you reused it. Turn on two-factor authentication while you are there.
• A card number: contact the issuer. Replacing a card is routine and free.
• An account number: call the institution, ask what monitoring they offer, and watch the account closely.
• Your Social Security number: this is the one worth acting on properly. Consider a credit freeze with each of the three nationwide credit bureaus, and use the Federal Trade Commission’s IdentityTheft.gov if anything looks wrong.
• A whole document: delete the conversation, then work through whichever items above it contained.

Then adopt the habit and move on. The goal is not a perfect record. It is a smaller surface area from here.

Sources and further reading

1. Federal Trade Commission. “IdentityTheft.gov: report and recover from identity theft” identitytheft.gov Accessed July 27, 2026
2. Social Security Administration. “Protecting your Social Security number and reporting fraud” ssa.gov/scam Accessed July 27, 2026
3. Federal Trade Commission. “Consumer Advice: scams and how to avoid them” consumer.ftc.gov/scams Accessed July 27, 2026 · Guidance is updated regularly; check the current page.
4. Consumer Financial Protection Bureau. “Ask CFPB: plain-language answers to consumer finance questions” consumerfinance.gov/ask-cfpb Accessed July 27, 2026

Written and reviewed by Carrie, Handled Money Editorial · Published July 27, 2026 · Last reviewed July 27, 2026. AI tools change quickly; we review this guide as they do.