Provision record
SoFi · SoFi Terms of Service · View original document ↗

Two-factor authentication SMS not guaranteed secure

Medium severity Explicitdocumentlanguage Common · 292 of 352 platforms
Get alerted the next time SoFi changes these terms. Follow SoFi →
Share 𝕏 Share in Share 🔒 PDF
Recent governance activity SoFi recorded 12 documented changes in the last 30 days.
Follow SoFi →
Monitor governance changes for SoFi Monitor emails you the same day this changes. The archive stays free.
Follow SoFi →

Get the weekly research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.

This analysis describes what SoFi's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

Recent Activity

This document changed recently

Medium Jul 14, 2026

The updated terms establish a time-limited referral promotion running through September 30, 2026, with new eligibility criteria for referrers. To qualify for the higher $75 bonus, referrers must maintain either $100 in combined Invest assets or an eligible direct deposit at the time the referred recipient enrolls. Referrers who do not meet these criteria will receive a lower $50 bonus. The terms also restrict bonuses to new Self-Directed Account openings only, excluding Automated Invest and IRA accounts from referral rewards. Referrals must be completed within the promotion period or they become ineligible. You should verify your account meets the stated asset or direct deposit requirements if you intend to participate in the referral program before the September 30 deadline.

View change record →
Medium Jun 17, 2026

The updated terms establish new restrictions on how referrers can promote SoFi products and create additional obligations for anyone participating in the referral program. Referrers must now obtain express consent before sending promotional text messages in Washington State, cannot use mass email or commercial advertising to solicit referrals, and must clearly disclose their financial relationship to SoFi in any promotion. The revised terms prohibit making claims about product outcomes, interest rates, or approval odds unless directed to official SoFi webpages, and establish a $10,000 annual cap on cumulative referral and welcome bonuses. Tax reporting obligations now apply, with SoFi reporting bonuses as miscellaneous income to the IRS on Form 1099-MISC. You can review the specific promotional campaign rules for each referral link and ensure compliance with state and platform-specific disclosure requirements before promoting.

View change record →
Medium Jun 10, 2026

The updated terms establish a Privacy Preference Center that gives you control over which types of cookies and tracking technologies are used on SoFi's website. Previously, SoFi stated that if you did not make a selection, you agreed to use of pixels and tracking technologies shared with social media, advertising, and analytics partners. The revised language divides cookies into categories: Strictly Necessary Cookies (always active, required for site function), Functional Cookies, Performance Cookies, and Targeting Cookies. You can now reject all optional cookies using a 'Reject All' button, manage individual cookie categories, or accept all. The terms note that blocking certain cookies may reduce site functionality and available services. You can change your cookie preferences at any time through the Privacy Preference Center.

View change record →

Clause Stability Stable

0
Changes
3
Months Monitored
Jul 10, 2026
First Seen
Jul 10, 2026
Last Seen
This clause type exists across 4461 other provisions on other platforms.

How other platforms handle this

Glassdoor Medium

We employ physical, electronic, and managerial measures to safeguard the data we collect online. However, no company can fully eliminate security risks, so we cannot make guarantees about any part of our services.

Revolut Medium

we can't promise that this will always be the case or that the services will be without faults. We also rely on some third parties to provide services to you, which can sometimes disrupt our services.

Tinder Medium

TINDER ASSUMES NO RESPONSIBILITY FOR ANY CONTENT THAT YOU OR ANOTHER USER OR THIRD PARTY POSTS, SENDS, RECEIVES, AND/OR ACTS ON THROUGH OUR SERVICES, NOR DOES TINDER ASSUME ANY RESPONSIBILITY FOR THE IDENTITY, INTENTIONS...

See all platforms with this clause type →

Monitoring

SoFi has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Follow SoFi → Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
SoFi may send you a two-factor authentication code messages. This is intended to support your secure access but is not guaranteed to provide you account security.

Excerpt from SoFi's Terms of Service

Applicable regulations

FTC Act Section 5
United States Federal

Provision details

Document information
Document
SoFi Terms of Service
Entity
SoFi
Document last updated
March 14, 2026
Tracking information
First tracked
July 9, 2026
Last verified
July 9, 2026
Record ID
CA-P-024312
Document ID
CA-D-00105
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
ab5c11080bb78e87ead66b954636184a13f01c48bb6ccfd881844e0ecee7c465
Analysis generated
July 9, 2026 03:58 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: SoFi
Document: SoFi Terms of Service
Record ID: CA-P-024312
Captured: 2026-07-09 03:58:33 UTC
SHA-256: ab5c11080bb78e87…
URL: https://conductatlas.com/platform/sofi/sofi-terms-of-service/provision/CA-P-024312/two-factor-authentication-sms-not-guaranteed-secure/
Accessed: July 25, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Governance intelligence across arbitration, AI governance, data rights, indemnification, and retention

Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.

Frequently Asked Questions

What does SoFi's Two-factor authentication SMS not guaranteed secure clause do?

The clause states: “SoFi may send you a two-factor authentication code messages. This is intended to support your secure access but is not guaranteed to provide you account security.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 292 platforms. See the full comparison.

Is ConductAtlas affiliated with SoFi?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by SoFi.