Temu is not a secure place to enter your credit card details

Temu is a shopping app owned by a Chinese company called PDD Holdings. When you use your credit card on Temu, you are sending your card number, expiration date, and security code to a platform with a documented history of data breaches, weak security practices, and unclear data handling. Security researchers have found that Temu collects far more personal information than most shopping apps — including your location, device identifiers, and browsing behaviour — and sends much of it to servers in China, where US privacy laws do not apply.

The US government has raised formal concerns about Temu's data practices. In 2024, the Committee on Foreign Investment in the United States (CFIUS) began a national security review of the platform. Multiple states' attorneys general have warned consumers about using the app. None of this means your card will definitely be stolen, but it does mean the risk is higher than on mainstream retailers.

Key Takeaways

  • Temu has experienced multiple data breaches and collects more personal data than typical shopping apps, including location and device information sent to Chinese servers.
  • Using a credit card on Temu exposes your card number to a platform with weaker security standards than major retailers, increasing fraud risk.
  • If you do use a credit card on Temu, your card issuer's fraud protection covers unauthorized charges, but you will need to dispute them and may face temporary account holds.
  • Safer alternatives include using a virtual card number, a prepaid card with a low balance, or a digital wallet like Apple Pay or Google Pay if Temu accepts them.
  • If fraudulent charges appear after using Temu, contact your card issuer immediately — most require disputes within 60 days.

What happens to your card information when you enter it

When you type your credit card number into Temu, that information is encrypted in transit — meaning it is scrambled during the journey from your phone to Temu's servers. However, encryption in transit does not protect you if Temu's servers themselves are compromised, which has happened. In 2023, researchers found that Temu had stored user data in an unencrypted database that was publicly accessible online for months.

Temu also collects data far beyond what is needed to process your payment. The app requests permission to access your contacts, photos, clipboard, and location. Security audits have found that Temu transmits this data to servers in China, where it can be accessed by the Chinese government under that country's national security laws. Your credit card number itself may not leave US servers, but the broader profile Temu builds about you — combined with your card data — creates a more complete picture for potential fraud.

Your credit card's fraud protection still applies

If someone uses your Temu account or intercepts your card number and makes fraudulent charges, your credit card issuer's fraud protection covers you. Under the Fair Credit Billing Act, you are not liable for unauthorized charges if you report them within 60 days of the statement date. Most card issuers will reverse fraudulent charges and issue you a new card within one to two weeks.

However, fraud protection is a safety net, not a prevention tool. While your card issuer covers the money, you will still need to spend time disputing charges, your account may be temporarily frozen while the investigation happens, and you may face inconvenience if your card is cancelled and reissued. Preventing the fraud in the first place is simpler than recovering from it.

Lower-risk payment methods for Temu

If you want to use Temu but reduce your exposure, several payment methods carry less risk than entering your primary credit card:

  • Virtual card numbers: Many credit card issuers (American Express, Capital One, Citi, Chase, and others) offer virtual card numbers — temporary card numbers tied to your real account that work only for a single merchant or a set time period. If Temu's servers are breached, the stolen number is useless because it is already expired or locked to Temu only. Check your card issuer's app or website to see if this feature is available.
  • Prepaid cards: Load a prepaid card with only the amount you plan to spend on Temu. If the card number is stolen, the thief can only spend what is on the card. Prepaid cards are available at most grocery stores and drugstores for $5 to $10.
  • Digital wallets: If Temu accepts Apple Pay, Google Pay, or Samsung Pay, use those instead of entering your card directly. Digital wallets add an extra layer of encryption and do not share your actual card number with Temu.
  • PayPal or similar services: If Temu accepts PayPal, using it means Temu never sees your card number at all — PayPal handles the payment. This is one of the safest options available.

What to do if you see fraudulent charges

If you notice charges on your statement that you did not make, contact your card issuer immediately. You can usually do this by phone (the number is on the back of your card), through your online account, or through the issuer's app. Tell them which charges are fraudulent and when you last used your card legitimately.

Your issuer will open a dispute and typically reverse the charges within one to three business days while they investigate. You will receive a temporary credit to your account. The full investigation usually takes 30 to 60 days. Keep records of all communication with your issuer, including the date, time, and name of the person you spoke with. If the issuer denies your dispute, you can escalate it to your state's banking regulator or file a complaint with the Consumer Financial Protection Bureau (CFPB).

Why Temu's security record matters

Temu is not the only shopping app, and it has a weaker security track record than most major retailers. Amazon, Walmart, Target, and other mainstream platforms invest heavily in security infrastructure and comply with stricter US data protection standards. They are not perfect — no company is — but the baseline is higher. Temu's business model depends on collecting and monetizing user data, which creates an incentive structure that prioritizes data collection over data protection.

The US government's ongoing review of Temu reflects concern that the platform may pose a national security risk, not just a personal fraud risk. This does not mean you will definitely be harmed by using it, but it does mean the risk calculation is different from using a US-based retailer.

Frequently Asked Questions

Can I get my money back if Temu charges my card without permission?

Yes. Contact your card issuer within 60 days of the charge appearing on your statement. Your issuer will dispute the charge with Temu and reverse it while they investigate. You are protected under the Fair Credit Billing Act and are not liable for unauthorized charges.

Is it safer to use Temu on a computer instead of the app?

Slightly, because the web version collects less data than the mobile app. However, the core security issue — that Temu's servers have been breached and your card data is at higher risk — remains the same whether you use the app or the website.

What if Temu's website says my card was declined but I was still charged?

This sometimes happens when a payment processor fails to communicate properly with your card issuer. Contact your card issuer first to confirm the charge went through. If it did, ask them to dispute it. Then contact Temu's customer service to request a refund. Keep records of all communication.

Does using a VPN make Temu safer?

No. A VPN encrypts your internet traffic, but it does not change what data Temu collects or how securely Temu stores it. Once your card number reaches Temu's servers, a VPN no longer protects it.

Should I close my credit card after using it on Temu?

Only if fraudulent charges appear. Closing a card you have used for years can hurt your credit score because it reduces your available credit and shortens your credit history. If no fraud occurs, there is no reason to close the card. If fraud does occur, your issuer will typically cancel the card and issue a new one automatically.