Pogo's security setup and what it means for your bank
Pogo uses Plaid, a third-party service, to connect to your bank account. Plaid does not store your login credentials — it acts as a bridge between Pogo and your bank, similar to how apps like Venmo or PayPal connect to checking accounts. Your actual username and password stay with your bank, not with Pogo or Plaid.
Pogo itself is operated by Jackpocket, a licensed lottery ticket reseller. The company holds a money transmitter license in most states where it operates, which means it has undergone background checks and compliance review. That said, linking any third-party app to your bank account carries some risk — not because Pogo is uniquely unsafe, but because any connection point is a potential vulnerability.
The real question is not whether Pogo is safe in an absolute sense, but whether the risk is worth it for what you get. Pogo charges transaction fees (typically $1 to $3 per lottery ticket purchase) and takes a cut of any winnings. You are paying for convenience, not for security you would not have elsewhere.
Key Takeaways
- Pogo uses Plaid to connect to your bank, which means your login credentials do not go to Pogo — they stay encrypted at your bank.
- Pogo holds a money transmitter license in most states, which requires regulatory oversight, but a license does not eliminate all risk.
- You can revoke Pogo's access to your bank account at any time through your bank's app or website, under connected apps or third-party access.
- Pogo charges per-transaction fees and takes a percentage of winnings, so the convenience comes at a cost.
- If fraud occurs on your account, your bank's fraud protection applies regardless of whether Pogo or a scammer caused it.
How Plaid protects your login information
When you link your bank account through Plaid, you enter your credentials on Plaid's secure server, not on Pogo's. Plaid encrypts that information and uses it only to authenticate you with your bank — it does not store your password. After the connection is made, Pogo receives only the data you authorize: transaction history, account balance, and the ability to initiate transfers.
This is different from giving Pogo your login directly, which would be unsafe. With Plaid, your bank sees the connection as coming from Plaid (a known partner), not from an unknown app. If your bank detects suspicious activity on the Plaid connection, it can block it immediately.
That said, Plaid has had security incidents in the past. In 2020, Plaid disclosed that some user data was accessed without authorization. The company patched the vulnerability, but the incident showed that no third-party service is risk-free. The question is whether the risk is acceptable to you.
What happens if fraud occurs after you link Pogo
If someone fraudulently transfers money from your account after you have linked Pogo, your bank's fraud protection applies. Under the Electronic Funds Transfer Act (EFTA), you are liable for unauthorized transfers only if you were negligent — for example, if you wrote your PIN on a sticky note. If you did not authorize the transfer and did not share your credentials, your bank must refund it within a set timeframe (usually 10 business days for investigation, up to 45 days in some cases).
The catch: you have to report the fraud to your bank promptly. Most banks require you to report within 30 to 60 days of receiving your statement. If you wait longer, your liability may increase. Pogo itself is not responsible for bank fraud — your bank is.
If Pogo itself mishandles your money (for example, if it fails to send a lottery ticket payment to the state lottery), that is a different issue. Pogo would be liable, but you would have to pursue a claim through customer service or small claims court. Check Pogo's terms of service to see what recourse you have.
How to revoke Pogo's access if you change your mind
You can disconnect Pogo from your bank account in two ways. The first is through Pogo's app or website — most apps have a settings menu where you can disconnect your bank. The second is through your bank's app or website, under a section called "Connected Apps," "Third-Party Access," "Authorized Services," or similar (the exact name varies by bank).
Revoking access through your bank is more reliable because it cuts off Pogo immediately, even if Pogo's system is slow to update. After you revoke access, Pogo cannot initiate new transfers, but any pending transactions may still go through. Check your bank account for a few days to make sure no unexpected charges appear.
If you revoke access and Pogo continues to charge you, report it to your bank as an unauthorized transaction. Your bank can dispute the charge and refund you.
Comparing Pogo to other ways to buy lottery tickets
Pogo is one of several apps that let you buy lottery tickets without visiting a retailer. Jackpocket (Pogo's parent company) also operates under its own brand in some states. Lottery.com and theLotter are other options, though availability varies by state.
The trade-off with any app is convenience versus cost and risk. Buying a ticket in person at a store costs nothing extra — you pay the ticket price only. Buying through an app adds a fee (usually $1 to $3 per ticket) and requires you to link a bank account or payment method. The app also takes a percentage of any winnings (typically 5% to 8%), which a retail ticket does not.
If you are uncomfortable linking your bank account to any app, buying in person eliminates that risk entirely. If convenience matters more to you than the extra cost, an app is a reasonable choice — just make sure you understand the fees before you start.
Red flags that suggest an app is not safe
Before you link your bank account to any app, check for these warning signs. The app should have a clear privacy policy that explains what data it collects and how it uses it. It should ask for your permission before accessing your bank account, and it should use Plaid or a similar established service (not ask for your login directly). The company should have a physical address, customer service contact, and a license number you can verify.
Be wary of apps that ask for your full login credentials, promise may provide winnings, or claim to have a secret system for picking numbers. Legitimate lottery apps do not do any of these things. If an app is not available in your state's app store, that is often a sign it has not passed regulatory review.
Pogo meets these basic standards — it uses Plaid, holds a license, and has customer service. That does not mean it is risk-free, but it means it has passed a higher bar than a random app you find online.
Frequently Asked Questions
Can Pogo see my full bank account balance and transaction history?
Yes, Pogo can see your balance and recent transactions because that is what you authorize when you connect. Pogo uses this information to verify you have sufficient funds and to comply with anti-money-laundering rules. You can limit what Pogo sees by revoking access at any time.
What if Pogo gets hacked?
If Pogo's servers are compromised, hackers could potentially access the data Pogo holds about you — your name, address, phone number, and transaction history. However, they would not get your bank login credentials because Pogo does not store those. Your bank account itself would not be automatically compromised. You would still want to monitor your account and report any unauthorized charges to your bank.
Do I have to use Pogo, or can I buy lottery tickets another way?
You can buy lottery tickets in person at any authorized retailer, or through your state's official lottery website or app (if available). Pogo is optional and exists only for convenience. If you prefer not to link your bank account to a third-party app, buying in person is always an option.
Is Pogo regulated by the government?
Pogo operates under Jackpocket, which holds a money transmitter license in most states where it operates. This means it has undergone background checks and compliance review. However, a license does not mean the government guarantees your money or oversees every transaction — it means the company has met minimum standards to operate legally.
What fees does Pogo charge?
Pogo charges a per-ticket fee (typically $1 to $3) and takes a percentage of any winnings (usually 5% to 8%). These fees are in addition to the cost of the lottery ticket itself. Check Pogo's current fee schedule before you link your account, as fees can change.