夜雨聆风If you’re financially pressed (adj 时间/资金紧缺的), confused about money, or just want a little free help figuring out how to improve your cash flow, you may be tempted to use AI. But you should know how to protect yourself before chatting about your finances with any AI tool (eg, ChatGPT, Copilot, Gemini, or Claude) so you don’t allow your sensitive personal information to be inadvertently (adv 无意地) exposed to others, including some who might use it to harm you. Also, you can’t count on AI to instruct you to protect your privacy – although depending on the wording of your prompt, it might.
如果你手头拮据、对财务感到困惑，或者只是想免费获得一些改善现金流的建议，你可能会忍不住想用AI。但在与任何AI工具（如ChatGPT、Copilot、Gemini或Claude）讨论你的财务状况之前，你应该了解如何保护自己，以免无意中向他人（包括一些可能利用这些信息伤害你的人）暴露你的敏感个人信息。此外，你不能指望AI会主动提醒你保护隐私——尽管根据你提示词的措辞，它可能会这样做。
For instance, earlier this month the popular podcaster and author Mel Robbins encouraged her followers on Instagram to tryAI – and specifically Microsoft Copilot – to help them get control over their money. (In her video caption, she said she’d partnered with Microsoft Copilot.) In the comments section to her post, Robbins offered a suggested prompt to use, which included the sentence: “I’ll share documents like bank statements, debt statements, bills, and income info when you ask.” Neither her post nor her prompt included recommendations to redact (n 编写) sensitive information. (More on why you should do that below.)
例如，本月早些时候，知名播客主持人和作家梅尔·罗宾斯（Mel Robbins）在Instagram上鼓励她的粉丝尝试AI——特别是微软Copilot——来帮助她们掌控自己的财务状况。（她在视频字幕中表示，她与微软Copilot有合作关系。）在她帖子的评论区，罗宾斯提供了一个建议的提示词，其中包含这样一句话："当你要求时，我会分享银行交易、债务信息、账单和收入信息等。"她的帖子和提示词都没有建议去除敏感信息。（下面会详细说明为什么你应该这样做。）
A spokesperson for Robbins’ office said in an email that Copilot offered privacy warnings once a person put in Robbins’ exact prompt and shared the text of the replies they got when doing so. But when CNN used Robbins’ prompt in the free version of Copilot it got slightly different replies and nothing like the privacy warning the spokesperson had shared. (When asked why, a Microsoft spokesperson said “responses will vary even when the questions are the same or similar. Copilot, like other conversational AI assistants, adapts to the flow of the conversation, tone, and context.”)
罗宾斯办公室的一位发言人在邮件中表示，一旦有人输入罗宾斯的提示词，Copilot就会提供隐私警告，并分享了她们这样做时收到的回复文本。但当CNN在免费版Copilot中使用罗宾斯的提示词时，得到的回复略有不同，完全没有出现发言人分享的那种隐私警告。（当被问及原因时，一位微软发言人表示："即使问题相同或相似，回复也会有所不同。Copilot与其他对话式AI助手一样，会根据对话的流畅性、语气和语境进行调整。"）
In response to many followers’ criticisms of her original prompt, Robbins last Friday acknowledged their concerns and thanked them for the feedback in the comments section. She also amended her suggested prompt by replacing the sentence about uploading financial statements with this one: “Always remind me to remove personal information.”
针对许多粉丝对她原始提示词的批评，罗宾斯上周五在评论区承认了她们的担忧并感谢了反馈。她还修改了她的建议提示词，将关于上传财务文件的那句话替换为这句："始终提醒我要删除个人信息。"
Better prompt, better replies.That made a huge difference. When CNN used Robbins’ amended prompt, every Copilot reply during the exchange included privacy warnings, with the first being the most extensive: “First, a quick safety thing: Please don’t share any personal information like your full name, account numbers, addresses, employer details, or anything that could identify you. If you copy numbers from a statement, remove names, account IDs, and exact dates.”
更好的提示词，更好的回复。这产生了巨大的影响。当CNN使用罗宾斯修改后的提示词时，整个交流过程中每次Copilot的回复都包含了隐私警告，第一条最为详尽："首先，快速提醒一个安全事项：请不要分享任何个人信息，如你的全名、账户号码、地址、雇主信息或任何可能识别你身份的信息。如果你从对账单中复制数字，请删除姓名、账户ID和确切日期。"
What to know. Indeed, your bank statement, W-2, tax return, credit card statement and other financial documents can reveal those items and more, including your phone number, email, income, debts, bank routing numbers, employee ID number, taxpayer ID number and Social Security number. Uploading unredacted information like that carries several risks. “There’s a chance it could be hacked, leaked or breached,” said Rachel Tobac, CEO of SocialProof Security, a “friendly” hacker company.
事实上，你的银行对账单、W-2表、纳税申报表、信用卡对账单和其他财务文件也会泄露这些信息以及更多内容，包括你的电话号码、电子邮件、收入、债务、银行路由号码、员工ID号码、纳税人ID号码和社会安全号码。上传未删减的信息会带来多种风险。"这些信息有可能被黑客攻击、泄露或遭到入侵，"社会证据安全公司（SocialProof Security，一家"友好"的黑客公司的首席执行官雷切尔·托巴克（Rachel Tobac）说。
Should that happen, you’re at risk for identity theft, account takeover or someone draining your bank account, according to Tobac, who has lent her expertise to teams working on security, privacy and abuse prevention at most of the major AI providers. Put differently, “The privacy risk comes from the fact that AI memorizes stuff,” said Gang Wang,an associate computer science professor at the University of Illinois’ Grainger College of Engineering.
如果发生这种情况，你面临身份盗窃、账户接管或有人掏空你银行账户的风险，托巴克说，她曾为大多数主要AI公司的安全、隐私和滥用预防团队提供专业支持。换句话说，"隐私风险来自AI会记住东西这一事实，"伊利诺伊大学格兰杰工程学院计算机科学副教授王刚（Gang Wang）说。
For instance, he said, “If your documents are part of AI’s training data – there is a risk that information will be induced by a special prompt that malicious actors might use.” Or, say an AI tool accidentally leaks your credit card statement, Tobac said. “An attacker could craft a phishing message from any of the hundreds of merchants you’ve made purchases from, and it would be believable because they would know the date of your purchase, the merchant’s name and the amount paid.”
例如，他说，"如果你的文件是AI训练数据的一部分——就存在信息被恶意行为者可能使用的特殊提示词诱导出来的风险。"或者，假设一个AI工具意外泄露了你的信用卡对账单，托巴克说。"攻击者可以从你购物过的数百家商户中的任何一家制作钓鱼信息，而且会非常可信，因为他们会知道你的购买日期、商户名称和支付金额。"
How to protect yourself.Before asking for free money advice from any AI program:
Check the tool’s latest privacy and data retention policies: They can change frequently, so don’t just ask the AI tool what they are, since it may have been trained on outdated versions, Wang said. If you’re using a paid (or enterprise) version of any AI program, you’ll likely have somewhat greater protections than you do using the free option, but to what degree will depend on the version you’re using, he said. Copilot users, for instance, may choose “which types of information it remembers about you. Users can also opt out (退出) entirely,” a Microsoft spokesperson said in an emailed statement. “Consumers can ask Copilot to remember, update, or delete specific facts at any time.” (More on its privacy controls.)
在向任何AI程序寻求免费理财建议之前：如何保护自己。
查看该工具最新的隐私和数据保留政策： 这些政策可能会频繁更改，所以不要只是问AI工具它们是什么，因为它可能是基于过时的版本训练的。如果你使用的是任何AI程序的付费（或企业）版本，你可能会比使用免费版本获得更多保护，但保护程度取决于你使用的版本，他说。例如，Copilot用户可以选择"它记住关于你的哪些类型的信息。用户也可以完全选择退出，"一位微软发言人在邮件声明中说。"消费者可以随时要求Copilot记住、更新或删除特定事实。"（更多关于其隐私控制的信息。）
Opt out of letting AI train on your data: You have to explicitly tell the maker of the tool that you don’t want the model training on your information, Wang said. Figuring out where you can formally opt out usually isn’t made obvious, he noted, so you’ll need to do some searching.
选择不让AI用你的数据进行训练： 你必须明确告诉工具的制造商，你不希望模型用你的信息进行训练。他指出，弄清楚在哪里可以正式选择退出通常并不明显，你可以进行一些搜索。
Sanitize any information you share: If you upload any financial statements or bills, heavily redact all personal identifying information and the specifics of transactions such as stores, locations and dates. Or, better yet, don’t upload statements and just include in your prompt a list of anonymous, broad categories of expenses and estimates of what you spend monthly (e.g., housing $2,500; credit cards $1,000; transportation, $200; food $750, etc.).
清洗分享的任何信息： 如果你上传任何财务对账单或账单，请务必去除所有个人身份信息以及交易细节，如商店、地点和日期。或者，更好的做法是，不要上传对账单，只在提示词中包含一份匿名、宽泛的支出类别清单和每月支出的估算（例如：住房2,500美元；信用卡1,000美元；交通200美元；食品750美元，等等）。
Do a gut check: Wang suggests asking, “Whatever I tell AI, AI may be able to tell other people. Do I care?”
直觉检查： 建议问自己："我告诉AI的任何东西，AI都可能告诉其他人。我在乎吗？"
And follow your intuition, Tobac said. If something doesn’t feel right, she cautioned, don’t do it. “People are trusting AI tools like they’re a trusted fiduciary,” she said. “Your trusted fiduciary is required to work in your best financial interest, whereas a large, cloud-based AI service provider is often creating their policies based on their own best interest (and not yours).”
并跟随你的直觉，托巴克说。如果感觉不对，她警告说，就不要做。"人们信任AI工具，就像信任一个受信赖的受托人一样，"她说。"你受信赖的受托人有义务为你的最佳财务利益工作，而大型基于云的AI服务提供商通常是根据他们自己的最佳利益（而不是你的）来制定政策的。"
