EU Financial Institutions Leak Data Through Cookie Trackers

Jscrambler research found that at least 14 financial institutions in Europe and the US transmit customer personal and financial data (including emails, phone numbers, tax IDs, and loan details) to third-party trackers (Google, Meta, TikTok, Salesforce, etc.) via pixels and tags — sometimes before consent is obtained or despite users rejecting cookies. Data was occasionally sent unhashed or only encoded, and default platform behaviors (like automatic advanced matching) caused sensitive information from mortgage and account-opening pages to be forwarded to vendors the banks did not list, raising privacy, security, and regulatory compliance concerns under GDPR, DORA, ePrivacy, and PSD2.