Abstract: The present disclosure relates to systems and methods for notifying a user of attempts to provide masked credentials associated with the user to a third party, and for providing the user with an opportunity to approve or deny the attempt. The third party can be a website having a form field that receives the masked credential. The masked credential can include a telephone number, an email address, a mail address, a user name, a password, and funding account information (e.g., credit card or bank account numbers). Attempts to provide the masked credential using a device can be detected by an application installed on the device, and the notification can be implemented through a push notification sent to one or more devices registered with the user. Users can respond to the push notification by indicating whether the attempt to provide the masked credential is approved or denied.