Account security and fraud awareness

Objective: Explain phishing and multifactor authentication, distinguish their meanings, and apply them to a described case.

Phishing: Phishing uses deceptive communications to obtain information or induce harmful actions. Multifactor authentication: Multifactor authentication requires distinct verification factors rather than a password alone. Financial accounts and payment systems have different functions, terms, protections, and risks. Compare providers' actual disclosures and independently verify their identity. Deposit insurance applies to eligible deposits under insurer and ownership rules, not every product sold by a financial institution. A suspicious message should not supply the only contact route used for verification. Payment disputes and fraud responses depend on the product and applicable procedures. Application: A fake bank message asks for a password. This most directly illustrates phishing. A login also requires a separate approved authentication step. This most directly illustrates multifactor authentication.

Objective: Explain one-time code and independent verification, distinguish their meanings, and apply them to a described case.

One-time code: A one-time code is a temporary authentication credential that should be protected. Independent verification: Verification uses a trusted contact route obtained independently of the suspicious message. Financial accounts and payment systems have different functions, terms, protections, and risks. Compare providers' actual disclosures and independently verify their identity. Deposit insurance applies to eligible deposits under insurer and ownership rules, not every product sold by a financial institution. A suspicious message should not supply the only contact route used for verification. Payment disputes and fraud responses depend on the product and applicable procedures. Application: An unexpected caller asks for a login verification code. This most directly illustrates one-time code. A user contacts the bank through a known official channel. This most directly illustrates independent verification.

Objective: Explain transaction alert and fraud response, distinguish their meanings, and apply them to a described case.

Transaction alert: An alert notifies an account holder about specified activity. Fraud response: A response documents suspected fraud and contacts appropriate providers promptly through verified routes. Financial accounts and payment systems have different functions, terms, protections, and risks. Compare providers' actual disclosures and independently verify their identity. Deposit insurance applies to eligible deposits under insurer and ownership rules, not every product sold by a financial institution. A suspicious message should not supply the only contact route used for verification. Payment disputes and fraud responses depend on the product and applicable procedures. Application: A notification prompts review of an unfamiliar purchase. This most directly illustrates transaction alert. A user reports an unauthorized transaction using the official process. This most directly illustrates fraud response.