Security Questions Were Built for People: Authenticating AI Agent Callers in Mortgage Servicing and Banking
Knowledge-based authentication assumes the caller is the customer or someone who stole from them. A personal agent is neither, and it may hold everything the security questions ask. What that does to servicing and bank contact centers, what Regulation E's definition of an unauthorized transfer does and does not settle, and an authentication design that works when the caller is software acting for a real customer.