Lesson 9 of 10
Account security and monitoring
Prevention and prompt detection work together.
The idea
Use a unique password for a financial account and enable the provider’s available multifactor authentication. Account alerts and regular statement reviews help identify activity you did not authorize.
Secure the email account used for password recovery as well. A financial account can be exposed through a compromised recovery channel even when its own password is strong. Follow the institution’s official instructions for account protections and recovery.
Worked example
Practice scenario: A notice says a new withdrawal destination was added. You did not make the change. Open the provider’s known app or type its known address, review the activity, and contact the institution through a verified channel. Do not use a phone number from the unexpected notice to establish its legitimacy.
| Control | What to check |
|---|---|
| Unique password | Not reused on another service |
| Multifactor authentication | Enabled through the provider |
| Alerts | Changes and transactions monitored |
| Recovery email | Secured and accessible |
| Review routine | Statements and access activity checked |
A common mistake
Setting up protections once and ignoring all future account alerts.
Try it yourself
Make a security checklist for a fictional account. Include one preventive control, one detection control, and one independently verified contact method. Do not record a real password.
Show the worked answer
One valid answer: unique password with multifactor authentication; alerts for account changes; the contact number from the provider’s known website.