In addition to the MFA controls, we are looking at beefing up our controls based on the trans. amt. & type. For example, for bill pay instructions over, say, $5000. we would verify with the customer the legitimacy of the amount before the pmt. is sent. Also, we will not accept wire instructions over the site; we would verify all the info with the customer.
Are you doing anything different and, if so, what controls do you have? Thanks!