In the context of FACTA, which best defines red flags?

• A. Routine customer welcome emails
• B. Regular software updates
• C. Payment confirmations
• D. Warning signs indicating possible identity theft or fraud

Answer: (D)

Red flags are warning signs indicating possible identity theft or fraud. In FACTA, institutions must have an identity theft prevention program that detects and responds to these signs, so staff know when to verify a transaction or seek additional information before proceeding.

That’s why the best definition is warning signs indicating possible identity theft or fraud: it captures the purpose of red flags as indicators that something suspicious is happening with a person’s information or accounts, prompting appropriate preventive actions.

Routine welcome emails, regular software updates, and payment confirmations are normal, expected communications or confirmations and do not signal fraud or identity theft.