Fraud & Risk
Knowledge-based Authentication Threat
Knowledge-based authentication, or KBA for short, was designed to help prove the identity of a user through familiarity of specific details, such as a person's mother's maiden name, first elementary school, or first pet's name. While well-intentioned, KBAs have a number of shortcomings, which Neustar details in this paper. The document also describes a technology called pre-answer authentication and looks at its advantages over KBAs.
Striking the Optimal Balance Between Risk Mitigation and a Frictionless Consumer Experience