1. Login Attempt:
- New IP address (e.g., Brooklyn, NY via residential proxy)
- No prior device trust
→ Triggers step-up authentication
2. Step-Up Verification:
- SMS code sent to registered phone
- Push notification to mobile banking app
- Voice call verification
→ Without control of these channels, access fails
3. Post-Login Behavior:
- User checks balance → normal
- Attempts large transfer → high-risk event
→ System may freeze account, require customer service callback
4. Withdrawal Attempt:
- Zelle, wire transfer, or ACH initiated
- Destination account analyzed
- If flagged as high risk → transaction blocked