by the cardholder through requirement of additional information such as account number, PIN, ZIP, challenge questions. There are five main factors to multi-factor authentication and they include: Knowledge - things a user knows such as passwords or answers to secret questions. Possession - an object the user should have in their possession such as the actual credit card. Inherence - a biological trait of the user such as finger-print or facial recognition. Location - where the user is at the time of the authentication - verify the user was the one to use the card. Time - when the authentication is taking place - is it a strange hour or multiple times? Multi possession-factor authentication, verifying that the account is being accessed by the cardholder through requirement of additional personal devices such as smart watch, smart phone challenge–response authentication Out-of-band Authentication, verifying that the transaction is being done by the cardholder through a "known" or "trusted" communication channel such as text message, phone call, or security token device Industry collaboration and information sharing about known fraudsters and emerging threat vectors Automated Data Controls: The use of automated data controls which are used to recognize when unusual activity or spending occur with a credit card. These controls can be used in real time to react "...to anything suspicious they come upon, so the flow of fraudulent activity is stopped as soon as possible..." (Johnston). The three main ways automated data controls protect information includes: Reconciliation and verification to ensure that the controls are working properly. Continuous monitoring and alerting which alerts the cardholder/bank when unusual activity is taking place. Reporting which ensures organizations have proper controls in place to prevent fraudulent activity By Banks and Financial Institutions Internal self-banking area for the customer to carry out the transactions regardless of the weather conditions. The access door: Identifies every cardholder that gains access to the designated area Increases protection for customers during self-service procedures Protects the ATMs and banking assets against unauthorized usage The protected area can also be monitored by the bank's CCTV system Cards use CHIP identification (ex PASSCHIP ) to decrease the possibility of card skimming By Governmental and Regulatory Bodies Enacting consumer protection laws related to card fraud Performing regular examinations and risk assessments of credit card issuers Publishing standards, guidance, and guidelines for protecting cardholder information and monitoring for fraudulent activity Regulation, such as that introduced in