Section 1. Short title
This Act may be cited as the VA Call Center Multi-Factor Authentication Act.
Section 2. Multi-factor authentication required to verify the identity of callers to Veterans Affairs call centers in connection with high-impact veteran or beneficiary actions
Section 5722(b)(3) of title 38, United States Code, is amended by adding at the end the following: Such controls shall include the use of multi-factor authentication by Department call centers in connection with high-impact veteran or beneficiary actions to verify the identity of the caller and confirm that the participation of the caller in connection with the action is in fact appropriate. As used in the preceding sentence, an action is high-impact if an impersonator could cause real, durable harm to the veteran or beneficiary, such as by diverting funds, manipulating access to accounts, or disclosing sensitive information..