WASHINGTON, October 14, 2026 – Chase today brought practical fraud and cybersecurity guidance to communities nationwide through a live event streamed to approximately 700 branches, helping individuals, families, students and small business owners recognize increasingly convincing AI-enabled scams and take immediate steps to protect themselves.
The event reflects Chase’s continued expansion of in-branch and digital education and builds on the firm’s longstanding work to help consumers navigate fraud and scams through education, awareness and community-based programming. Through its financial health initiatives, the firm has served more than 1 million customers and continues to host more than 1,000 fraud and scam prevention workshops annually across the country.
Hosted at JPMorganChase’s Mid-Atlantic Regional Headquarters in Washington, D.C., the event focused on three priorities:…
IT & DATA SECURITY (MITIGATING THE “INSIDER THREAT”)
As seen in the TD Bank case, an employee with too much “access” can sell your customer data to syndicates.
- Principle of Least Privilege (PoLP): Employees should only have access to the specific folders and databases required for their current task.
- Access Revocation: Have a “Termination Checklist” that ensures all digital access (Email, VPN, Banking) is revoked within 60 minutes of an employee resigning or being dismissed.
- System Logs & Audit Trails: Enable “Read/Write Logging” on your server. If a customer’s data is leaked, you need to know exactly which login accessed that record and at what time.
- Encryption at Rest: Ensure that sensitive files (like your customer ID numbers or payroll spreadsheets) are encrypted so that if a staff member copies them to a USB, they cannot be read.
