Use the approved factors

List the exact identity factors required for the channel and request type. Do not substitute easy-to-find personal details when the approved control calls for stronger evidence.

Keep failed checks useful

Record what was requested, what was supplied, and what remains missing without copying unnecessary personal data into notes. A failed check should produce a safe next step, not a dead end.

Escalate exceptions

Manual overrides, suspected account takeover, and conflicting records belong to the security or account owner. The coordinator prepares facts and preserves the audit trail.