Certificate Topics — Customer Protection Review — Guarding Accounts at the Counter (Year 1 Foundations)

School: Minister Destiny Testimony Schools Track: Adult Class: Certificate Topics — Year 1 (Foundations) · Home: Schools — Adult track Certificate behind this topic: "Customer Protection Review (CPR)" — metroPCS / T-Mobile, earned by Minister Destiny Marie Morgan (May 30, 2018) Presented by: Minister Destiny Marie Morgan, Muslim Ordained Minister

This lesson is educational information from Minister Destiny Testimony Schools. It teaches the public body of knowledge in this subject — the same ground Minister Destiny studied for her certificate — in this school's own words. It is not the original course, it does not award the original credential, and it is not legal or medical advice. If you are in danger right now, call 911.

Before you start

• This school never asks your name. Your progress is saved only in your own browser on this device — the school collects and keeps nothing. If you pass this unit's quiz (80% or higher, retakes allowed), you earn a downloadable certificate with a blank line — you write your own name on it after you save it. Quiz answers are not shown; if you miss a question, re-read the lesson and try again.
• In this 2018 certificate, CPR meant Customer Protection Review — the retail discipline of verifying identity before touching an account. This unit teaches that discipline at a general level: awareness of account-takeover and SIM-swap warning signs, never fraud techniques, and the habits that make the associate who slows down the customer's best protection.
• This is a workplace certificate from 2018 wireless retail training. This unit teaches only the general, transferable skill behind it — never any company's scripts, current offers, internal processes, plan tables, or proprietary material. Brand names appear only in the certificate line above and as history.

The lesson

Part 1. Why account protection exists — what takeover does to a person

A mobile account is a master key. Whoever controls a phone number receives the password-reset codes and authentication texts that guard email, banking, and social accounts. An account takeover — a line moved to a SIM someone else controls, a number ported away, account details changed by an impersonator — can therefore empty a bank account within hours, lock a person out of their own digital life, and take weeks of phone calls to undo. The Federal Trade Commission's public guidance on SIM-swap scams describes exactly this chain, and the harm lands on the customer, not the store.

That is why the checks at the counter exist. Identity verification is sometimes framed as friction or as distrust of the person standing there. Reframe it correctly: the checks protect the account holder — who may be a different person from the one standing there, and who is counting on the associate to be the locked door. Every verification skipped for speed is a door opened for whoever asks next.

Part 2. Identity verification at the counter — the general steps

Verification follows the employer's current policy, and the general shape is consistent across responsible retailers. Confirm the person's identity with the required photo identification, checked as a genuine document belonging to the person presenting it. Confirm the person's relationship to the account: the account holder, or a user the account holder has authorised, with the authorisation actually present in the account record — not asserted in conversation. Use the account's own security credentials, such as its PIN or passcode, through the proper system prompts, with the customer entering secrets themselves.

Details are never improvised downward. If a required element is missing — no identification, a name that does not match, an authorisation that cannot be found — the transaction does not proceed on the strength of a story, however convincing. The associate explains what is missing, what the customer can bring or do to complete it, and what safe alternatives exist today, such as the account holder adding an authorised user through a verified channel. Policy is not the associate's enemy in that moment; it is the script that keeps the refusal impersonal and fair.

Part 3. Authorised users and permissions — who may do what

Accounts have circles of permission. The account holder can do everything. Authorised users, added by the holder, can do some things — often purchases and plan changes up to limits the holder or policy sets — and some sensitive actions, such as moving a number to a new SIM, changing the account PIN, or porting a line out, are commonly reserved to the holder or require the strongest verification the policy provides. Knowing which actions sit in which circle is core counter knowledge.

Treat permission questions literally. 'My partner pays this bill' describes a habit, not an authorisation. 'The account holder is outside, in the car' is a reason to invite the holder in, not to proceed. A screenshot of a text saying 'it's fine' is not a record in the account. When the record and the request disagree, the record governs until the account holder, properly verified, changes it — and that rule, applied to everyone equally, is what fairness looks like in account protection.

Part 4. Social engineering in person — the attempts that walk into stores

Social engineering is manipulation aimed at people rather than systems, and stores meet its in-person forms regularly. The patterns at awareness level are few and recognisable: urgency ('my flight leaves in an hour, please skip the ID'); a borrowed or 'found' phone presented as proof of account ownership; a friendly, detailed story that answers questions you have not asked; flattery and name-dropping of staff; a companion who pressures from the side; and visits timed for the busiest hour, when slowing down feels hardest. None of these proves bad intent — genuine customers are also hurried and flustered — which is why the defense is not suspicion but consistency.

The same verification, done calmly for everyone, defeats the technique without accusing anyone. Stories do not change steps. Possession of a phone proves possession of a phone, not ownership of the account it is on — indeed a phone in a stranger's hand can be the very thing that was taken. The associate who says 'I do this for every account, including my own family's' makes the check a compliment to the account's value rather than a judgement of the person requesting.

Part 5. SIM-swap and takeover warning signs — awareness level

Certain requests carry higher stakes and deserve heightened care under policy, because they are the levers of takeover: replacing a SIM or moving a line to a new device at a customer's claim that the original was lost, changing the account's contact details or security credentials, and porting a number to another carrier. Warning signs at awareness level include a requester who cannot pass ordinary verification yet presses for exactly these actions, inconsistencies between the story and the account record, and recent security changes on the account that the person in store cannot explain.

Awareness also serves genuine victims. A customer whose phone abruptly lost service, who is receiving password-reset messages they did not request, or who has been told a change was made that they never authorised may be mid-takeover; the FTC's guidance urges immediate action — regaining control of the number, then securing email and financial accounts. The associate's role is to follow the employer's fraud process swiftly, escalate through the proper channel, and treat the customer's panic as the reasonable response it is. This unit teaches recognition and escalation — never how such frauds are performed.

Part 6. Refusing politely, escalating, and privacy at the counter

Refusal is a skill with a shape: name the missing requirement, not a suspicion; offer the path to complete it; and offer what can safely be done today. 'I can't make account changes without the account holder's ID — if they can come in or add you as an authorised user through their verified login, I can do this in two minutes' protects the account, the customer relationship, and the associate all at once. If pressure escalates — raised voices, threats, attempts to involve other customers — follow the store's safety and escalation process rather than trading steps for quiet. No transaction is worth an unsafe counter.

Privacy at the counter is protection's quieter half. Keep account screens angled away from the queue, never read balances, addresses, or other customers' details aloud, have customers type their own PINs and codes, and do not repeat a full account number where it can be overheard. A takeover can begin from information casually displayed in public. Guarding accounts at the counter means guarding information at the counter — the two are the same job.

Words to know — Customer Protection Review — Guarding Accounts at the Counter

• Account takeover — An unauthorised person gaining control of an account or line — for example moving a number to a SIM they control — to intercept codes and reset other accounts.
• SIM swap — Moving a phone number to a different SIM; legitimate after loss or damage, and a central lever of takeover when done by an impersonator.
• Identity verification — Checking, under policy, that the person requesting action is who they claim and is authorised on the account.
• Authorised user — A person the account holder has added to the account record with defined permissions; more than a verbal claim.
• Social engineering — Manipulating people — through urgency, stories, or pressure — into bypassing security steps.
• Porting — Transferring a phone number from one carrier to another.
• Escalation — Passing a suspicious or blocked request to a manager or fraud channel through the employer's process.
• Account PIN / passcode — A secret credential protecting account changes, entered by the customer themselves, never spoken aloud or shared.
• Master key risk — The way control of a phone number can unlock email and financial accounts that send reset and authentication codes to it.

Myths vs facts — Customer Protection Review — Guarding Accounts at the Counter

• Myth: Verification is an insult to honest customers. Fact: Applied to everyone, it is the service: the account holder is protected precisely because every requester is checked the same way.
• Myth: Holding the account's phone proves the account is yours. Fact: Possession proves possession; a phone can be lost, borrowed, or taken — which is why verification uses ID, authorisation records, and account credentials.
• Myth: A convincing, detailed story can substitute for a missing ID. Fact: Stories never replace required elements; they are the classic social-engineering instrument, and genuine emergencies have verified paths too.
• Myth: Only online accounts face takeover risk. Fact: Takeover levers — SIM changes, credential changes, ports — are pulled in stores and by phone as well as online; the counter is a front line.
• Myth: Slowing down a suspicious request accuses the customer. Fact: Naming the missing requirement and the path to complete it refuses the transaction, not the person — and policy applied evenly is fair to all.

Think it through — Customer Protection Review — Guarding Accounts at the Counter

At the busiest hour, a person presents a phone on an account and asks to move the line to a new SIM, saying they lost the original phone — this one, they explain, is borrowed from a friend. They have no photo ID, the name they give does not match the account holder's, but the story is detailed, friendly, and urgent: a child is waiting to be collected and this number is the only contact.

Walk it through: (1) Hold the frame from Part 1: moving a line to a new SIM is a master-key action; the harm of a wrongful swap falls on the account holder, who is not here. (2) Apply the verification steps as written (Part 2): required ID is missing and authorisation cannot be established — a detailed story, however sympathetic, is not a substitute element. (3) Notice the social-engineering pattern without accusing (Part 4): urgency, a borrowed phone offered as proof, busiest-hour timing; the defense is consistency, not judgement. (4) Recognise the high-stakes action class (Part 5): SIM moves get heightened care under policy, exactly because they are takeover levers. (5) Refuse in the proper shape (Part 6): name the missing requirement, give the path — account holder with ID, or the holder adding authorisation through a verified channel — offer safe help that needs no account access, and escalate if pressure rises.

Try this — Customer Protection Review — Guarding Accounts at the Counter

• ☐ Write the general verification sequence from memory: ID, relationship to the account, account credentials entered by the customer
• ☐ List three actions that belong in the highest-care circle at the counter, and why
• ☐ Practice the refusal sentence: missing requirement, path to complete it, safe help available today
• ☐ Audit your own counter habits: screen angle, speaking details aloud, who types PINs
• ☐ Read the FTC's public SIM-swap guidance and note the first three steps it urges on victims

Resources to keep — Customer Protection Review — Guarding Accounts at the Counter

• Federal Trade Commission — SIM Swap Scams: How to Protect Yourself (consumer.ftc.gov) — The FTC's public guidance on SIM-swap warning signs and the immediate steps victims should take.
• Federal Communications Commission (fcc.gov) — Consumer information on SIM swapping, port-out fraud, and carrier authentication rules.
• IdentityTheft.gov (identitytheft.gov) — The federal recovery site for people whose accounts or identity have been taken over.
• Cybersecurity and Infrastructure Security Agency (cisa.gov) — Public guidance on social engineering and protecting accounts.

What you earned / what's next — Customer Protection Review — Guarding Accounts at the Counter

✅ Customer Protection Review — Guarding Accounts at the Counter complete (quiz score 80% or higher): You can explain why a mobile account is a master key, perform counter verification in its general steps, tell an authorised user from a convincing story, recognise in-person social-engineering patterns and SIM-swap warning signs at awareness level, and refuse or escalate politely while keeping account information private at the counter.

Your certificate

Minister Destiny Testimony Schools Certificate of Completion — Customer Protection Review — Guarding Accounts at the Counter

This certificate is presented by Muslim Ordained Minister Destiny Marie Morgan

Awarded to: ______________________________ (write your name here after you download — your name is never collected or stored by this school)

Date completed: ______________

Congratulations. You learned to be the locked door — calm, even-handed, and unhurried exactly when someone wants you hurried. Every account you protect is a person's whole digital life kept safe. — Minister Destiny Marie Morgan

This is a certificate of educational completion from Minister Destiny Testimony Schools. It is not a state license, a government certification, or the original course credential.

What's next: Return to the Certificate Topics for your next Year 1 Foundations topic.

Sources

• SIM Swap Scams — How to Protect Yourself — Federal Trade Commission (consumer.ftc.gov) — Takeover harm chain and victim response steps.
• FCC consumer and rulemaking materials on SIM swap and port-out fraud — Federal Communications Commission (fcc.gov) — Carrier authentication duties and consumer warnings.
• IdentityTheft.gov recovery plans — Federal Trade Commission (identitytheft.gov) — Steps after an account or identity takeover.
• CISA social-engineering awareness materials — Cybersecurity and Infrastructure Security Agency (cisa.gov) — Manipulation patterns and verification habits.

Your Progress — On Your Device Only — Customer Protection Review — Guarding Accounts at the Counter

• Learning outcomes: On completing this unit, the student can:
• explain the master-key risk: how control of a phone number endangers email and financial accounts
• state the general verification sequence: genuine ID, relationship to the account from the record, credentials entered by the customer
• distinguish account-holder actions from authorised-user permissions and treat verbal claims as non-authorisation
• recognise in-person social-engineering patterns — urgency, borrowed-device proof, timed pressure — without accusing individuals
• identify SIM-swap and takeover warning signs at awareness level and the swift, proper response for possible victims
• refuse in the correct shape — missing requirement, path to complete it, safe help today — and keep screens, speech, and PIN entry private at the counter
• Study time: Approximately 1 hour — an estimate covering reading, activities, and the test. Students move at their own pace.
• Assessment: A 10-question test drawn only from this unit's lesson. 80% or higher passes and earns the unit certificate. Answers are not shown; your score is saved only in your own browser on this device, and retakes are allowed.
• Level: Certificate Topics — Year 1 (Foundations) · Adult school · working rank on completion path: Freshman → Sophomore.
• Version: Version 1.0 — October 2026.

Minister Destiny Testimony Schools — Adult. Educational information only. Help lines: 911 for emergencies · 988 Suicide & Crisis Lifeline (call/text 988).