A man called USAA Banking services pretending to be me. He did n't not know my user name, my USAA number or my phone password yet USAA " validated '' his identity by asking questions about my credit card, information he obviously already possessed. Once " validated '', USAA allowed him, over the phone, to change my on-line password, on-line pin, on-line security questions and my debit card ATM pin. To make matters worse, USAA " reminded '' him of my USAA number which now allowed him access to my on-line account and this allowed him to transfer {$4900.00} from my savings to my checking. To add insult to injury, USAA approved him to withdraw {$4500.00} in cash from an ATM machine ( he withdrew XXXX {$500.00} withdrawals ). The negligence involved here is criminal! USAA has no concept of security. As soon as this person did n't know my phone password he should have been hung up on! 
