This week, I learned that Chase has introduced voice ID for my account, meaning when I call them, they will match my voice with their stored information, and allow phone access to my account based on a match, instead of asking 'security' questions.
This actually makes me very nervous - my job requires me to be in meetings all day, most of them get recorded, and a large number of people have access to these recordings. I think half of today's 6th-graders can use software to cut those recordings in words or phrases, and make my voice say different sentences. Then they call the call center, and there goes my money.
The bank will of course decline any liability, as they have a recording where I (no, my voice!) ordered those transfers.
What protects customers from this seemingly simple attack vector?
Should I change banks?