Sponsors (5)
The bill strengthens security and privacy for high-risk VA phone transactions by requiring multi-factor authentication, reducing fraud and data exposure, but it may create access barriers for vulnerable veterans, slow service if implemented poorly, and require added VA/taxpayer spending.
Veterans, beneficiaries, and VA staff will face lower rates of fraud, benefit or fund diversion, and impersonation because VA call centers must use multi-factor authentication for high-risk phone transactions, improving cybersecurity and reducing administrative burdens.
Veterans and people with disabilities will have a lower risk of sensitive personal information being disclosed during phone interactions because identity verification is required for high-impact requests.
Veterans, seniors, and people with disabilities who lack reliable access to phones, email, or authenticator apps may face delays or difficulty completing high-impact transactions by phone.
If MFA is poorly implemented, veterans may experience longer call times and more administrative complexity, slowing access to urgent assistance.
The VA and taxpayers will incur costs to implement MFA systems and train staff, which could require reallocation of resources or additional spending.
Based on analysis of 4 sections of legislative text.
Requires VA call centers to use multi-factor authentication to verify callers for high-impact actions that could cause real, durable harm.
Introduced February 25, 2026 by Barry Moore · Last progress February 25, 2026
Requires VA call centers to use multi-factor authentication (MFA) to verify caller identity and confirm authorization when handling “high-impact” veteran or beneficiary actions. "High-impact" is defined as actions where an impersonator could cause real, durable harm (examples: diverting funds, changing account access, or disclosing sensitive information). The bill amends federal law to add this MFA requirement for VA call centers. It does not specify funding or an effective date. Implementing MFA will likely require technical changes, staff training, and procedures for callers who cannot use standard MFA methods, while reducing certain types of fraud and unauthorized access.