Which of the following is a red flag for identity theft?

• A. Bust-out activity
• B. Unusual IP Logins
• C. Account information inconsistent with third party verification tools
• D. Transactions inconsistent with expected customer profile

Answer: (B)

Unusual IP logins point most directly to identity theft because they reveal access from a device or location the legitimate user wouldn’t typically use. When an account is accessed from a new country, unusual times, or through a proxy/VPN, it suggests someone other than the true owner has credentials and is taking control. This kind of login anomaly is a classic early sign of account takeover.

Bust-out activity describes rapid, large‑sum movements aimed at laundering funds, which is more about money laundering patterns than identity theft. Account information inconsistencies with third‑party verification tools can occur from data quality issues or deliberate data edits, but they don’t specifically indicate unauthorized access. Transactions that don’t fit the expected profile can flag fraud, but they don’t directly show a compromised login originating from an unfamiliar location.