An appropriate response for suspected fraudulent activity may include:
(a) Further monitoring a covered account for evidence of identity theft;
(b) Contacting the customer;
(c) Changing any passwords, security codes or other security devices that permit access to a covered account;
(d) Reopening a covered account with a new account number;
(e) Not opening a new covered account;
(f) Closing an existing covered account;
(g) Notifying law enforcement; or
(h) Determining no response is warranted under the particular circumstances.
(Res. 05-2009. Passed 4-2-09.)