Schwab's fraud guide hands clients a response checklist

Charles Schwab has published a set of cybersecurity materials that read like an incident-response plan for clients. The packet covers the types of cybercrimes, how to spot fraudulent pop-ups, an online security checklist, and a stepped response plan for identity theft. The hook is a number from the Federal Trade Commission: victims of imposter scams lost $488 million in 2018. Awareness, Schwab argues, is one of the most valuable tools for avoiding that fate.

The firm's framing goes beyond passwords. Schwab says it pushes security into every layer of the business, from technology to strategy to culture, and that it works with senior clients and caregivers to teach the methods fraudsters use. James Lyne, global research advisor at Sophos and a self-described cybersecurity expert, paid a visit to Schwab's headquarters to share his perspective and field questions. The materials are client-facing, but the logic is institutional: the same checklist that calms a worried client can standardize how a firm responds.

The response checklist is direct: if you suspect identity theft or fraud, act immediately to limit the impact, then report and secure systems. For an advisory team, that list is the staffer's script for the call no one wants. It also works as a pre-meeting email before annual reviews, turning a compliance topic into a client-service conversation. No new software required. The procedures exist; the job is assigning them a place in the workflow.