HR7704-119

In Committee

VA Call Center Multi-Factor Authentication Act

119th Congress Introduced Feb 25, 2026

Summary

What This Bill Does

The VA Call Center Multi-Factor Authentication Act requires Department of Veterans Affairs call centers to use multi-factor authentication before carrying out a high-impact action for a veteran or other beneficiary.

An action is high impact when an impersonator could use it to cause real and durable harm. The bill gives examples including diverting benefit payments, manipulating an account, or disclosing sensitive information. Routine contacts that do not meet that risk standard are not expressly covered by the mandate.

Who Benefits and How

Veterans and beneficiaries who use VA call centers receive stronger protection against account takeover, payment diversion, and disclosure of sensitive information. Family members and fiduciaries helping administer benefits may face lower fraud risk. VA program offices gain a uniform security requirement for consequential telephone transactions.

Who Bears the Burden and How

VA call-center agents and contractors must complete additional identity-verification steps before high-impact actions. VA cybersecurity and information-technology teams must deploy, maintain, and monitor authentication systems. Callers who lack a working authentication factor may encounter added delay or access barriers. Federal administrative accounts bear implementation and support costs.

Key Provisions

  • Requires multi-factor authentication at VA call centers.
  • Applies before a high-impact action is completed.
  • Uses potential real and durable harm as the risk threshold.
  • Covers possible diversion of veterans' funds.
  • Covers manipulation of beneficiary accounts.
  • Covers disclosure of sensitive information.
  • Requires operational and technology changes at covered call centers.
  • Leaves lower-risk call-center contacts outside the express mandate.

Evidence Chain:

This summary is generated from the full bill text using AI analysis. Expand "Detailed Analysis" below for identified beneficiaries/burden bearers with clause-level evidence links.

At a Glance

What This Bill Does

Requires Department of Veterans Affairs call centers to use multi-factor authentication before completing high-impact actions for veterans or beneficiaries when impersonation could cause durable financial, account, or privacy harm.

Key Policy Areas

Veterans Affairs, Identity Security, Multi-Factor Authentication, Call Centers, Benefits Administration

Primary Purpose

Requires Department of Veterans Affairs call centers to use multi-factor authentication before completing high-impact actions for veterans or beneficiaries when impersonation could cause durable financial, account, or privacy harm.

Policy Domains

Veterans Affairs Identity Security Multi-Factor Authentication Call Centers Benefits Administration

VA call-center authentication requirements

Identified Gains
  • Veterans using VA call centers
  • VA beneficiaries receiving payments
  • Beneficiaries with sensitive VA records
  • Veterans fiduciaries managing benefits
  • VA programs exposed to impersonation fraud
Model: codex-gpt-5 | Version: bill_summary_v2 | Source: ih
Veterans using VA call centers:
VA beneficiaries receiving payments:
Veterans fiduciaries managing benefits:
Beneficiaries with sensitive VA records:
VA programs exposed to impersonation fraud:
Identified Costs
  • VA call-center agents
  • VA call-center contractors
  • VA identity-security staff
  • VA authentication-system teams
  • VA callers lacking an authentication factor
  • Federal veterans-administration accounts
Model: codex-gpt-5 | Version: bill_summary_v2 | Source: ih
VA call-center agents:
VA call-center contractors:
VA identity-security staff:
VA authentication-system teams:
Federal veterans-administration accounts:
VA callers lacking an authentication factor:

Legislative Progress

In Committee
Introduced Committee Passed
Feb 25, 2026

Referred to the House Committee on Veterans' Affairs.

Feb 25, 2026

Introduced in House

Feb 25, 2026

Mr. Moore of Alabama (for himself, Mr. Van Epps, and …

Stakeholder Effects

cui bono?

How this legislation distributes effects. Mention counts reflect frequency, not effect magnitude.

Veterans
5 mentions across 1 clause
+4 positive -1 negative

Beneficiaries with sensitive VA records, VA beneficiaries receiving payments, VA callers lacking an authentication factor

Positive-direction: Beneficiaries with sensitive VA records, VA beneficiaries receiving payments, Veterans fiduciaries managing benefits, Veterans using VA call centers

Negative-direction: VA callers lacking an authentication factor

Government
4 mentions across 1 clause
-4 negative

Federal veterans-administration accounts, VA call-center agents, VA call-center contractors

1/2
sections analyzed
Full impact breakdown

Bill Structure & Actor Mappings

Who is "The Secretary" in each section?

Domains
Veterans Affairs Identity Security Multi-Factor Authentication Call Centers Benefits Administration
Actor Mappings
"agent"
→ VA call-center representative
"caller"
→ Veteran or beneficiary requesting a high-impact action
"security_team"
→ VA team administering multi-factor authentication

Key Definitions

Terms defined in this bill

2 terms
"high-impact action" §high_impact_action

A call-center action through which impersonation could cause real and durable harm, including diverted funds, account manipulation, or sensitive-information disclosure.

"multi-factor authentication" §multi_factor_authentication

Identity verification using more than one authentication factor before a covered call-center action.

We use a combination of our own taxonomy and classification in addition to large language models to assess meaning and potential beneficiaries. High confidence means strong textual evidence. Always verify with the original bill text.

Learn more about our methodology