‘One of those examples is an agent calling into the bank to complain about something in a user‘s account, without clearing that action by that user first’