Which of the following is a fundamental principle of digital fraud & account takeover as it applies to Certified Fraud Analyst?