Banking AI Voice Assistant – Security Test Catalogue
A consolidated red-team test plan for a banking AI voice assistant (IVR / IVA). Each scenario names the weakness being tested, why it matters, the realistic impact, and how a tester can run it by phone with example caller scripts.
Scope and rules. Run only against a bank-approved test environment, using synthetic customers and approved test credentials. These are proposed tests, not confirmed findings. Items tagged Conditional or Optional apply only if the feature exists or is explicitly in scope (for example transfers, voice biometrics, OTP, caller-ID trust). Retry limits, timeouts and authentication factors must be taken from the bank's own policy. Example caller phrases are illustrative; adapt them to the bank's actual flow.