Cybersecurity and fraud management
We’re committed to safeguarding your financial future
Protecting customer data is more important now than ever. Discover how we keep you safe online.
Secure your retirement accounts
TIAA’s advanced security features protect your retirement savings more securely than ever.
Protecting your data
We leverage the latest cybersecurity innovations to monitor data, encrypt confidential participant information, and provide timely enterprise data protection training for you and our team.
Protecting your accounts
Our cyber and fraud protection protocols prevent unauthorized parties from accessing your accounts, and we’re constantly on the lookout for scams and breaches targeting our participants.
Providing assurance
If your account is ever compromised by someone gaining unauthorized access and you lose money as a result, TIAA will reimburse you.*
Passkeys combine the power of cryptography with biometric authentication
This technology enables you to access your TIAA account with your fingerprint, face scan, or PIN.
Benefits include:
- Stronger credentials scammers can’t guess or reuse
- Protection from phishing and security breaches
- No passwords to lose or forget
- Unique sign-in from your device to your account
- A better user experience leveraging biometric data
How to set up your passkey
TIAA currently supports passkeys for iOS, Android, and Microsoft users running Chrome, Edge, Firefox, and Safari browsers
- Visit
tiaa.org and log in to your account. - Select Profile, navigate to the Security Preferences page, choose Passkey, and follow the prompts.
- Return to the TIAA secure login page and select the Setup passkey button.
Seamless protection behind the scenes
TIAA’s Multifactor authentication (MFA) provides advanced safeguards in the background that won’t interrupt your experience.
Enhance your authentication
You can optionally add more verification factors to increase your account security:
Add a trusted contact
A trusted contact is an adult (age 18 or older) you trust to serve as our point of contact should concerns arise about your potential:
- Well-being
- Whereabouts
- Fraud victimization
- Exploitation
- Abuse
Please note that your trusted contact can’t access your account information, is not an authorized user, can’t approve transactions, and won’t assume power of attorney.
Award-winning phone authentication solution
Our phone authentication solution analyzes key omnichannel attributes to mitigate fraud risk, while our advanced voice biometrics, multifactor authentication, and other controls safeguard your personal information.
Assurance
We’re always working for you
From safeguarding your data on the backend to providing opportunities for you to take charge and strengthen your own security measures, protecting you and your information is our top priority.
Protect yourself
Learn about common scams to help you recognize red flags, prevent fraud, and report issues. Discover ways to better protect yourself, your loved ones, and your money.
Protecting older adults
Avoiding account takeovers
Tax scams
Government scams
Romance scams
Tech support scams
You’re covered if an incident occurs
You’re reimbursed for any loss due to unauthorized access.*
- View TIAA’s
customer protection policy - State and federal law-based incident response and notifications
- Credit monitoring and identity theft repair if your data is breached
- Regulatory oversight, independent audit, and certification of alignment with industry expectations
Resources
Cybersecurity Best Practices
We offer tips and best practices to help you address a broad range of cybersecurity challenges. For information about a specific issue, browse the options below.
Keeping kids safe online
Working remotely
Multifactor authentication (MFA)
Avoiding malware
7 steps to protect yourself from voice deepfakes hitting higher ed
Essential fraud prevention for educators
New era of AI phishing
New rules for protecting passwords
Report a security concern
Help us keep you safe
No matter what security challenges may arise, we’re here for you. Here’s how you can take action.
Suspicious account activity
To report unauthorized account access, balance concerns, or other security issues, call us at 800-842-2252, weekdays, 8 a.m. to 10 p.m. (ET).
Suspicious email
To report a suspicious email, send it to us at
Resources
We’ve
*Our practice is to reinstate a client's TIAA account in full if there is a loss that is determined to be the result of unauthorized activity through no fault of the client.
**You are about to leave TIAA’s website and access a website that is unaffiliated with TIAA. TIAA does not assume responsibility or liability for the content or privacy policies of external sites.