"Feigned access may also be provided, at least for predetermined portions of an account or service that may be particularly at risk if accessed by a third party." . . . .