The employer wants to see whether you can push back respectfully when a client asks you to do something that puts both of you at risk, and whether you can offer a practical, secure workaround. This screens for boundary setting, security awareness, and client communication skills.
Decline to use the emailed credentials immediately. Explain the risks of sharing banking passwords through email and suggest alternatives, such as the client paying the bill themselves, using a shared expense management tool, or granting limited payment approval through a business account. Offer to help set up a safer process.
Start by thanking the client for trusting you, then say plainly that you cannot use their personal banking credentials because email is not a secure channel for passwords, and any breach could expose their funds and your liability. Frame it as protecting them, not refusing work. Explain that you are also bound by data privacy practices, and that logging into a personal account on your end could trigger fraud alerts or violate the bank's terms of service. Then immediately offer a workable alternative: ask them to initiate the payment themselves while you prepare the bill details, due date, and reference number in a shared spreadsheet. If they pay regularly, suggest setting up a business account with limited payment approval or a dedicated expense card where you can schedule transfers without seeing the password. In a Philippine BPO context, reassure them you are used to handling sensitive data under strict protocols, but that personal banking access is a line you cannot cross. Keep your tone calm and respectful, and end by confirming you are ready to help them execute the safer option right away.
Some Filipino VAs might feel pressured to say 'Sige po, ako na bahala' and accept the password to please the client, even though it puts both parties at risk. Instead, politely decline the insecure method, explain the risk in English, and immediately offer a practical alternative so the client feels supported.
Situation
In a previous freelance role, a client asked me to access their personal bank account using credentials they sent through a messaging app to pay a vendor invoice.
Task
I had to protect the client's financial information and my own liability while still helping them get the bill paid on time.
Action
I replied that I could not safely use credentials sent that way, and explained that email and chat are not secure for passwords. I offered two alternatives: either the client could log in and make the payment during our next call while I guided the steps, or I could prepare the payment details for them to approve through their bank's own secure portal. I also suggested we set up a business bank account with limited user access for future payments.
Result
The client chose to make the payment themselves while I prepared the details in advance. The bill was paid on time, and we later set up a dedicated virtual card for recurring vendor payments so I could handle them without needing any bank passwords at all.
Never accept credentials through insecure channels, and always propose a safer way to complete the task instead of just saying no.
Write your own answer, then get instant AI feedback graded against:
Get AI feedback on your answer — free.
3 free AI-graded answers + 1 free mock interview, no card needed.
Sign Up FreeAlready have an account? Log in
Sign in to join the conversation.
No answers shared yet — be the first to show how you'd approach this.
Prioritizing a Full Inbox
Administrative Virtual Assistant
Onboarding Call Question Checklist
Administrative Virtual Assistant
Resolving Double-Booked Time Zones
Administrative Virtual Assistant
Decoding Client Shorthand Fast
Administrative Virtual Assistant