Ideally, out-of-wallet information is easily recallable by a user but obscure to most other persons and difficult for them to uncover. Prompts for out-of-wallet questions are now often generated automatically through convergence of databases containing users' financial transactions, vehicle registrations, and other records.[2]
Typical out-of-wallet questions a user may be asked include:
What was the color of your first car?
What is the name of the first school you attended?
What is the name of the hospital you were born in?
Such information is available to a database compiler but may not be readily available to criminals attempting to commit identity theft.[2]