authenticating a device holder using a payment device . the method comprises receiving identifying information related to a payment device from a device holder to be authenticated . a data repository is solicited for transactional information related to an account drawn upon by the payment device . one or more challenge questions are presented to the device holder to be authenticated , the challenge questions being related to the transactional information . the device holder to be authenticated responds to the one or more challenge questions . based on the responses , it is determined whether at least a predetermined number of the responses to the one or more challenge questions corresponds with the transactional information . the device holder may be authenticated based upon the determining that at least a predetermined number of the responses to the one or more challenge questions correspond with the transactional information .