A scenario says, 'Credential theft could allow unauthorized payment approval, causing fraudulent transfers.' Which element is the business consequence?

1. The approval permission
2. Fraudulent transfers
3. Credential theft
4. The payment application