spf-discuss
[Top] [All Lists]

Re: [Waitman] Re: A hole in planned phishing-prevention?

2004-06-04 01:48:42

Hello

Graham Murray wrote:

Hopefully the banks etc will realise this better than they do for the
telephone. When you phone them it is fine for them to ask you to
verify your identity. The problem is that they still expect you to
answer their verification questions when they have phoned you (often
with caller-id withheld).

When BofA calls to verify a large purchase, they actually ask for the credit card number as verification. I don't really understand if it is a trick question, but I always tell them I will call the number on the back of my card and ask
for their department before giving out that kind of information.

However, the fact that anyone with a commercial telephone system can identify themselves however they wish makes "no" caller-id on these types of calls an
extremely wise thing to do.

Waitman Gobble