ZDNet: Authenticate properly or don't bother calling

[TabrisDarkPeace]

http://www.zdnet.com.au/blogs/securifythis/soa/Authenticate_properly_or_don_t_bother_calling/0,139033343,339272513,00.htm?feed=rss

Have you received a telephone call from your bank asking to 'confirm' a recent transaction? How can you be sure it was actually your bank calling?

 

[Iceblue]

One thing... if it is really your bank, they already know your account number, so they don't need to ask for it.

If the caller is asking for your account number, you know it is a scam.

 

[SciFiMan]

Yes, you always have to authenticate back. It's never a life or death discussion so the easiest way is just say you'll call right back. Then look up the phone number and don't use one provided by the original caller. People don't realize that giving out DOB and middle names also make it easy to track people down for ID theft. The more urgent the call sounds the more likely it is a scam.