Originally Posted by
SteveinMN
I don't think so. The call rang in using a number I already have for the company, so they showed up as such when the phone rang. And, when I pressed them on it, they had the correct information for me.
My issue is the way they asked for the information right out and in bulk. They could have handled it much better by validating the person answering the phone with information only they should have had and then asking questions by reference. "Are you still on Main Street?" would be enough of a question to jog a customer to say, "Oh, yeah, we moved three months ago" and prompt a request for the new address. And if the call ostensibly was to keep their records up to date, there's no reason they should have offered to re-up Rxes I have with them (which they listed by proper name and dosage).
It was just incredibly ham-fisted of them and it bothers me that they think people will just answer the questions. That is how social engineering works and how it leads to fraud. More people need to know they can challenge the incessant requests for information. If you have my street address, city, and state, you don't need to validate on ZIP code; you can look it up. Considering this is the same outfit that has no compunction leaving messages on my voicemail asking me to call them to resolve one issue or another, without making me prove who I am on the voicemail, the name-rank-serial number routine rubbed me the wrong way.