Unsolicited phone call, asked for password

nefu · 21-02-2012, 17:56

I just recieved a cold call from VM, offering to save me money on my bill. However the caller asked me for some of my password information before she would tell me any details. I never give security details to unknown callers and feel this is very bad practice on VM's part. Now that we are all aware of phishing emails, phishing phone calls are the next line of attack. When I asked to speak to a supervisor to register my thoughts regarding this process the caller hung up. It was VM calling becase I called the number back and got the you had a call from VM message.
Why do companies tell you to take care with passwords, then call you and ask for them (or even part of them)?

**Chris** · 21-02-2012, 18:30

Because they're muppets. Barclays used to do this with me, one of the reasons I no longer bank with them.

The solution is, if they're offering something you need, get a phone number from them and call them back, checking first to ensure they've given you a number recognised as belonging to that company. If it's a sales call, tell them you can't give out that information for data protection reasons and enjoy the bemused response on the other end of the line.

richard s · 22-02-2012, 11:55

I never give any information over the phone or net. Barclays wanted to dicuss with me about something I said sorry if I want something I will make an appointment to come too you in person.

**Rob** · 22-02-2012, 12:16

I can appreciate that organisations need to be able to verify they are speaking to the account holder that can enter into a transaction. But it shouldn't be necessary for the entire password to be given. The best option I have seen for that is with my own bank that asks for a random two letters from a password and two characters from a code. Given that the operator at the other end only gets to be able to enter those characters, and doesn't have the whole word / code displayed, it's probably the most practical way of keeping things private and yet allowing verification.

Of course added confidence comes from when you have initiated the call so you know you are getting through to the right organisation. If they cold call you , you'll never be sure of them and I'd be very wary.

BenMcr · 22-02-2012, 12:51

The process for Virgin is that if it's a unexpected call to not ask for the whole password, they should only ask for two characters

If it's a callback based on an existing call, then as long as security has already been passed then it shouldn't be asked for again

nefu · 24-02-2012, 15:01

If they ask for 2 letters each time it will not take many calls to get the whole password, they should not be asking for any of this information in a call they originate.

BenMcr · 24-02-2012, 15:05

Quote:

Originally Posted by nefu

If they ask for 2 letters each time it will not take many calls to get the whole password, they should not be asking for any of this information in a call they originate.

If the call is done outside of a requested callback, there has to be some form of security otherwise they could risk releasing account details to the wrong person which would a DPA breach.

Quite a few accounts have out of date contact numbers on them due to customers not being that bothered about keeping them up to date

Don't think anyone would be too happy with ended up with a load of extra services because the security consisted of 'Am I speaking to X' 'Yes'

And anyway, authorised Virgin Media agents can see the whole password on the system anyway, so the only time giving out letters repeatedly would be a risk if it was someone trying Scam it out of you, which would be obvious as whatever was offered on the first call then would not have happened

nomadking · 24-02-2012, 16:01

You could deliberately give a wrong answer and if they didn't know that is was wrong, then the call is probably bogus.

Mick Fisher · 25-02-2012, 14:47

The only reasons you get cold called are for scams and marketing.

Just block them all and let your answerphone deal with the Internationals and the Withhelds.

Gary L · 25-02-2012, 18:23

Same with people knocking on your door. they're not there to give you something free. they just want to sell you stuff like a cable service or gas and electric. you might get a few who want to give you Jesus for free, but we can ignore them.