It is important that the caller provide some information for authentication purposes. Just because someone uses your phone (or spoofs the number) doesn't mean t

It is important that the caller provide some information for authentication purposes. Just because someone uses your phone (or spoofs the number) doesn't mean that they should be able to make changes to your account. Lots of companies outsource their IVRs. And everything is all too often cobbled together in a just-make-it-work-right-now fashion.