> So I think Banks are part of the problem Indeed. This is far too common in the UK. The banks call people, introduce themselves to be from a $bank, and then s

> So I think Banks are part of the problem Indeed. This is far too common in the UK. The banks call people, introduce themselves to be from a $bank, and then start asking security questions. I have had to tell the other side a couple of times that is not how it goes - they called me, they should first authenticate themselves before starting to ask for details that are part of customer authentication. The first time I called back through the banking app. (The ability to initiate a call to bank's customer service from a trusted app is a good idea.) It took their end about 40 minutes to sort out who the first caller was. To my bank's credit, at least they didn't make me wait on the line, but sent me a notification SMS once they had the information ready. Then I called back again. The second time I knew better and asked for a direct reference code that I could use to make the callback verification tango easier on their end. But at least with the banks they mostly understand that customers may be suspicious about unsolicited calls. The ISPs on the other hand...