To some extent, it all comes down to identity. If you knew which unique person was associated with each account and if you knew which unique person you were ta

To some extent, it all comes down to identity. If you knew which unique person was associated with each account and if you knew which unique person you were talking to on the phone, it would be possible to verify both that you are talking to the person you should be and that you aren't talking to Notorious Social Engineer #2344 trying to do something shady. But instead you're stuck trying to figure out if "Saal Weachter" on the the phone is the proper owner of the 'saalweachter' account, or even if it is someone named "Saal Weachter" on the phone at all.