He "relayed" an "Apple Authentication Code" from an email to this Daniel fellow, right? Presumably he read it into the phone? That's where (I hope) I would hav

He "relayed" an "Apple Authentication Code" from an email to this Daniel fellow, right? Presumably he read it into the phone? That's where (I hope) I would have stopped; if X sends me an authentication code, the only reasonable place to send it back to is X. Also, I think the real fraud department would be completely OK with me saying "Oh, thanks for spotting it. I'd like to call you back now please - give me your name and the name of your department, and I'll look it up and call you back - what do I do to bypass transfer hell?". Getting on the blower to Wells Fargo on the other line was smart, but you need to have multiple lines at your disposal.