> A lot of places will let you back in if you can provide some transaction metadata like last charge date, billing address, last4 of card, etc. Can't this be s

> A lot of places will let you back in if you can provide some transaction metadata like last charge date, billing address, last4 of card, etc. Can't this be social engineered by a hacker?