> Right this thing only works if people are aware of it, but the only way for them to be aware of it is to do it every time* It need to be done every time and

> Right this thing only works if people are aware of it, but the only way for them to be aware of it is to do it every time* It need to be done every time and it needs to happen frequently enough that people internalize an expectation that anything else is sketchy. Now, how often does a bank representative call you? For me it's like once a year when their fraud department thinks that one of my monthly bills is sketchy, even though they've been unchanging for years. Is that enough to build an expectation? I don't think it is, particularly for elderly clients. Whenever I get a call from somebody claiming to be X organization I assume it's a fraud by default and don't provide them with any personal information. It has worked fine so far, as far as I can tell.