1. The notification must have included the phone number. 2. The bank must have the registered number/s for customers and clear procedures on how to deal with c

1. The notification must have included the phone number. 2. The bank must have the registered number/s for customers and clear procedures on how to deal with calls from numbers unknown to bank. 3. Attackers clearly knew the above flaws of the banking system and processes. 4. Chase must take immediate actions for pp. 1 and roll out the update. But then I am not sure how about nowadays but 10 years ago it was pretty easy to spoof callerid.