Indeed, but even companies who don't offer a phone-based customer support service can be susceptible to basic social engineering. When Facebook was still grant

Indeed, but even companies who don't offer a phone-based customer support service can be susceptible to basic social engineering. When Facebook was still granting new users access by checking that their email matched a school's domain, I was able to make accounts at multiple schools by sending a forged email (claiming to originate from the school domain) to Facebook support saying something like: "I never received the confirmation email. Will you please activate my account at fakename@targetschool.edu?" And it worked 90% of the time. I wonder how many websites nowadays would be susceptible to a targeted and personalized forged email to customer service (especially since emails are frequently used to prove account ownership).