When banks call to verify your details how do you know the call is legitimate?

If they cannot do that then its a scam or you should change banks

Scammers can spoof calling numbers to make it look like it came from your bank. Basically everything they say on the call should be treated as being fraudulent. The scripts have been tailored to use a variety psychological tricks to fool you.

Imagine the cost of calling every single client individually. If something like this would change, they would send a letter.

Don't forget that spoofing caller ID of telephone numbers is possible.

Their contact info should be easy to find.

https://www.patelco.org/financial-wellness/fraud-center/fina...

Biggest take-away:

3. Don’t share your personal information when you didn’t initiate the conversation

Whether by text, email, or phone, WE will never call you for personal information like:

  • Your online banking password
  • One-time Passcodes for transactions, registrations, or logins
  • Your card PIN, security code, or full card number

They would call you and then want to verify themselves to you. You would be asked to open the companies app. The app noticed you were in a support call and had a link at the top taking you to the support section of the app. The caller would then read you a code you would type in and it would let you know if the call was legit.

This kept going on for about a year, the legal limit they can chase a debt, so at that point they gave in and share the details and as it happens, it wasn’t me. Don’t even own a car, which I mentioned multiple times.

Anyways, I’d never share my details over the phone if I’m not fairly certain who’s in the other side. This company was legit but had very suspicious tactics.

You should never entertain any telephone interaction with your bank or any other organization, unless it was you who called them first. Just hang up. You can call them on their officially listed phone number when it suits you, or visit in person.

(I've only actually used it once - a couple of years ago - so I'm sorry, I can't recall how it worked or what exactly the authentication procedure was.)

You should always verify with an app or by calling back.

Even the apps you might want to randomize the service worker in case of insider criminal

You have no other good mechanism to verify they are who they say they are, unless you initiate the communication.