Calls from banks

I’m sure we’re been cautioned many times against replying to emails claiming to be from banks, etc…

But what about phone calls?

On several occasions, I have received calls from banks. It goes something like this:
Caller: Hi Mr Tai. I am calling from XYZ Bank.
Me: Oh, what’s the problem.
Caller: We noticed an issue with your account and just wanted to confirm if this is correct. But before we can proceed, we’ll need to do some verification first. Can you please give me your NRIC number? And how do you usually make payments for your cards?
Me: Hmmm…

Now, please tell me you can see what’s wrong…?

#1. The phone number does not indicate it’s calling from a bank. I did mention this and the most they can do is ask me to call back the bank’s hotline.
#2. Bank calls me. Bank asks me to verify my ID. I should be the one asking them to ID themselves, which I have and see #1.

On many occasions when the caller is willing to listen, I have explained how awkward the situation is and how it defeats the purpose of educating users to be security conscious since this is really asking the person to “trust” the caller, which is what the phishing mails are out to do anyway.

I guess best thing to do is for the bank to call the person, inform them that there is a possible issue with their account and to call the bank and quote a case number. That would be better, I guess…