*Agent: * OK, I’m going to ask you some security questions to protect the security of your account.
Me: OK
Agent: What is your social security number?
Me: 123-45-6789
*Agent: * And what are the last four digits of your social security number?
*Me: * I got 6789. What answer did you get?
Are they trying to determine whether I’m a fraudster or a dumbass?
But even worse is a disturbing trend that I’m seeing where the agent just outright asks for your password:
Agent: In order to access your account, I’ll need you to give me your password now.
Me: What?
Agent: I need your password.
Me: (Looking right, looking left, looking behind me) Are you putting me on? Most places tell me that I can feel secure that I’m not being phished because agents will never ask for my password. And here are you asking for my password. What am I supposed to think here? Can’t you just log in as some sort of ninja user and view my account without me giving you my password? And, of course, this means I have to change my password every time I call the bank for assistance because now some call center monkey has my username, account number AND my password?
Agent: I’m sorry, sir, I need your password.
And don’t even get me started about the new thing about keying the password directly into the telephone keypad (You know, the one they encourage you to use mixed case and special characters for security). The only way I can enter @#$!@^Bank into a telephone is to shout it.
What the hell are these cockbuckets thinking?