I've been getting pestered for some time by a persistent company ringing me about some unknown subject. They never leave a message, just an unknown number on the phone. Anyhow, today I was in and this guy asked for me by name. I asked who was calling and what it was concerning. He said he was from GE Capital Bank and that it was about a matter of personal business I already had with them. I didn't recognise the company as a provider of any of my credit cards, so asked him to be more specific about the business. He refused, hiding behind the Data Protection Act, then started asking me to prove my identity! When I pointed out that HE had rung ME and not vice versa and that if anyone was going to have to prove his identity it was him! He didn't seem to understand this and demanded that if I didn't tell him the 'security codes' he was asking for, then he couldn't talk to me. I said fine, I hadn't planned on talking to him this morning anyway!
I then went looking in my paperwork for GE Capital Bank and found them as the provider of credit services to TopMan who I have a storecard for.
My point is this, it's all too easy for someone to ring you up and ask you for information and it's even easier to give in to them and tell them it, just to see what they wanted. Beware, it could be anyone.