If a bank calls you, what questions can you ask to verify the caller is legitimate even if the number appears genuine?

Usually, this is the routine I follow.

• I greet them properly.
• Before they have a chance to speak, I will let them know that I record all my calls, and that this call is being recorded.
• Then with a cheerful tone, I ask them for their name, even if it means repeating it multiple times till I get it right.
• Then I ask from which department they are calling from. Customer Support is never enough of an answer for me.
• I then ask what is the official web/URL of the bank (sometimes this catches them off guard).
• Lastly, I ask for their customer support number (in the event I want to call back), they gladly supply this to me.

Once the above routine is done, I will let them know in no uncertain terms that I do not feel confident that they are who they claim to be. If this is a serious support call, I will gladly call back and the customer rep should have my issue on file when I call in.

If it is a sales call, please provide me with a web registered sales number and I will call in.

If it is an authentication call, I will ask them to let me know any one of the following:

• The transaction(s) on the 1st of the month (previous month)
• Last four digits of my Debit Card and Expiry Year
• Last four digits of my SSN
• My DOB and full address

Despite telling me this, I again, politely say, please provide me with a web registered number that I can verify, call back and dial into your specific extension.