Hacker News Reader

> Getting the customer to call a number is another, they could have transferred the customer.

No way. If someone claiming to be a bank cold-calls you, you tell them you'll call them back at their official number. Only deal with bank information on a call that you initiated.

I don't know how to work around the flaw in the article. Luckily it's not something we have to deal with here in the US, as far as I know. What a dumb "feature."

View on HN

I can understand ending the call if they start asking for personal information, but if you get a call from the bank to take you through a suspected fraud case then all they do is ask you some 'pick-the-odd-one-out' style questions to verify your identity. They then list all your transactions, including the fraudulent ones and ask if you recognise them. After that they cancel the account and start a new one.

It is absolutely how landlines work in the USA.

Reply on news.ycombinator.com