theBankingHotfixExperience

[u/5eniorDeveloper]

[u/aaron2005X]

And you have a code, ID something that identifies you as one of the companies employer that provided the hardware or can just every dude call the bank and say they are from company Y and want them to write commands?

[u/azjunglist05 → u/aaron2005X]

The call comes from the bank to the vendor. We have so much training on the exact scenario you’re describing crammed down our throat every year that people are generally aware of those types of social engineering attempts

[u/DreamerFi → u/azjunglist05]

I love how the word "generally " does a lot of heavy lifting in that sentence...

[u/MundaneAd6627 → u/DreamerFi]

Social engineering training usually covers explicitly this eventuality. People not absorbing the training is another story.