It would be nice if banks need this kind of a process could agree on how it should work.
Like maybe the automated "we will never ask you for this info" email should only contain decimal digits and the "we are on the phone and will send you a confirmation code to read back" could only contain alpha characters. Or something obvious and consistent.
Like maybe the automated "we will never ask you for this info" email should only contain decimal digits and the "we are on the phone and will send you a confirmation code to read back" could only contain alpha characters. Or something obvious and consistent.