The sharpest con artists of the telephone era never picked a lock. They dialed the switchboard. A warm voice with a little hurry in it, the right words in the right order, a department name here, a form number there, and the operator put the call through. Support desks read account details back to them. Approvals happened. Whole afternoons of security came apart because somebody on the line sounded like they belonged.
No tools, no forced entry, nothing to dust for prints afterward. Confidence and vocabulary were the entire kit. It worked because of something easy to forget about any channel, then or now: the line cannot tell you who is on it. The caller picks the moment, the script, and the channel, so every advantage in the conversation is theirs before you have said hello.
What the operators learned
The defense that finally held was small enough to feel like an insult. Hang up. Look the number up yourself, in your own directory, on the letterhead already in the file, and call back. A real caller loses one minute and thinks nothing of it. An impostor loses the entire performance, because the one thing the act cannot survive is you choosing the channel. Every rehearsed word is worthless on a call they didn’t place.
Same con, new wires
Today the stranger mostly arrives by email, wearing the real thread, the real signature, the logo in the right corner. The rule has not moved an inch. When a message tells you to send money, change an account number, or read out a code, verify it on a channel the message didn’t pick: the number in your records, the one you had before today. Security people call this out-of-band verification. It takes sixty seconds, it is older than the internet, and it still ends the con for the same reason it always did. Someone who owns your inbox does not own your address book.
If you want the callback written into how your office moves money, with the right numbers on file before anyone needs them, book fifteen minutes.