So many callers get offended when you try to tell them that you aren't going to give you personal information to some random caller unless they can validate themselves first. And many times their direct call back number (if they have one) isn't the one published to the company website. I get the feeling that most people don't question them.