Verification works both ways. We may ask you certain questions to be sure we are speaking to an authorised person on your company's account, but there are some things we will never ask for. Knowing the difference is a powerful defence against impersonation.
What we may ask to confirm your identity
- Details about your business that match our records.
- Information you have previously provided as part of your account.
- A code sent to you that you enter into our official portal yourself, not one you read out to a caller.
What we will never ask for
- Your portal password.
- Your two-factor authentication code read out loud or typed into a message.
- Full security details for your business bank account.
- A payment to a new account given to you over the phone or by message.
Turning the check around
You are always entitled to verify us, too. If a caller or message asks for something on the never list, stop and contact us yourself through the verified details in your portal or on our official website. A genuine member of our team will never mind you taking a moment to confirm who they are before you share anything.
See also: How Credicorp will — and won't — contact you, A debt collection agency has contacted me - is it genuine? and Complaining on behalf of your company.