alt Hacker Newsits ridiculous how many people will ignore the warnings and relay the security challenge/solution to the attacker.
"we will never ask for this over the phone" takes second place to:
"we will send/save you money/time if you make it convenient"
dress it up to taste like developer needs, and you can hook the newbies.
> "we will never ask for this over the phone" takes second place to:
Doesn't help that the banks then do, in fact, call you, and ask for this over the phone.