|
|
|
|
|
by iamleppert
1386 days ago
|
|
It’s called CTI in industry — computer telephony integration. Normally well run firms will have CTI setup properly to transfer IVR data to an agent. Sometimes however agents are trained to distrust this information as there are ways to spoof or attack the system. One easy way is to call a victim and pretend to be the company, then “3 way” them in with the IVR of the real company, have them verify, then disconnect them and take over, ask to transfer to an agent and you have full access to do whatever you want to their account (if the agent doesn’t re-verify). For this reason, 99% of the time financial institutions already have CTI data but will always do re-verification. |
|