Called from Sky by offering discount

[Brinded]

Hi,

Had a call from what registered on my phone as "Sky", the man on the phone knew my account details in regards to the packages that I have. Asked for first line of address to which he told me the road, and I said the number.

He then went and asked for:

1. My Sky password

2. My mothers maiden name

He went to ask for a third but I cut him off and said that if you're Sky, you need better authentication methods because no-one who knows anything about security would give out a password or a potential "Secret Answer" that is used across different accounts.

If this call was legitimate, which I'm 50/50 on, then surely Sky, with their amount of users and employees have a system that can send a text or an email with a confirmation code? Even when creating this post it states don't share Sky account information... so why would I do it over the phone?

Not really looking for an answer, but if someone can fill me on whether or not Sky use this abysmal way of verifying accounts or not, that'd be great.

[Daniel0210]

@Brinded 

With any calls from 'Sky' (especially unexpected calls) if the caller asks for your previously agreed telephone password to confirm you're the account holder (which I would expect a genuine Sky agent to do) initially give an INCORRECT one on purpose. If the caller doesn't challenge it then you know it will be a scam call.

[caesarome]

@Brinded 

I would be suspicious of any calls offering a discount as these are usually made so the caller can capture account login details so they can then order phones and tablets of which they send a courier to then pick them up.

[PandJ2020]

---

@Brinded wrote:

Not really looking for an answer, but if someone can fill me on whether or not Sky use this abysmal way of verifying accounts or not, that'd be great.

---

...if you gave them your account password (as opposed to the telephone password mentioned above) then it is 99% likely your account has been/is being compromised.

Read here very carefully: https://www.sky.com/help/articles/account-takeover

[Brinded]

No passwords or answers were given except my house number - more just wanted to know if Sky do these types of calls and if so, if they use that way of verification as it's not acceptable to be asked to give a password, or answers out.

I received another call later that night which was ignored - again, phone saying it was from a "Sky" number

[SKY1992bf]

---

@Brinded wrote:

No passwords or answers were given except my house number - more just wanted to know if Sky do these types of calls and if so, if they use that way of verification as it's not acceptable to be asked to give a password, or answers out.

I received another call later that night which was ignored - again, phone saying it was from a "Sky" number

---

@Brinded  The only password a genuine sky agent will ask for is the telephone access password that you have set up this is separate from the password used to access online services 

it's best to give a fake one first as if it's a scam they will likely hang up 

[Daniel0210]

---

@Brinded wrote:

it's not acceptable to be asked to give a password, or answers out.

As stated already it's the previously agreed telephone password not your account password. A genuine Sky agent has to establish they are talking to the account holder and that's how they usually do it.

I received another call later that night which was ignored - again, phone saying it was from a "Sky" number

And any number can be spoofed. If you're ever uncertain call Sky back on an official number. 

---

[Brinded]

Is there a way to check the "telephone" password? I'm sure I never set one up.

[Daniel0210]

@Brinded 

Call Sky and if/when prompted for it say "forgotten it" or similar. Sky should be able to verify your identity as the account holder by other means and then set up a new telephone password with you.

[DaveDrizen]

---

@Brinded wrote:

No passwords or answers were given except my house number - more just wanted to know if Sky do these types of calls and if so, if they use that way of verification as it's not acceptable to be asked to give a password, or answers out.

I received another call later that night which was ignored - again, phone saying it was from a "Sky" number

---

If they did not start asking if you are the account holder and asking your telephone password ( which you give them a wrong one first  and see if they challenge it to be safe) then  properly it was  a scam call,  as all genuine Sky agents always starts off asking for that information. 

[twilight+princess]

We cancelled & 'Sky' called a few days before the end, the cs rep asked me for the same information, when I mentioned they should ask for the telephone password not the account one they stated that's only for telephone problems. I have 2fa on the account so they couldn't access it anyway. 
I reported it at the time but Sky didn't seem bothered with the potential breach in security protocol from their cs.