Out of interest would you answer security questions if you were called by the bank, or would you always take the option to ring them back to be safe?
Interesting you ask this, the last time HSBC rang me, the conversation went like this :
Me : Hello?
Her: Hello, this is so-and-so from HSBC. Can I take the third, fifth, and sixth numbers of your security code to confirm your identity please? (Which is used to logon to internet banking)
Me : Who is this?
Her : Im calling from HSBC, I need your security code to proceed.
Me : You arent getting it *click*.
I went into my local branch later in the week to ask about the call, and they said it was standard practice. The call came from a private number, so how the hell do I know it actually
is HSBC? Could just be someone with my DOB and initial login code (which can be saved in a cookie! - worst idea ever HSBC), that needs the security code.
*edit - Damn BBCode.