Most banks here (UK) have a mobile app, so I've always wondered why they don't use that to auth the call?
Bank: Hey I'm calling from HSBC, want to verify it?
Me: Sure
Bank: Ok, so open you mobile app, and enter 637482
Me: Ok, cool thats given me 274893
Bank: Yep, that's all confirmed so ...
