Five calm, service-led scripts for the calls most likely to bypass a policy. Staff can protect the client without accusing the caller: verify so you can help faster.
Approve these scripts inside your own procedure, rehearse them with reception and keep the desk card beside the phone. Never frame the check as “we think you might be a scammer”. The message is simpler: this is how we protect every client and keep the call moving safely.
“I'll just send a quick code to the mobile we have on file — read it back when it arrives and I can help straight away.”
Place the caller on hold before discussing the matter. Use the mobile number already held on file. If the check cannot be completed, explain the safe next step and escalate.
“I can take a note of the request, but I can't change bank or contact details during this incoming call. We'll verify you through the mobile already on file, then an authorised team member will complete the change under our usual process.”
Do not make the change on the same incoming call, and never send the code to the replacement number.
“Thanks for letting us know. We don't continue security or account conversations on incoming calls. I'll end this call and contact the organisation using its independently published number.”
Do not use a callback number the caller supplies. Start a fresh call from an official website or an existing record.
“I understand this feels urgent. This check is how we protect every client and it only takes a moment. I can't skip it, but I can explain the next safe option or have an authorised team member call you back.”
Keep the language about consistent service, not suspicion. Authority, anger and urgency do not change the process: the more they resist, the more you verify.
“The check hasn't completed, so I can't continue with this request. I'm going to record what happened and ask an authorised team member to review it. Please don't send more information or make another payment until we contact you through the number already on file.”
Capture the time, displayed number, claimed identity, request and outcome. Do not coach repeated attempts. Escalate under the firm's suspicious-activity procedure.
Urgency, anger and claimed authority are reasons to hold the line, not exceptions to it. Use the known mobile number already in your records. Do not replace an authorised-contact check with security questions that reveal more client information.
Each authorised-contact check creates a timestamped, hash-chained record of who requested it, the masked target, method and outcome. Compliance-authorised users can export the result as PDF or CSV.
General information only. Adapt the scripts to your approved procedures, legal obligations and escalation roles. Vericode supports an authorised-contact check; it does not prove identity or guarantee a fraud, legal or compliance outcome.