Originally Posted by
corporate-wage-slave
You could always ask a sensible question back to verify the caller? Your average spam merchant isn't going to know a fraction of the daily knowledge poured into this forum daily.
A good question to ask would be "Is it within the rules to share my login details with a travel agent so they can take out 295,500 Avios from my account to spend on some complex flights for me and my family."