I presume other people have this issue too – how do I find out if the company calling is really who they say they are, and why is it so important that they ask security questions of me when they have already selected me to call?