Incredibly, even looking up the name and phone number of the caller in the company's employee database and calling him back is not an absolute guarantee—social engineers know ways of planting names in a corporate database or redirecting telephone calls.