That's fishy as -blam!-. Since I work at a security company, I know exactly what I'll legally need from a representative to verify legitimacy. If they fail to verify on my end, it's a red flag that it is totally a scam.