As I believe we have practically no robust cyber security countermeasures (prove me wrong, please), I think it is about time to start educating laypeople about the need to have in-group secret words for old-school verification. While it may work between colleagues, loved ones, and alike, I have no idea how to solve the issue with strangers you have to occasionally deal with on phone. And in a couple of years: the same thing with video conferencing and so on.
Some months ago someone was working on this issue, but I have no idea whether it progressed nor have I seen academic papers on the topic.
Ref.:
https://news.ycombinator.com/item?id=38234784