Was this just the result of one phone call to one person? You might have gotten an employee out for a phish.
Try giving them another call at another time of day and see if they make the same request.
Try giving them another call at another time of day and see if they make the same request.
Is switching providers an option?