A phone call that looks routine can become an entry point for extortion, especially when attackers exploit support habits faster than defenders can verify them.