When it comes to social engineering, the devil really is in the details: you’re much more likely to believe the story of someone claiming fraudulently to be a colleague (or even claiming to be your CEO or CFO) if they are familiar with company minutiae that make them sound like an insider.
So don’t give away anything to the crooks that you don’t need to, and be especially careful not to give away things that stand out precisely because you meant to destroy them but didn’t.
