It is. But it isn't just just cold callers and scammers that do it. HMRC do that too - it's a speciality of Debt Management Unit. I have tried explaining to them about Data Protection and that as the data controller it is my responsibility to satisfy myself as to the identity of the caller...