As an example, When the caller is claiming to get from CRA, you can ask for the caller's identify, function section, and office area and tell them that you want to 1st validate their id.