SMB Fortress

Callback Confirm

Staff training + a shared daily phrase. If someone claims to be IT or a vendor, hang up and call your published main line — never use a number the caller gave you.

Org secret (this device)

Same phrase must be shared on every device that shows today's code (copy this seed to IT lead's saved note, or print once). This app does not sync to a server.

Today's callback phrase (UTC date)

—

Legitimate internal callbacks can read this phrase after you've called them back on your published line.

Wallet card

  • No inbound caller is verified by caller ID.
  • Use only numbers from your site, contract, or invoice.
  • Ask the callee for today's phrase after you've reached them on that number.