Tell them nothing. Not about the business, not even your name.
-
Couple years ago, a salesman cold-called Joe, our naïve Facilities guy. Pried out *seemingly innocuous* info about our fluorescent lights of all things.  Joe declined any purchases, as he lacks the purchase authority.  We believe it, because Joe has never ordered without permission before. 

Next thing you know, a shipment of F40T12 fluorescent tubes (our size) shows up, with a nonsense P.O. and Joe's name. The gift shop accepted them, assuming Joe ordered them.  And later, a bill. And more lights. And more bills. And finally the accountant realizes we're on the crazytrain here, calls Joe, who denies ordering *any* of it, and puts the kibosh on this. After $9000 of invoices were paid. *That's 1% of our budget*.

It's no accident when they want to talk to you
-

The scammer looked at public data about companies like us, looking for companies small enough **that it is likely we had poor internal controls**.  

That's what that's all about. They want to glue your name to some bit of info about your company that will let them ship undesired goods or otherwise scam the company.  Or work a scam later, like call *someone else*, drop *your* name, and then have surprising knowledge about your company to make it all seem legit. 

Historically, you'd see this [scam with copier toner][1] or thermal fax paper: Someone would cold-call and ask "I'm with your regular office supply, could you remind us, what's the brand of your copier?   And your name is?..."






  [1]: https://www.snopes.com/fact-check/supplies-surprise/