A random voice on the phone requests payroll and address information; the information available cannot be verified, and you're thinking this is a defendable position?
Even if it doesn't violate any specific laws, the employer could still end up on the wrong side of a lawsuit.
(I never said there was anything criminal about it.)

