If someone calls pretending to be from Epicor or another trusted vendor and asks for access or sensitive information, do not provide any details or take any action. Hang up and immediately report the call to your manager. Then, contact the real vendor directly using verified contact information to confirm whether the request was legitimate. Never allow remote access or share store credentials without verifying the identity of the caller.