That's a different problem though. It's doing it on their behalf, not on behalf of a scammer who's impersonating them.