Customer Verification

My question is about customer verification when they come to customer service( by call or chat). The customer service agents always do the verification by asking 2 or 3 questions (email, home address etc) in order to avoid fraud. This is useful. But I dont think it must be done every time. When a customer asks about their order status by giving the order ID verification is not necessary since the orderID is enough to verify them. I think, do the 2-3 questions (or more) verification if only it is related to financial issue or more serious matters. Am I right? or is there any better idea for customer verification system ? Thank you