Incredibly, impersonation of this sort to get hold of data is not a criminal offense, in this country there is no law as such which makes it illegal to steal information, and the main piece of legislation, the Data Protection Act contains a massive loophole, it only applies to the holders of information not to third parties trying to get their hands on it.