It's even worse than that. If they try to authenticate you on the phone. They'll suggest calling you back, and they don't know what phone number they'll be call

It's even worse than that. If they try to authenticate you on the phone. They'll suggest calling you back, and they don't know what phone number they'll be calling you from. They literally ask for their customers to pick up the phone from unknown numbers and give your bank details.