While I do some work for the bank, I have no idea how to even try to find out the answer to this question. There are two options I would use in a similar situa

While I do some work for the bank, I have no idea how to even try to find out the answer to this question. There are two options I would use in a similar situation. 1. Ask for a case number, and the return phone number to call back. Check the number belongs to the bank, and call back quoting the case number. Could be painful to do this depending on how the call gets routed. 2. Get the caller to verify themselves using information that only they would know, and that doesn't expose any PII of yours. Things like 3rd,4th,6th digits of your account, metadata about a recent transaction on the account, etc. Even better, get them to send you an email from their work account, and make sure they can reply to you from that account as well.