Sidd said:
Briefly, the idea is this: someone calls you up
spoofs the callerid on your phone
so that your phone displays bank phone number
then they reel of a bunch of information about you
….
but they then ask for security code on card, PIN, mothers maiden name
and it’s game over
when you get a call or voicemail purporting to be from your bank
manually dial the number on your card
like with your fingers
Don’t trust the net to find the phone number for your bank
scammers have been populating search results with fake numbers
If you pick the call up and someone claims to be from the bank
say, “cool, tanx. I’m going to hang up now and call the number
I have on my card and that you claim to be from.”
https://krebsonsecurity.com/2018/10/voice-phishing-scams-are-getting-more-clever/
Another spoof seen in the wild is getting a text message from UPS/USPS/FedEx/DHL/… with a link pretending to
be a tracking number for a package. Or an email.
If you click on that link, it goes to a website that installs malware.
Best way to handle is to write down the tracking number, go to the company web site and type it in.
other versions pretend to be your doctor/dentist/insurance company …
Careful out there, mind how you go. Give no information out to callers, and treat voicemail/email/texts with caution.