@simonwood @Edent The bank do need to confirm that: they only know that they called your number, but they can't be sure that you picked up - maybe someone else has access to your phone, or it's been lost or stolen, or you changed your number and forgot to tell them.
Unfortunately this only makes this attack more persuasive.
Telling them you'll hang up and call back on the main number is a good option, and the bank employee should always be happy for you to do so.
Buuut this is Chase...
@CaptainJanegay @Edent Maybe someone else has access to your phone, so they’re going to send a push notification to your phone to verify it's really you? 🤔