@Edent

I just assume everything is a scam. If my bank called me, I wouldn't even take the call. Scammers can fake a caller ID. I would ignore the call and phone the bank directly. Texts, emails - are all a scam unless I'm expecting a 2FA code.

In your example, what happens if you click 'no'?