@Edent
That is sneaky af.

Good rule of thumb is: incoming calls are informational only, never "confirm" anything during an interaction that you did not initiate.

Two reasons this holds up:

First, remember that your bank doesn't even want to spend money on enough people to *answer* incoming calls, much less make outgoing ones. If your bank does need to contact you they'll probably just send an automated email or text.

Second, if your bank calls you, they already know it's your phone.