@Edent I'd call the number on my bank card from a different phone. And stay with them.
In the *unlikely* case that both calls are genuine, I can "sneakernet" case numbers between calls.