@Edent That's viciously effective. Makes me glad I don't use banking apps. (I use the website with 2fa.)

I did get a call from the power company who had all my details and was demanding an immediate payment. I checked on the website and nothing was due, so that was a scam. They are convincing. "Hang up and call back" is the only safe move.