@Edent
I hang up with them and call my bank login to website with a physical usb key and speak to the fraud dept and report what happened and verify authenticity period. :) If I know how things can be exploited I know criminals do as well.