@Edent

At this point I wouldn't even trust their app. It looks legit, but...

The safest response is to ask for a reference code you can use when you call in using the number on the back of the card. Do not accept an alternate number.

Then make your own call to them.