My bank called me at 2am asking if I tried to send $800 to Belarus and I almost fell for their 'verification' link
Last Wednesday around 2am I got a call from a number that showed up as my bank's real customer service line, and the guy on the phone knew the last 4 of my debit card. He said there was a $800 charge to Minsk, Belarus, and to stop it he needed me to click a link and enter my full login so they could 'lock the account from the inside.' I was half asleep and actually opened the link, but then I noticed the URL had a weird extra dot after the real bank name, like .com.security-check, so I hung up and called the number on the back of my card. Real rep said no charge ever happened and they never call before 7am. Now I wanna know, do you guys keep your bank's actual number saved in your phone so you don't get got at 2am?
Saving the number only helps if you actually look at it, and at 2am half asleep you're just gonna answer whatever rings. The real fix is a rule with yourself: no banking stuff on phone calls, ever, hang up and call back the number on your card.