My in-laws got hit by an absolutely ridiculous phone scam. Basically some guy called and said "Hey this is Apple, this is an emergency, your iCloud got hacked, you need to install this remote desktop software and give me your credit card info so I can fix it for you". They are smart people but they still fell for it. So, the advice we gave them was that no organization is going to use a phone call to deliver important or urgent information. So if a call like that comes in, just ignore it or ask for a call-back number and then try to verify it by asking us. If a company or government agency truly wants to convey important info to you, they'll send mail.