Being careful isn’t a bad thing. Whenever sensitive information is involved I google the company to make sure the phone number is actually correct and if it’s a proper employee of the company I will find their listing. If their voice sounds like it doesn’t match their photo to a large degree or I can’t find the employee I will be very apprehensive about giving information and will ask them some questions. If it’s a con they usually give up quick and move onto the next one.