The scam was sophisticated and unfortunately most banks are not sophisticated. They call you up and expect you to give them loads of personal details because tbey have some upsell for you. They train people to be scammed. They should instead call and tell you to call them back at their official telephone number.