Here's what's on the Patelco site. It's good advice. Since the contact numbers are theirs, just go to the home page of your bank and look for info on phishing and Financial Institution Spoofing.

Their contact info should be easy to find.

https://www.patelco.org/financial-wellness/fraud-center/fina...

Biggest take-away:

3. Don’t share your personal information when you didn’t initiate the conversation

Whether by text, email, or phone, WE will never call you for personal information like:

  • Your online banking password
  • One-time Passcodes for transactions, registrations, or logins
  • Your card PIN, security code, or full card number

We may call you to verify something, but we won’t ask you for the information above unless you initiate the conversation or request we contact you.