As Notes suggested, I too used to ask for a call back number if they said it was my bank. Recently, it actuall WAS my bank.

The caller first identified himself and my bank name, then said that my Online Banking had been compromised. I of course assumed it was a scam. When I asked for a number to call him back, he said to call the toll free number on the back of my credit card.

So I did.
After much "passing the buck" on their end, I finally got to the department he had called from, and sure enough it was legitimate, and we got it straightened out.

Along the way, I learned something I'd like to pass on.

When I talked to the "security department" of the bank, the first think they asked me was, if I had given the caller any information. I replied "no".

The second thing he asked was, do you have your Online Banking sign-in page set up as one of your favorites? I replied "yes". He told me to take it off of favorites immediately, and always use the (bankname).com to get to their site, then navigate to the sign-in screen.

Could just be my bank, but I'm warning people that they may want to take the same step and delete it from their favoites list.

LLOYD S