“What’s interesting here is the entirety of the fraud was completed over the phone, and at no time did the scammers compromise my account online,” Mitch said. “I absolutely should have hung up and initiated the call myself….”
Source: When in Doubt: Hang Up, Look Up, & Call Back – Krebs on Security