These are getting harder and harder to tell apart. At some point, we need to reverse the system. Instead of the bank verifying it's us, we need a way to verify it's our bank.
Oooof. Was just subjected to the most credible phishing attempt I've experienced to date. Here were the steps:
1) "Hi, this is your bank. There was an attempt to use your card in Miami, Florida. Was this you?"
Me: no.