This has always been good advice, but with the advent of information from various data breaches being for sale on the web, you just can’t trust anyone, even people calling that seem to already know you and your information.
“Just as you would never give out personal information if asked to do so via email, never give out any information about yourself in response to an unsolicited phone call.
Phone phishing, like email scams, usually invokes an element of urgency in a bid to get people to let their guard down. If call has you worried that there might be something wrong and you wish to call them back, don’t call the number offered to you by the caller. If you want to reach your bank, call the number on the back of your card. If it’s another company you do business with, go to the company’s site and look up their main customer support number.”
The stories in the linked article are scary. If we’re not paying careful attention, we could easily fall for them.