I was tricked by a phone-phisher pretending to be from my bank, and he convinced me to hand over my credit-card number, then did $8,000+ worth of fraud with it before I figured out what happened.
When a fraud department calls you, you don’t need to provide any more information than your name and yes/no answers. If they are asking for any additional information, tell them that you don’t trust their authenticity and that you’ll call the number on the credit card. A legitimate agent will politely end the conversation there.
Then you better call that number on the card quickly.
This is the solution.
Had this happen once, followed those steps, and the CSR was very interested in getting the details of the call. They put a freeze on that account for a bit as well. Nothing was taken.
Any department really, but that’s just me.
They should already have your name too if they’re calling you
They’re going to ask for your name so as to confirm they’ve gotten a hold of the right person