Similar story: the guy on the phone was well spoken, he had tons of personal information, he spoke about fraudulent charges which I went and checked and could see, etc, etc.

He had a login pushed to my phone's 2FA and I almost hit it, but then I realized I had never set up apple pay before and the text message from the 2FA was something about apple pay.

I decided to hang up and call my bank and tell them to put holds on all my accounts. Fortunately they weren't able to take anything and my credit card handled fraudulent charges through the normal process. It was really scary. I remember walking away thinking "wow, I was probably one button press from losing my entire bank account".

I can't even imagine how many people they get with this setup. It's horrible. I agree these people are evil.