I told them as much. I spoke to a manager about it once on a call and I'm like, how the hell do I know you're actually the bank? You've given me nothing. Then you're asking for my uniquely identifying personal information via a voice prompt. Literally anyone could spoof all of this and you're training your clients to just hand over the information when asked, not even by a person, but by a robocall.

Yeah, I got another a few months later, same shit.

I feel bad for the customers of that bank. They're not my primary bank so I couldn't give a shit. I'm also security focused enough to know better.