I find that when it’s legit a consistent thing happens, which smells of careful training: they instruct me to call the number on the back of the card, or on a bill.

▲

TOMDM 4 days ago | parent [-]

Obvious next step to me is malicious bills sent to an address

	▲	euLh7SM5HDFY 4 days ago \| parent \| next [-]
		You are a bit late with that idea: https://www.justice.gov/usao-sdny/pr/lithuanian-man-sentence...
	▲	incone123 4 days ago \| parent \| prev [-]
		Only worth it for a targeted attack. Even then I might just read the number off a genuine bill instead of their fake one. And that's assuming they have linked my address and number - lots of scam calls are low effort dial every number.