I got an unsolicited call from Fidelity once and they asked for a bunch of financial info. I told them I'd call back on their official number and they said that's not possible, I had to answer right away. So I told them to pound sand. Afterward found out it was legit when they sent the same form by mail.