Concretely, the way to respond is this:
If you ever get a call that claims to be from business X, tell them "OK, I'll call you back." Then get off the phone, look up the number for X yourself, and call them. If it was really X calling you, you'll get back to where you need to be. If it was a scam, X will tell you they don't know what you're talking about.
Never trust that a cold call is from who they say they're from.