There is one simple rule: If your bank calls you for anything, tell them you call them back, then look up their number you have (or the one on your credit credit or whatever) and call them back. Period.
Even if your bank is really calling you they will still understand if you call them back on the number you have.