They knew about number spoofing but ignored it when told. They knew about checking with an attorney, but didn’t do so. So many points at which they could have stopped this and didn’t. They aren’t nearly as sophisticated as they claim in the opening.
Also, in general, you should already have cash stashed away, outside of a bank, in case this or a million other things actually happen. Your assets can be frozen without warning or evidence against you. Going to the bank to withdraw large sums because some guy on the phone claiming to be an authority says so is always stupid.