CBA (largest bank in Australia) is very good about this and has scam info on the front page of their website, and drills it into you that they’ll never ask for any information over the phone and to call them on the main number if you’re ever asked.

I’ve had a call from them before and when they first greeted me they made it clear they know my full name and details, and told me up front if I have any doubts before continuing I can call the main number and use the voice-assistant to ask for a specific department. I did, and was put through in under a minute.

My previous bank wouldn’t even do 2FA other than via SMS, and also would only let you do 8 character alphanumeric passwords. The contrast between banks is wild for this day and age.

That's a red flag on that bank.

Doesn't have to be a name. They can quote department x and a code y which doesn't identify the employee. Once you call back, you can quote both and they can translate y -> employee name internally without letting the customer know any identifiable information about the employee.

I don't think this applies to calling back someone who just called you. Also people who have premium banking tend to use the same relationship manager every time without this suspicion.