In re your first point, it's tricky because the advice is to call them back on the publicly available number. Problem is, I know somebody who fell for a SEO hijack and called a fake number. Not everybody knows how to spot a scam. The guy here did though, and he used my techniques (ask questions they'd know the answer to). He knew he was getting scammed. I think it was just an emotional override with weighing the risks. This one is very different than a call saying the IRS wants Google Play gift cards or whatever. Especially with the scammers having the woman actually show up. That's next level in all the wrong ways