If anyone from IT calls you, you should be able to call them back at their extension. Or that's a red flag.

We used to have fun with William the "Windows Tech team agent" (from India) . He (They) would call us at least once a week. I think they might have had a successful attempt otherwise why would they keep calling.