> 3) "We've sent a verification pin to your phone."

> ~ Gets verification pin text from bank's regular number ~

> Me: <reads out the pin>

I think I'd be able to stop them and refuse at this step. But I suppose it depends on what sort of text shows up in the verification SMS message.