Follow the same steps for callers whose voice you don't recognize, before giving any financial information or reading any codes, call the person back using a verifiable good number.
There was a scam which targeted landlines, where the scammer would call and then keep the line open while you "hung up" (except you didn't) and you dialled the known number of your bank. The scammer simulates a ringing line, and then answers as your bank.
All I’m saying is that if I were a scammer, I wouldn’t bother tricking someone into saying a specific thing. I’d just use gen AI. I’m definitely not arguing against “call the person back using a verifiable good number.” If everyone did that, we’d hear about a lot less fraud.