Holiday (Active scam/Phishing) Season - Time for Awareness re-training. Here is another useful article from Europol that you could use

TIPS

• Your bank  (or most organizations for that matter) will never ask you for sensitive information such as your online account credentials over the phone or email.
• If an offer sounds too good to be true, it’s almost always a scam.
• Check your online accounts regularly.
• Check your bank account regularly and report any suspicious activity to your bank.
• Perform online payments only on secure websites (check the URL bar for the padlock and https) and using secure connections (choose a mobile network instead of public Wi-Fi).
• Keep your personal information safe and secure.
• Be very careful about how much personal information you share on social network sites. Fraudsters can use your information and pictures to create a fake identity or to target you with a scam.
• If you think that you have provided your account details to a scammer, contact your bank immediately.
• Always report any suspected fraud attempt to the police, even if you did not fall victim to the scam.

https://www.europol.europa.eu/activities-services/public-awareness-and-prevention-guides/take-control-of-your-digital-life-don’t-be-victim-of-cyber-scams