This is an ugly scam. Please talk to the less savvy folks in your life so they know the signs.
I think I just barely escaped a shockingly savvy scammer trying to get my bank credentials.
First, whoever it was had my actual phone number, my actual bank, and the last 4 digits of my account. They sent a "was this transaction you" message that looked almost identical to the ones my bank sends.