Always, ALWAYS go straight to your bank’s own official website when you get notices like this
Do not engage in any conversation not directly initiated by you
I think I just barely escaped a shockingly savvy scammer trying to get my bank credentials.
First, whoever it was had my actual phone number, my actual bank, and the last 4 digits of my account. They sent a "was this transaction you" message that looked almost identical to the ones my bank sends.