Really good catch by Courtney here on a complex scam. A couple of quick notes from a security person:
I think I just barely escaped a shockingly savvy scammer trying to get my bank credentials.
First, whoever it was had my actual phone number, my actual bank, and the last 4 digits of my account. They sent a "was this transaction you" message that looked almost identical to the ones my bank sends.