Never give personal information over the phone to someone who called you claiming to be a business.
If you get a call from someone claiming to be your bank that asks you for personal information (name, address, bank account number, debit card number, expiration date, CVV, or anything else not publicly available), DO NOT give it to them. Hang up and call your local bank. If the situation is legitimate, your local bank can handle it for you.
If you get a call from someone claiming to be from your credit card, asking you for personal information (name, address, credit card number, security number, expiration date, etc.), DO NOT give it to them. Hang up and call the number on the back of the card. If the situation is legitimate, they will handle it for you.
And while we’re on the subject, if you use Facebook, NEVER give someone else a code that Facebook sends you. Your friend cannot recover their account with a code sent to you. That code will only affect YOUR account.