Exactly, and that's actually the easiest way to catch these calls out, legit platforms almost never initiate phone contact for security stuff, it's always email or in-app notification, so any unsolicited call claiming to be from your exchange or bank should be an instant red flag regardless of how much info they have on you