Just got a scary call from a very convincing scammer :/

1. Hi, it's your bank. We just blocked fraudulent activity associated with your debit card starting in 1234.
2. We also blocked your internet banking. Verify that if you want. (yes, it was blocked.)
3. To recover your debit card, please come to the closest branch
4. We now just need you to authorize a change in your password because of law 12343456 of the consumer protection what not ...
5. Please open your banking app, do not login (cause there I would have noticed that nothing was broken and that no cellphones were bought with my card)
6. Click the "BE Pass" below to authorize this complicated protocol we are following here.

Turns out, they knew my name, national ID, maybe not the debit card number as these all start the same with the same bank, my phone number and my email address that I exclusively use with that bank. They made 3 failed intents to get into my online banking so it got blocked, went to the "recover my login using the banking app" page, called me with a well trained scammer and when they thought I was ready to click "ok" within 3 minutes - the time you have for these BE-Pass authorizations - they hit ok on that "change my password" page.

I hate I did believe it was my bank for so long, despite noticing some red flags early on during the call.