Get the bank's phone number online or from another independent source (not from the caller) and call it directly for verification.
You should avoid sharing personal information over the phone unless you have initiated the call.