Hi @kypton ,
You've been very sensible in being wary of unsolicited communications which you've received by email and possibly calls.
Absolutely you are correct to look after your security by not divulging any personal or important number unless you choose to.
For the benefit of others, I include the below recommendation to never give out any personal information to an incoming call:
Never give out your personal information in response to an incoming call, or rely upon the Caller ID as the sole means of identification, particularly if the caller asks you to carry out an action which might have financial consequences.
If someone rings you asking for this information, don't provide it. Instead, hang up and call the phone number on your account statement, in the phone book, or on the company's or government department's website to check whether the call was genuine. Wait at least five minutes before making the call - this ensures the line has cleared and you're not still speaking to the fraudster or an accomplice.
https://www.ofcom.org.uk/phones-telecoms-and-internet/advice-for-consumers/scams/phone-spoof-scam
