What has actually happened? All you've explained is "they said they would lower my bills" and you have someone your details.
If you suspect a scam, then it's wise to consider any and all of the details you have disclosed, as compromised - report to your bank and get any passwords changed.
By giving someone the PIN received on a one-time-password, that would allow the third party to access whatever account it related to.
