A sophisticated callback scam turns your good habits into a vulnerability. Here’s why you should never hang up on your bank.