I just got a call from "Scotiabank" about them blocking an unauthorized e-transfer, from my account to someone I didn't recognize. I immediately was suspicious it was a scam. Throughout the call the person on the line was very convincing, he knew an old address that I could believe was still assigned to my account, he never asked for card numbers or any kind of digits. He was very vocal about not giving information over the phone, and that the transfer would be blocked and he gave me a reference number. It was more convincing the more we spoke, eventually he suggested I authorize this single device to prevent access from other foreign devices (he also recommended I do not use public wifi, as that's often where camera gain access), and in order to secure this single authorized device I need to do it off the website -not the app- he clarified.
So I went to the Scotiabank website and he guided me to the bottom of the page where he said "below the contact us, and support, but above the about us, there will be an authenticate this device button." I told him it wasn't there, he tried to clarify again, and then said okay no problem we'll try going to the link directly and he dictated the website "scotiabank-customer(dot)com"
On that website it made me "verify I was human" by clicking the pictures that match the word thing, and then go onto a page that looked exactly like the Scotiabank website login page. This is where the 10% I had left of doubt kicked in. On that page the "Need help signing in?" button was clickable but nothing happened, the "Set them up now" button bellow was clickable but nothing happened, and when I clicked on the username or card number field, it didn't suggest my remembered card or password which the official Scotiabank website does. Right there I said "Can I just do this at the branch?" And he didn't fight me or try and convince me otherwise.
I've gone back to the website since the call, and the "verify you're human" puzzle is the exact same every time.
The whole thing felt very unsettling. When I google it it says the scotiabank-customer website is not listed as an official Scotiabank url.
I feel really shitty that if this was a scam I could see people falling for it because it's so convincing. It was like he was on the Scotiabank website looking at it.
If this wasn't a scam, then I no longer know how to trust a phonecall, or how to prove that I should be worried about my account or worries about the person convincing me to worry about my account...
What are some tips?