No citation, but your bank's responsibilities
never extend to talking to someone on the phone. Your possible responses run the gamut from 1) refusing to 2) imposing any conditions you wish.
If an individual claiming to be an LEA or regulatory agency representative calls, the bank simply needs to make some effort to make certain it knows it is talking to someone who has
already seen the SAR. Some bankers also ask the caller what office of the LEA he or she is calling from then look up the number in a public listing and call them back. Under some circumstances, I would do both.
Even after I'm sure that I know the person is an LEA officer and is looking at the SAR, that does not mean we are going to have a warm exchange of information where I answer every question asked. It depends on the question...