It is transaction specific. The problem I see is if I received this without expecting it, I'm not using any links and I'm not calling a number I don't know. In the last few days I received text messages saying "Your information was compromised! Do you recognize the following transaction..." and there is a cryptic link. I also came in 3rd in an Amazon Apple Earpods giveaway and there was another cryptic link to claim my prize. My son (why I got the text I have idea but it used his name, won an Apple iPad, he was 1 of 10 winners, yippeee.
My point is, have them call the bank's main number and ask for a person or extension, not a direct number. Transparency is safer even when it includes multiple steps.
My opinions are not necessarily my employers.
Rules and Regs minus Relationships equals Resentment and Rebellion. John Maxwell