The scammers are posing as the bank’s fraud center and asking recipients to verify their Social Security number, date of birth, and debit card PIN. The Bank of Hawaii emphasizes that it doesn’t ask for personal information via phone calls, emails, or text messages, and recommending that anyone receiving such a call should hang up the phone immediately.
Caller ID spoofing is easy, and can be done with many free tools online, so the caller ID display shouldn’t be treated as a verification that the person on the other end is who they say they are. You should immediately be on guard if someone begins asking for information over the phone. If a company or government agency calls you and asks for information, you should hang up and call the company or agency using the contact number on their website or the number printed on the back of the card. In most cases, the call will turn out to be a scam.
Organizations should have processes in place to prevent sensitive data from being exfiltrated over the phone. New-school security awareness training can teach your employees to be extremely suspicious the moment someone asks for personal or sensitive information over the phone. The Honolulu Star-Advertiser has the story: https://www.staradvertiser.com/2019/11/20/breaking-news/bank-of-hawaii-warns-of-vishing-scam/