Hang up and call them back on a number that you know is them (from their website). If it's a landline don't call back on that line, if they don't hang up their end you'll still be onto them, many have been caught out this way, the scammers tell you to hang up and ring to confirm, they just stay on the line and act as the bank/whoever.