SMS/email from your 'bank': account locked, verify now

A text says your account or app token is blocked. The link leads to a perfect copy of your online banking. Shortly after entering your data an 'employee' calls and has you approve a code — which confirms a transfer or a new device. Warning signs: Time pressure: 'within 24 hours' or your account closes; Link with a slightly different domain; A phone call right after you clicked; You are asked to approve a code for something you did not start. What to do: Block online banking through your bank hotline, change passwords and file a report. Typical loss: 500–15.000 €.