Just read this news over at Netcraft and it feels important enough to warrant news coverage, attached in the comments below you will find the whole post on Netcraft, basically Fraudsters are not only attacking web-based banks, but now also via phone...
Remember: No one will ever ask you your password or number associated with anything, be it e-mail, bank cards, online banks like Citibank Paypal etc etc!