[albedoa]

I've been called by Chase and at least one other for fraud alerts. If I recall correctly, the Chase message instructed me to call back using the number on my credit card.

It is not correct that banks will never call you in the US.

[mcny]

However, a bank should not ask you to verify your identity when they call you. This is the missing piece. If anyone calls me, I should not give them any information they don't already have. If they are the fraud department, they already know everything.