In theory, you would first call your bank consultant to verify the number is legitimate. (Supposing the existence of a process which is not completely broken.)