[theold]

Some use this method.

Copy the bank or postal website.
Send you an SMS link to their fake website.
They access the real website.
You access the fake website.
Likely, when you key in, the data will be shown on a big screen at their side.
They just need to key in what you had keyed in.
From there, you lost control of your money.

Others have access to our telephone system.
Be careful of those websites with credit card details. Technical staff can have access to your email account with the service providers built within.

If there are more controls, it will be harder for the technical staff to solve your problems.