I was just subjected to the most credible phishing attempt I’ve experienced
No US bank will ever ask for a password/PIN so i'm not sure why this is any more credible than any other attempt.  It is just a little longer getting to the point.Scammers have been triggering password resets and 2factor to seem legit for long as it has existed.