your "bank" was, in fact, not your bank at all.
I had a woman come in yesterday wondering about a couple shirts we'd ordered for her...on Sunday. She showed me a text from UPS saying they'd tried to deliver a package to her house on Sunday but it was "undeliverable" because she wasn't home. I had to gently explain to her that...
a) she came into the store and ordered shirts AFTER she got the email, not before
b) we don't use UPS unless a customer specifically requests it--we use USPS ground, or USPS 2-3 day service if the customer absolutely has to have the item sooner rather than later
c) her text said the package that couldn't be delivered had gone to Dallas, Texas...this customer doesn't have an address in Dallas, and...
d) we don't require a signature when shipping items from the store.
I had to (again, gently) inform the poor woman that it was a scam, and she told me she'd already given them some personal information. All she could do now was talk to her bank or credit card company (she didn't tell me specifically what info she gave out) and let them know she could have some fraudulent charges on her card or funds taken from her account.
(ETA--I also told the woman that we're pretty good at shipping items quickly but it was highly unlikely something ordered on Sunday afternoon using USPS standard shipping would show up before Tuesday morning)