I'm sure you know that many web site will requite two factor authentication. They will call, text, or email a code to enter. I'm sure it add a level of security.
Got a typical scam call today. "this is your TV provider, We are updating you cable box, etc." They the offer a 40% discount and need your credit card information.
The call I got today was a variation. Said he was from Spectrum. Good chance he hit a Spectrum customer as they are the biggest. This time though, he said I'd be getting a call with a number and he would call back for it. Hung up, a minute later I did get a call from Spectrum with a code. The scammer called back to get it.
I'm sure they get away with this or would not be doing it. I've always told them I don't have a CC and pay by money order. They believed me and gave me an address to send it to. Yes, I did sent them something, a photo I got off a website that I thought they would appreciate.
I get may other calls for solar panels, roofing inspections, duct cleaning. My cell phone is originally out of state and they think I'm still there. I've made appointments for them to come out.