They make a lot of money as people don't realise the risks. Banks would never ask you do that and anyone can pretend to be them on the phone.