General guidance · nothing checked
You haven't shown us anything, and you don't need to. This is what we'd say to anyone who described this.
Is it safe to send?
A one-time code, read out to someone ringing from the bank
Never. Hang up now.
Put the phone down before you finish reading this. You can ring the bank yourself in a minute — it costs you nothing.
What the scam version looks like
They already know your name, your address and the last four digits of your card, so they sound legitimate. The words "safe account", and any request for a code, are the whole tell.
Doesn't go out of date
If a code logs you in or approves a payment, nobody legitimate ever needs to hear it — not your bank, not the police, not any company.
Got something specific to check — a link, a message, a code? That is what Verret is for. This page is the general answer.