You cannot trust the phone number just because it appears to be from your bank, or HMRC