Stop and think for a minute: What would
you do if you didn't receive an expected verification code?
Would you go to other sites and try to receive additional verification codes? Probably not.
Would you go search for another phone, call yourself, in order to discover whether, by some chance, someone else happens to have your phone number? Probably not.
And if you did call your own number and find someone else answering, would you decide that this is wonderful, now you can trust this complete stranger with the code that is supposed to verify your own identity? Probably not.
What you'd probably do is call your bank, and they'd verify your identity in some other way, as they did before verification codes were developed. My bank has asked for personal information that should be known only to the current account holder, such as which branch you originally opened the account in.
IDK what the scam is, but it could be a rogue employee of the phone company or bank or credit card, who actually has additional personal information about you already, even though you're not planning to use this phone to access your accounts.
It could be he doesn't have that info yet, but after you kindly agree to give him the codes, your defenses will be down and you'll agree to give him the additional info he wants.
Maybe a port-out scam, which I don't completely understand, but is described here:
https://www.fcc.gov/port-out-fraud-targets-your-private-accountsWhatever. Hang up, ignore.