There's a certain Indian public sector banking app which won't run at all unless you give it camera, full filesystem and some other crucial permissions. I have

There's a certain Indian public sector banking app which won't run at all unless you give it camera, full filesystem and some other crucial permissions. I have not received any spam similar to the OP from my bank. But it seems (at least the popular belief) the lower level employees regularly leak your account details to scam callers.