Bank apps should have the ability to see if you're on a call when the app is opened. If this is the case and the call doesn't actually originate from their systems, they should ask you whether you're currently called by them and freeze your account if yes is clicked.