The order matters: hang up, call 159, lock your accounts, report. Banks can hold a suspicious transfer for four business days, and APP re…