3) Anybody calls you and says they are from your exchange and request for access/password,just hangup the call !
Only fools will do it. I'm not sure the scammer will succeed this way.
but to watch out for this might happen. you should check every information that comes in so that it is not fooled by fraud.