No hacker, no crime, no bank on the other end of the line — just a script designed to make you empty your own account. Here's how phantom scams work, and how to hang up in time.