Reset every exposed account and lock down banking
Speed is everything. Codes are single-use but passwords are reusable — change them all from a different device while you're on the phone with the bank.
Why 'a different device'
If the scammers asked you to install or open something during the call, the device may be compromised. Doing the recovery on a known-clean device prevents them watching the cleanup.