Duped by a fake bank call? Know your rights after an unauthorised debit