Such data is not considered confidential banking information, but fraudsters can use it as part of a scam