[US] weird scam, fake bank, possible identity theft?

A user's girlfriend received a scam call from someone claiming to be her bank, who requested her PIN and personal information. The scammer later admitted obtaining details from the 'dark web' and lives nearby, prompting account freezing. The user seeks advice on next steps and the legitimacy of the caller's number.