I believed them and stupidly ended by giving them the details. I was monitoring the card and soon enough saw the balance being drained from it. I tried calling that number but as expected, it was out of service.
I called them today from a different number and it seems they are active again. What's a good way to mess around with them? Can I find some details or go after them? I am a software engineer by profession and willing you try out something new.
Inform AT&Ts security department, and if they dismiss you and don't replace the card, then inform the media. AT&T should be motivated enough to setup a sting and put people in jail over this, but if they're not the media can embarrass them in to it.