Consider this a simple rule: never share your PIN, CVV, OTP, or online/mobile banking password with anyone.
And never send a photo of your card (front and back) or its full details in a message.
While your bank might need your identification when you contact them through an official channel, that's very different from someone suddenly calling you and asking for your card details or verification code.