I just wanna add on, my fiancé had to learn to recognize scams when he worked at a credit union, and he said the main way scammers work is by scaring you. They put a ton of pressure on you, insist that this needs to be done right now and that you not hang up, make it sound like you're in danger and they're the only person you can trust bcs people don't make rational decisions when they're freaked out.
The "don't hang up" thing is textbook, one way you can def tell if someone is a scammer is that they will get really mad at you if you try to hang up and start upping the stakes and putting more pressure on to make you panic, and my fiancé told me basically every scam victim is a person who comes in wanting to withdraw a large ammount of money, who looks scared, and is on speakerphone with someone who is insisting they not hang up no matter what otherwise something bad will happen.
And like the scammer saying "don't tell the bank what you need them money for bcs the identity thief could be working there" is so genius in how evil it is specifically because the bank employees are trained to recognize in progress scams and they will absolutely try to intervene, he's making sure she doesn't trust the only people who could help her realize what's going on before it's too late.
So yeah this is kinda obviously a scam, but smart people fall for scams all the time, and this one clearly used all the tricks to get inside this person's head(especially dragging her kid into it, that is def gonna make any parent start freaking out bcs they'd do anything to protect their child) until she was so scared/stressed that she couldn't possibly think rationally enough to realize what was going on.
Generally, a good way to try to protect yourself is to remember that scammers want you scared and stressed out, and if the person on the other end of the phone starts insisting you can't trust anyone but them and getting angry when you try to hang up then you should hang up and call wherever they said they were from yourself to confirm if that was an actual employee/agent or if it was a scammer. Remember: most actual banks/credit unions understand that not everyone can talk right away and won't get mad when you ask if you can call back in an hour or so, and if you're really in enough danger that the CIA is involved you're probably not gonna be hearing about it over the phone.