Phone scammers are emptying retirement accounts with one fake Medicare call. Here's how to spot the trap before it costs you.