Your phone is not vulnerable, just your debit card. Contact the bank that issued the card and immediately report it to them so they can close your account and issue you a new card.
Now that scammers know that you will follow their instructions and enter your card details, you can expect more scams. It is not the phone that is the issue, they will be sent to your email address/phone number no matter what device you use. As always, you just have to be vigilant and never enter any personal/financial information from ANY message or email, no matter if it is a phone number they want you to call or click a link. That will solve the problem.
Recognize and avoid social engineering schemes including phishing messages, phony support calls, and other scams - Apple Support