iam not sure why people still fall for phishing attempts when 99% of them are so obvious, also get an authenticator for your account (preferably the physical one) though the mobile one works just as well