Thanks for the update and posting this here. You could always just ignore it and it will be the user problem for being careless.
It seems like someone wants some free coins without any hard work.
Users should use a strong kind of password if they want it safer.
I recommend to not use passwords from your social media accounts also. There have been a lot of news on how easy this people could just hack on anything under the social media pages.
Facebook is locking my accounts one by one, 13 of them, because i have not mobile, they want my KYC (know your customer) maybe. Some of us have not MOBILE.
But, they think we must have. They want to say: "if you have not mobile then you are not you" ... correct! It seems that they take us as clients (customers and consumers), but we are USERS (onliners and clickers). But, after some latest of my problems on dice sites I see that we can log in over Facebook and Twitter and other Social Media and maybe that is why they ask additional safety over 2Fa and mobile, to fight back the hackers who can profit us! But, okay, it has to be optional: if you want more safety, well, secure it more!
However, the principles and procedures from real offline (mundane) life should adapt to our virtual online (divine) principles (styles and methods). Why i say divine for online sphere? Because I am considering Internet as a temple while some others are taking it as T&T, mainly! I mean trade and tradition!