Sorry for you loss. Phising is a shitty thing. YOu have to verify website address, or remember it on your browser with shortcut so you are sure that it's always the good address. Also enable HTTPS EVERYWHERE so it can detect this kind of attack.