This has been a very old method through which people's online wallets and exchange wallet were asked. I never thought anyone in cryptocurrency world will still fall for it. I think is now very pertinent that one knows the websites he or she want to visit offhand before inputting or creating a password on them.
For wallet websites, bookmarking the main page of the wallet site and using the offline version of the online wallets can save the user's time.
The mobile apps also have the inside browser which is targeted by the scammers, the real authentic email copies are used for tracking the users.
Even 5 people from 100 people fall to this trap, it is enough for scammers to continue their dishonest behavior.