If that's probably true and with the way I see it, you don't lose just your money but have been phished for your identity (if you went through with the KYC process) and possibly depending on if you did input your private keys or seed phrase, that too is no longer private. Hence, your privacy is compromised and as such, you can adopt measures like transferring your coins to another safe and protected wallet with a 2FA security activation in place.