How is it possible today to lose so much money with a phishing site, you just have to be carefull and make sure you are on the right website!
It's because he didn't check everything before clicking that phishing site until it was too late when he lost a whopping $1 million already. That's why we really need to think twice before clicking any link specially crypto related in our email because we really don't know for sure if that is a phishing link or not. Reminders are good, but if you are a Ledger user and not taking notes or reading them, then one day you might fall for this attempt.