There're many ways using like legit url that actually phishing. The scammer targeted newbie who rather greedy. Stay safe people