Threat actors are getting really creative these days and it's very scary that they use normal harmless processing for their malicious activities.
This is a call from use to be extra careful... You really cannot be too careful especially when it comes to your funds... You have to protect it at all cost.