I was about to post something about this here. I will be adding your part about possible phishing when telling others about this.